Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/08ZzrnMqVXXUWn7X_zDhBvOrjJQ.roa
File: 08ZzrnMqVXXUWn7X_zDhBvOrjJQ.roa (raw, json)
Hash identifier: SWYNX68cHAhjRP2BTHk7croD3ku3izoLs4Mp5onev+k=
Subject key identifier: D3:C6:73:AE:73:2A:55:75:D4:5A:7E:D7:FF:30:E1:06:F3:AB:8C:94
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 21A1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/08ZzrnMqVXXUWn7X_zDhBvOrjJQ.roa
Signing time: Sat 21 Jun 2025 09:41:46 +0000
ROA not before: Sat 21 Jun 2025 09:41:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8609 (0x21a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 21 09:41:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D3C673AE732A5575D45A7ED7FF30E106F3AB8C94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:42:51:e0:db:85:ca:f8:f5:72:05:36:ee:
e1:d5:12:29:7d:50:da:3e:1c:f3:b1:f9:a9:de:38:
28:23:6c:59:61:51:a3:48:98:da:ac:a3:18:27:b3:
95:ae:fb:9b:f2:fb:2d:9b:76:64:b6:97:08:7e:19:
90:00:e3:ee:5c:98:b4:e6:63:1f:19:1c:14:3f:53:
c2:82:bf:d2:05:74:6e:89:f2:5f:31:0a:88:41:00:
95:2a:e0:89:45:00:9a:60:cb:92:98:b7:9c:34:96:
1f:7e:1c:49:80:6d:a2:b5:4f:b1:21:47:cf:70:05:
93:e9:82:af:5a:ad:19:71:a6:5b:e3:5a:75:07:70:
c0:a8:b6:20:7a:66:c5:36:3e:12:72:8a:29:20:36:
e1:05:ad:0d:43:8e:48:3b:fa:b1:7a:07:aa:67:13:
c2:4e:4b:5f:f3:8d:7e:76:45:08:4c:31:d7:3f:32:
b1:da:f9:1f:6f:f2:05:a0:ff:45:aa:da:2c:89:e3:
23:8a:79:1f:3e:3b:b4:54:32:2e:35:69:e3:ac:f6:
48:07:6e:5f:28:40:1f:5d:50:26:2e:61:8f:db:16:
57:9f:a0:b8:4e:5e:8e:8d:fd:d5:82:f3:e2:42:3f:
a7:16:9f:97:58:92:7b:c7:d7:f1:5d:54:fe:4b:cf:
77:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C6:73:AE:73:2A:55:75:D4:5A:7E:D7:FF:30:E1:06:F3:AB:8C:94
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/08ZzrnMqVXXUWn7X_zDhBvOrjJQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:c7:13:fc:6e:4b:25:5f:46:5f:59:cf:02:d0:f8:c4:4c:57:
2e:71:8f:f1:c5:a5:ad:48:68:99:11:4f:80:94:48:ba:3e:f9:
8a:05:95:13:e3:61:4b:5f:52:81:cd:9d:4b:17:72:a3:e9:5d:
37:1a:54:fa:2f:bf:f7:9d:a0:f1:28:b8:b0:0c:19:ce:b7:9b:
77:53:55:c5:0d:c0:6a:9b:fe:cf:e4:ee:1b:8f:66:34:bc:6e:
4c:bb:8c:af:99:e3:9e:84:a1:3b:45:73:ba:ad:5e:58:f1:1f:
37:cc:a2:c3:f2:10:ec:ea:e0:73:84:e5:eb:d1:8a:24:f5:25:
fa:d0:dc:d8:c9:fe:a7:65:f7:2c:69:a6:32:5d:19:95:44:6a:
40:3c:7d:c1:97:f4:14:0c:90:ce:7a:b3:5b:02:88:9c:5a:6d:
1a:17:32:6c:26:74:8a:a9:a1:80:2d:17:5d:77:5e:45:bc:81:
ae:ab:8c:5a:4c:f9:e0:5c:5f:36:18:f0:98:2a:83:1f:2a:dc:
43:bc:40:0f:9c:28:b5:78:59:6f:af:dd:d8:67:80:11:a4:78:
2a:0a:e9:13:70:94:d5:d4:7a:2f:91:ef:4b:9e:ba:aa:21:1c:
8a:74:43:7a:74:7f:c1:f4:4c:da:3d:71:52:a0:f8:65:46:56:
fa:54:37:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:39:32 2025 by rpki-client