Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/5VfqAJ90pZnGdqiHf5mbl43Gw5w.roa
File: 5VfqAJ90pZnGdqiHf5mbl43Gw5w.roa (raw, json)
Hash identifier: /1GY5xraQeeIfLX1oAspDgAgTcWOHX/GBxzUAd9A8dc=
Subject key identifier: E5:57:EA:00:9F:74:A5:99:C6:76:A8:87:7F:99:9B:97:8D:C6:C3:9C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1DBD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5VfqAJ90pZnGdqiHf5mbl43Gw5w.roa
Signing time: Sun 15 Jun 2025 17:39:59 +0000
ROA not before: Sun 15 Jun 2025 17:39:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7613 (0x1dbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 15 17:39:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E557EA009F74A599C676A8877F999B978DC6C39C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:47:cd:b0:69:c7:26:ed:5f:c9:71:11:c8:
7c:64:bc:5e:e6:90:f2:97:56:27:70:15:e5:d7:4b:
b7:8e:f2:ec:a4:d7:3a:86:41:0b:d5:bb:bf:73:f7:
05:49:54:31:ae:23:d5:bc:77:e9:c0:48:b9:64:e7:
a9:d9:69:ad:fb:ea:8b:06:75:1b:c4:b7:bf:aa:2e:
a7:a4:05:08:91:69:74:9d:8b:9c:43:66:f2:bd:b7:
88:a5:1b:57:3b:f5:35:38:b4:43:f4:b2:04:a8:16:
44:a7:6d:8a:b3:50:3e:4f:87:53:d4:86:5a:ee:31:
13:d4:91:59:f0:5a:e6:34:37:58:11:ea:c7:19:c0:
84:0d:25:1a:11:ce:cb:4a:71:df:b4:3f:e7:17:97:
0e:9e:ce:09:9c:98:b5:18:a0:2b:5c:d4:70:69:b9:
f8:7f:c1:62:6c:cb:13:93:38:d1:84:ce:91:89:b6:
bf:25:25:62:d9:51:a7:91:de:21:99:17:46:48:0a:
09:af:6f:33:a2:44:b4:7c:d6:cd:80:f2:d7:0b:5a:
81:c5:29:22:6a:99:7b:21:66:79:f3:0c:fc:8b:35:
5c:0a:2f:2a:9f:45:05:1f:08:73:45:68:13:34:12:
05:35:1d:e1:20:9a:a1:20:92:1f:9a:47:fc:1b:b8:
15:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:57:EA:00:9F:74:A5:99:C6:76:A8:87:7F:99:9B:97:8D:C6:C3:9C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5VfqAJ90pZnGdqiHf5mbl43Gw5w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:79:f7:5d:5e:c7:40:82:8c:02:2e:72:1d:ed:7e:47:5c:72:
fe:63:b4:5a:2a:28:1e:0f:3c:22:18:69:2d:42:75:6f:2b:c4:
b2:c8:ce:1f:5f:9e:04:a9:48:c0:63:be:3f:6f:3e:32:76:33:
e3:9c:86:4d:b2:49:55:a8:b6:7b:33:94:1a:fd:e8:36:d2:d2:
9f:47:21:85:ba:63:b0:d5:68:42:61:0a:e7:ee:c6:d8:00:05:
f9:bd:6f:ba:bb:59:55:a3:9d:66:ed:bd:a0:15:14:49:6c:47:
c0:41:2c:7e:2e:f5:c7:51:39:f2:d9:c4:6a:0c:56:f0:fd:cb:
60:b3:f9:a2:6d:5e:40:ce:c3:d1:db:50:41:16:cb:38:b0:d5:
97:3b:3c:e5:47:7c:89:91:8d:2a:22:dd:8c:7b:b0:ed:10:33:
db:0f:7f:cc:ac:a0:9a:80:1a:bd:5b:e3:9a:47:60:93:ef:c9:
00:0a:4f:71:1f:82:a5:87:0b:94:84:6b:d2:b8:a4:63:25:6e:
b3:11:c8:81:0a:f6:e3:77:d3:f8:8b:df:b3:80:99:c9:19:19:
51:66:35:9f:b5:6e:58:60:08:9a:b9:61:6b:42:90:bc:a0:2f:
6b:36:c5:ae:ff:ee:a7:c6:07:b4:84:07:54:c5:a2:18:65:7c:
fe:90:ea:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:09:58 2025 by rpki-client