Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/6SGRcUh_6Mb1ljfunubNanYXAd0.roa
File: 6SGRcUh_6Mb1ljfunubNanYXAd0.roa (raw, json)
Hash identifier: jpXm7qwQpSUX41UHBpN4Eu23KxRAmoQLZjJbClQMyuc=
Subject key identifier: E9:21:91:71:48:7F:E8:C6:F5:96:37:EE:9E:E6:CD:6A:76:17:01:DD
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2425
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6SGRcUh_6Mb1ljfunubNanYXAd0.roa
Signing time: Tue 24 Jun 2025 18:12:11 +0000
ROA not before: Tue 24 Jun 2025 18:12:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9253 (0x2425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 18:12:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E9219171487FE8C6F59637EE9EE6CD6A761701DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:90:b2:d6:99:be:5b:d9:6f:e7:3f:f6:f1:
1e:b7:2f:65:56:40:44:95:25:97:0f:0a:1c:2a:ce:
ed:36:96:40:64:c9:34:91:b0:29:d3:8f:65:8d:94:
ee:d9:b8:cf:53:1a:6c:dd:95:1a:ef:76:ad:eb:c1:
1d:37:8a:8d:21:3f:a7:15:e6:f0:8f:c3:cb:ba:4f:
9f:6c:fb:29:c4:b7:78:c6:f6:5c:32:3c:37:2c:e2:
ba:eb:d0:93:5e:7a:b1:a2:d0:65:e0:45:d2:15:ff:
50:a0:dc:3b:a1:d9:f2:50:fa:a4:5a:8e:20:07:20:
08:e5:7e:36:64:ad:9d:ef:6b:bf:fb:1d:30:76:5b:
34:d0:96:75:27:bd:2a:3c:c5:d4:e3:bb:1d:6e:a9:
66:83:28:f6:15:a1:a9:fe:32:76:91:5e:14:22:7e:
59:fe:c8:98:f8:8a:d2:0a:5a:a3:17:08:ee:f5:c3:
e8:42:1c:6a:9f:4b:eb:6a:c5:dc:63:15:ee:8d:db:
c0:40:a1:65:2f:33:73:85:cb:e9:c6:70:1d:37:d8:
83:80:3a:3b:56:ba:90:53:0d:a5:50:da:2c:9b:be:
ff:b8:fa:9c:82:f6:d0:51:17:13:cd:71:d0:8a:59:
97:47:d9:ad:2f:9a:9d:a9:e7:9d:c6:10:d0:28:e7:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:21:91:71:48:7F:E8:C6:F5:96:37:EE:9E:E6:CD:6A:76:17:01:DD
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6SGRcUh_6Mb1ljfunubNanYXAd0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:c6:82:2c:58:fd:e7:77:9e:e7:d5:20:b5:82:c0:f6:dd:1f:
1c:2c:8c:19:b1:d3:55:ee:37:c7:ee:42:2e:26:eb:e4:cd:d4:
3c:a5:4a:a0:6f:ba:0a:f4:8c:b8:d5:05:f1:8d:1c:26:57:71:
07:b5:a8:c4:d8:d6:01:be:88:fd:d3:b0:ab:a1:04:24:c9:75:
1e:c3:16:b8:ec:13:1e:82:5e:f4:53:c5:1d:2e:f1:91:dc:b2:
3f:5c:d0:7e:76:b0:fe:c8:1a:7c:f3:af:97:80:62:b4:99:80:
17:14:61:cf:1e:c2:98:4d:9e:12:db:d9:38:52:4c:4b:13:ba:
30:cc:68:35:cb:6e:85:bb:ae:75:1a:1c:dd:80:42:30:6b:fd:
a5:f5:a3:c7:d3:6e:b1:76:54:de:1a:20:28:fd:77:d1:56:02:
cb:ab:3b:c0:41:7c:2f:d2:67:6f:1d:39:eb:c0:70:b7:dd:88:
1e:d2:a0:16:dd:b9:09:c8:1a:7d:a2:e9:f6:d2:a9:63:ad:f1:
46:b6:d3:bd:6a:59:16:f7:d8:52:9f:c6:85:0e:f8:34:a1:5c:
5e:17:d5:50:fd:ad:2e:53:1a:d7:27:8e:e7:2f:ff:e3:60:16:
1e:01:67:eb:21:4a:37:43:93:b9:2b:ca:3e:a5:f5:2a:ee:d9:
8e:08:4b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:09:05 2025 by rpki-client