Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/75ZgJllgsS2B94z4VOlXMR7oOrk.roa
File: 75ZgJllgsS2B94z4VOlXMR7oOrk.roa (raw, json)
Hash identifier: Lgknn+NcTUDxUtdxyDpVn5bfXXvH7mUs5RpJz4p1Ty0=
Subject key identifier: EF:96:60:26:59:60:B1:2D:81:F7:8C:F8:54:E9:57:31:1E:E8:3A:B9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0EE1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/75ZgJllgsS2B94z4VOlXMR7oOrk.roa
Signing time: Mon 26 May 2025 22:08:47 +0000
ROA not before: Mon 26 May 2025 22:08:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3809 (0xee1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 22:08:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EF9660265960B12D81F78CF854E957311EE83AB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:17:a6:97:be:f6:32:2d:96:40:e8:58:32:
f6:06:ac:ad:24:bf:e7:4f:cd:b2:16:c7:d3:4b:32:
41:c5:e6:50:95:c7:1a:6c:3c:2d:8e:4d:3c:72:7c:
b7:1f:77:bf:43:7f:dd:20:5e:38:e4:7e:5b:f8:a5:
ba:ab:0d:b0:19:85:6c:5e:2d:e2:65:26:a9:34:ad:
f3:12:a2:0d:c5:4a:80:ac:75:01:5f:85:e0:e5:f5:
86:07:9e:9a:8d:b9:7f:33:aa:40:b1:31:ec:5a:88:
b5:b3:56:c8:c0:24:ac:37:a5:44:7c:cc:1b:5b:f0:
cc:a8:c3:1b:66:e9:49:54:1b:1d:05:81:d4:fe:91:
44:7c:b5:fa:32:73:dd:28:79:3a:35:75:43:cd:77:
04:51:c9:01:56:86:64:dd:79:18:bc:1b:db:93:38:
96:c9:8d:1a:00:37:f7:e9:0a:43:ff:59:74:65:4a:
dd:9f:93:3c:ca:91:73:6e:85:41:d7:10:f8:05:ec:
51:db:04:d9:b4:0b:a2:5a:f7:35:a0:aa:14:a7:f3:
d6:8d:f9:7a:b4:f8:3d:78:9a:bc:ab:01:ec:34:ad:
12:51:b5:df:4a:0d:27:78:28:31:e0:34:53:a2:31:
32:de:f5:ca:93:49:71:5f:0b:ab:8e:d6:e3:f7:cc:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:96:60:26:59:60:B1:2D:81:F7:8C:F8:54:E9:57:31:1E:E8:3A:B9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/75ZgJllgsS2B94z4VOlXMR7oOrk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:88:77:15:fb:f7:64:6d:9b:e3:7e:9e:eb:49:44:be:52:4c:
e4:87:06:c4:4a:12:72:ab:c8:58:50:e7:d8:ce:fa:28:91:eb:
7f:e0:16:76:9e:ff:1c:01:52:4d:cc:49:a4:f1:bd:51:e3:ea:
d9:d7:cb:66:49:d1:fa:e6:f4:37:1f:88:db:41:e0:cb:5e:b2:
13:42:71:15:df:24:c7:b6:94:52:35:01:eb:99:d5:e5:d5:c4:
ce:ad:e1:20:6d:ba:f4:21:19:52:f3:08:8a:dc:8a:1f:20:7e:
9f:99:4a:2e:03:60:ad:a2:10:40:d2:62:45:f1:8f:27:83:e4:
18:b7:d5:71:77:a0:fe:d9:1e:84:52:38:f3:99:dd:7a:c1:0c:
e9:7b:e1:ab:a6:9f:5c:f1:fb:bc:d6:7e:f2:52:d7:75:60:3e:
8b:56:0b:7b:2d:78:ea:ae:07:e1:c5:f3:41:15:49:2a:c8:39:
6a:40:ed:31:fd:8d:e3:36:da:d3:2d:8c:d3:75:bf:85:71:1e:
06:69:79:69:80:a7:e5:5b:d6:9f:1c:95:62:09:1a:e2:96:0e:
0a:bb:1f:ef:59:56:99:4f:fc:00:3a:03:b0:a6:ac:f9:61:6e:
4a:f4:ae:d9:ae:57:af:37:cf:21:fb:8b:82:b9:77:2b:dc:f3:
a8:fd:ea:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:10:12 2025 by rpki-client