Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/C6uY8aOepeLSv8D_baKuQLkOzIc.roa
File: C6uY8aOepeLSv8D_baKuQLkOzIc.roa (raw, json)
Hash identifier: kFfMA+ZaPZVrT9WDScjHWf4ta6OMpPAxAVwTyGS7rPU=
Subject key identifier: 0B:AB:98:F1:A3:9E:A5:E2:D2:BF:C0:FF:6D:A2:AE:40:B9:0E:CC:87
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03BD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/C6uY8aOepeLSv8D_baKuQLkOzIc.roa
Signing time: Mon 12 May 2025 01:37:55 +0000
ROA not before: Mon 12 May 2025 01:37:55 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 957 (0x3bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 01:37:55 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0BAB98F1A39EA5E2D2BFC0FF6DA2AE40B90ECC87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:58:ae:fe:14:16:9c:33:49:5d:c4:29:c9:a5:
11:c0:9e:17:0b:ca:5f:ab:c6:4e:b9:cb:50:aa:a6:
3a:74:2d:71:c7:f2:d1:f2:e8:c2:bf:53:81:d8:0e:
87:b2:a2:8c:8d:70:39:27:c3:6d:d5:59:73:3f:45:
13:32:c1:49:a0:b1:eb:a5:f7:11:ac:ed:f4:cd:d5:
96:b7:c6:08:c5:4d:7f:7c:ee:e9:c1:10:a3:a2:f8:
eb:52:77:8e:1a:da:c5:00:6d:a0:8d:31:aa:56:0a:
99:0b:20:4e:6c:1a:70:de:e5:1a:d6:f1:87:ab:5e:
50:db:85:1e:b2:39:59:cc:ec:05:f4:7b:ab:fc:8c:
cc:a3:bf:27:01:2c:c6:32:05:12:47:95:e4:7c:94:
c1:42:9d:8f:37:69:ac:36:37:d4:8a:19:56:af:79:
4c:b0:eb:ee:44:14:10:9d:79:dc:e1:37:33:5e:59:
29:80:5f:3b:5e:2a:b5:64:66:9a:5d:4a:73:09:76:
b5:b6:ef:ff:ce:ca:b5:66:f5:33:e1:12:7e:8a:61:
42:26:b0:f0:0c:b4:cd:95:5a:8a:8c:01:30:66:bc:
f3:3a:6f:57:6b:ff:ef:f3:97:9d:bd:08:6d:ce:4a:
35:c2:c0:8f:b6:9b:fa:47:d7:63:06:f1:d0:da:18:
8c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AB:98:F1:A3:9E:A5:E2:D2:BF:C0:FF:6D:A2:AE:40:B9:0E:CC:87
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/C6uY8aOepeLSv8D_baKuQLkOzIc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
64:a7:c2:ed:a7:63:4c:cf:8b:a0:1d:99:7b:c0:46:e1:70:cc:
89:cb:fd:1e:12:e4:39:1d:4b:1c:70:8b:72:a4:7f:96:29:76:
81:52:4f:77:27:41:6e:ba:0b:1f:67:cc:de:91:7f:2b:bb:3b:
c3:ad:1f:8e:21:3c:ea:78:94:23:ac:cb:cb:91:a8:43:d4:ca:
b6:a4:99:97:48:88:91:ce:b0:1a:8d:d7:02:3f:32:10:94:8b:
8a:1f:12:cb:f7:ad:7c:5b:7f:6e:9c:73:04:e9:31:df:03:6b:
a6:b7:da:85:27:26:6f:54:81:cf:ca:46:fb:27:aa:1f:d0:5c:
4d:76:29:75:27:d2:a6:df:b5:99:2e:c6:38:47:65:cb:18:c3:
bd:8b:67:91:a1:04:3a:78:e3:df:71:cf:03:91:bc:0a:c1:11:
16:ef:63:02:ce:fa:39:b2:74:bd:9f:7b:aa:bc:9a:70:5b:47:
7a:e4:a4:7e:96:dd:79:48:6a:b1:63:0f:1f:97:1c:d7:6d:72:
c8:ed:19:a3:5f:66:0b:7f:e0:6d:37:19:7c:00:3d:96:d0:fe:
c4:71:39:63:82:c6:88:a3:96:da:18:c0:62:67:e8:b6:fb:ac:
86:60:31:a6:70:6b:7a:9b:56:a9:c0:92:47:9b:de:bb:ed:b7:
5a:de:0b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:16:40 2025 by rpki-client