
Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/CQ0A4KtjzerJz0QrJMhnB0sjiUE.roa
File: CQ0A4KtjzerJz0QrJMhnB0sjiUE.roa (raw, json)
Hash identifier: 9iN5zMhQcSdMegI/+GiXT7c9zgPPhLNI8rIg9HcCa7U=
Subject key identifier: 09:0D:00:E0:AB:63:CD:EA:C9:CF:44:2B:24:C8:67:07:4B:23:89:41
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 214D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/CQ0A4KtjzerJz0QrJMhnB0sjiUE.roa
Signing time: Fri 20 Jun 2025 23:11:52 +0000
ROA not before: Fri 20 Jun 2025 23:11:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8525 (0x214d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 23:11:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=090D00E0AB63CDEAC9CF442B24C867074B238941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d6:6a:f5:86:ec:38:fa:6c:6a:98:ea:7a:c1:
dd:d8:26:90:96:b7:85:b7:36:55:e8:61:bf:e3:83:
d1:2d:7b:e1:18:ce:10:03:8b:b8:8a:ce:df:84:85:
fc:89:39:e1:e9:ed:b3:d0:f2:e7:c9:12:e2:5e:93:
92:04:a1:d9:65:be:15:3f:57:68:40:f6:38:6a:5a:
66:19:af:02:ae:93:c2:a5:d1:c4:7f:27:2c:7c:84:
4e:8e:f5:a7:73:df:fc:d4:da:44:e7:22:01:07:6b:
35:d3:c7:57:da:e2:60:19:b3:6c:34:a1:9a:8a:7a:
c0:66:eb:84:53:93:09:3e:0b:47:80:1b:ce:78:07:
35:34:b1:07:08:4e:ce:03:2b:7c:da:aa:6f:c2:03:
91:48:78:9b:b1:d4:2c:d3:1e:05:08:52:cb:a5:bd:
90:dd:ad:0d:5b:68:23:8a:66:00:b6:08:6c:26:ce:
02:38:a4:33:81:89:ec:ba:07:f8:2e:46:f7:6d:47:
9c:61:07:23:47:10:32:8f:51:cb:38:1d:ba:e2:a2:
77:10:a6:fa:5e:87:1f:f8:e0:d8:ba:76:c2:b6:29:
f8:59:f4:86:95:a6:6c:1e:65:19:45:60:fb:20:74:
b7:3c:87:6d:7c:f1:6a:8d:ce:ea:5e:d4:7b:14:77:
53:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0D:00:E0:AB:63:CD:EA:C9:CF:44:2B:24:C8:67:07:4B:23:89:41
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/CQ0A4KtjzerJz0QrJMhnB0sjiUE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:af:4a:7e:af:48:e2:68:2c:21:f9:b3:5a:3b:ca:35:80:04:
d3:94:e8:df:19:50:6e:ad:53:e9:5f:ca:57:56:15:9a:9d:11:
cb:73:00:12:8d:07:dc:60:3a:0c:40:35:f6:63:42:70:de:7e:
fe:a9:59:de:07:e0:35:c8:1a:5d:2a:23:1a:28:b4:ab:a4:47:
b9:03:4e:6a:b2:5a:ee:7f:ff:81:18:ce:2b:92:fc:f8:b9:53:
ff:ed:85:cf:66:95:1d:1f:94:0d:1e:6d:3d:8c:40:c0:64:b9:
9a:70:80:77:b5:f2:55:ab:96:e5:85:94:5d:cd:7e:c8:fd:b5:
4c:c3:63:00:7f:cc:f9:cc:90:d6:c1:33:d8:35:a3:91:35:e5:
bf:b4:76:29:d0:5c:93:3c:be:12:eb:83:83:e0:73:65:0b:9b:
60:c2:37:59:c5:65:c6:e4:40:a6:66:20:77:85:65:2b:24:39:
68:13:e8:8f:b7:ec:d7:e3:0e:dc:33:38:64:cd:ae:83:e1:91:
3d:02:6d:26:6c:17:bd:df:9b:83:3a:f8:f1:64:05:b7:0d:c3:
22:11:7e:51:a4:22:e0:25:2b:5b:fe:c8:b2:c6:f7:b7:6f:4f:
ec:e8:c8:b3:6f:d6:43:98:5a:25:43:ef:4a:24:db:28:20:6d:
f5:fc:fb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:05:44 2025 by rpki-client