Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/DmmAZF6W9lw_FJKTcPRMQQvoyIA.roa
File: DmmAZF6W9lw_FJKTcPRMQQvoyIA.roa (raw, json)
Hash identifier: cdgNoNHSq5DAAZbML1D+pCViQhxL6NIpHIk7M9b+n34=
Subject key identifier: 0E:69:80:64:5E:96:F6:5C:3F:14:92:93:70:F4:4C:41:0B:E8:C8:80
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0925
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DmmAZF6W9lw_FJKTcPRMQQvoyIA.roa
Signing time: Mon 19 May 2025 06:38:12 +0000
ROA not before: Mon 19 May 2025 06:38:12 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2341 (0x925)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 06:38:12 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0E6980645E96F65C3F14929370F44C410BE8C880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:1f:1f:1d:24:fa:72:bc:af:87:43:a6:a1:
64:2e:1f:61:7c:d3:39:49:93:8e:fe:80:24:4c:3c:
fd:3e:e7:d2:67:41:3d:d0:da:00:82:c7:4a:a6:15:
d6:d3:c6:0c:0a:46:c4:75:fc:ba:98:08:5a:37:76:
fc:c6:f0:55:3e:25:38:f6:d5:db:ad:d5:67:37:44:
89:9d:bc:62:de:10:31:7c:f7:3f:83:82:8e:a5:a4:
6e:45:61:7c:20:18:16:35:b9:72:1c:e8:6d:8d:3a:
33:75:9f:30:db:63:b3:33:43:34:ea:75:15:26:ba:
2d:a6:77:f5:f3:73:96:f8:3c:35:51:67:c9:5c:af:
24:ed:7f:e5:38:55:af:7e:ba:05:e1:a6:0b:98:f2:
25:f0:38:e5:85:52:29:0a:cb:4f:ff:fa:d5:b0:00:
3b:0e:43:e4:1c:89:0d:60:cc:c0:19:1f:74:20:33:
9b:97:78:43:f9:70:e4:6c:09:44:3e:0f:2b:13:5d:
49:4e:44:2e:58:3b:33:3b:9e:66:7f:ae:94:40:95:
9f:76:0e:ba:43:6c:00:2e:22:e2:7f:8d:79:4f:bf:
79:78:46:5a:2e:e7:c6:86:45:62:78:a0:30:90:eb:
15:8a:bc:0c:c2:54:44:55:94:54:f6:8f:39:68:c3:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:69:80:64:5E:96:F6:5C:3F:14:92:93:70:F4:4C:41:0B:E8:C8:80
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DmmAZF6W9lw_FJKTcPRMQQvoyIA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:78:b4:90:87:47:a2:69:29:2a:c1:32:89:f4:2f:43:cc:86:
b3:1b:de:c7:75:7e:54:03:1a:a2:75:f6:78:02:8b:2e:ea:62:
07:1f:ed:aa:90:d2:bd:b0:0d:fa:dc:de:05:24:b2:29:7e:c3:
76:92:ae:5e:ff:2c:09:5b:b2:6f:ef:be:32:42:5b:02:8d:df:
8a:73:af:8e:c4:c3:62:04:ef:e2:62:2b:f8:6b:08:04:07:3b:
9d:d2:e0:ab:f2:86:9c:c8:b7:12:11:d7:5e:5b:c9:ab:18:40:
bb:e2:6a:5c:cb:89:b3:ae:de:b3:90:48:83:d8:0e:a5:ee:d0:
23:55:2f:81:00:33:52:9a:6f:85:70:f5:95:14:b7:9f:50:d9:
41:f6:a2:98:21:71:1a:fa:05:24:0b:4b:b4:be:16:5b:11:3c:
2b:85:9e:9a:1b:8f:19:f4:07:85:a6:66:ef:88:37:1b:77:a3:
bf:64:77:0f:ce:74:31:c0:4e:46:bc:be:35:b4:32:7e:fb:20:
55:db:b4:a9:e9:c2:2c:25:d9:b7:91:ce:92:23:1b:4c:17:80:
28:a1:de:8f:fb:f5:78:e8:52:a9:26:6c:d4:95:a2:c9:fb:76:
d4:d4:51:d2:53:74:ea:1e:9c:79:77:e6:69:6a:6d:ec:b4:fd:
ab:6d:96:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:53:59 2025 by rpki-client