Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/E9V4-SZpfqkTRffBrDwkUXrL_3U.roa
File: E9V4-SZpfqkTRffBrDwkUXrL_3U.roa (raw, json)
Hash identifier: d7TpAv2lnv3PDvUXnb+YFhLNNS0tYb4ajNePgLQWz2I=
Subject key identifier: 13:D5:78:F9:26:69:7E:A9:13:45:F7:C1:AC:3C:24:51:7A:CB:FF:75
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1FAD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/E9V4-SZpfqkTRffBrDwkUXrL_3U.roa
Signing time: Wed 18 Jun 2025 07:40:05 +0000
ROA not before: Wed 18 Jun 2025 07:40:05 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8109 (0x1fad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 18 07:40:05 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=13D578F926697EA91345F7C1AC3C24517ACBFF75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0e:b9:85:88:8b:4e:5c:ae:31:4c:40:e5:98:
54:72:11:a0:75:1c:23:e6:29:2d:04:cd:b2:d4:bf:
87:0c:f6:76:3d:4a:9b:ec:6a:2b:12:d9:9f:db:85:
bf:9e:a1:74:ca:99:43:e5:fe:24:d0:26:a4:4c:b6:
35:5d:d4:b4:a4:fe:5d:c8:7b:5c:46:c9:b1:3c:9f:
8d:25:36:4e:06:d1:ce:3a:fd:d4:5b:54:3e:c3:9b:
5d:e1:13:e8:ff:1b:f1:39:af:7e:39:3a:ab:06:af:
77:75:61:bf:85:fb:c8:40:91:80:c6:f0:57:ec:be:
f2:fb:d6:7c:50:d8:27:c8:c3:b5:6f:3d:b3:a2:dd:
93:21:b1:d9:81:1f:d3:68:10:ad:d2:e0:aa:27:82:
3e:e4:4f:9f:53:ca:2b:18:1f:9b:b4:96:27:d9:dd:
3d:20:10:3a:4a:04:40:b9:81:40:03:1e:11:bd:2a:
56:f1:8f:dd:56:a4:2e:bd:f2:c8:55:53:bd:a5:85:
a4:24:57:6d:bc:28:91:53:24:86:65:67:0f:ee:8c:
13:bb:be:e4:95:2b:13:a6:3a:6f:5d:f6:9e:e8:8a:
74:ed:f1:f0:47:62:86:33:80:1b:95:fb:f1:b7:02:
15:d0:2b:c2:84:8e:75:42:1b:35:82:b9:01:18:9b:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D5:78:F9:26:69:7E:A9:13:45:F7:C1:AC:3C:24:51:7A:CB:FF:75
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/E9V4-SZpfqkTRffBrDwkUXrL_3U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:eb:d6:d9:f9:76:6b:a3:14:39:8f:8a:31:3c:72:32:c3:17:
52:60:b0:b3:bc:d7:29:b4:12:fa:1f:5f:1e:9a:ce:cc:67:a0:
ac:a7:7b:8a:58:04:60:b5:91:5a:a9:d3:de:6f:75:a2:fa:a3:
99:9d:2a:b1:6e:62:42:f6:1b:30:ac:5a:2d:4d:f4:4d:cc:ae:
a0:78:91:74:6b:07:14:1b:60:70:51:8c:3d:e1:b5:d6:a6:08:
f5:ad:fd:17:b5:ed:49:ea:a0:6c:db:d6:cb:c9:d2:44:5b:da:
15:cb:29:4c:d4:d7:41:9f:1c:bf:9a:09:09:6e:9d:b5:19:ea:
b4:18:77:4e:d5:60:79:52:16:8e:a8:ef:8b:bc:57:ac:cc:11:
28:17:07:fe:d2:bd:cd:3e:e5:63:27:3f:40:14:3a:71:0e:40:
42:c5:1b:b1:79:c7:ab:ab:6b:05:e4:08:76:18:de:72:89:32:
f8:a5:41:43:a5:d2:6b:2c:a5:e6:76:81:37:7a:cc:39:60:01:
63:4d:00:de:41:88:59:d2:4a:a4:31:c1:21:35:5c:05:e0:56:
65:8a:fe:a9:44:22:15:17:5c:20:07:62:91:44:bf:ac:5b:b8:
c3:b8:03:89:04:22:cb:9e:74:2a:b7:5f:28:ac:68:4e:a3:30:
3b:63:e0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:09:15 2025 by rpki-client