Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/I8Kmyb8H_nB6wxprbNvq-WR2Q-w.roa
File: I8Kmyb8H_nB6wxprbNvq-WR2Q-w.roa (raw, json)
Hash identifier: 28BVGawekOpdylcTI8yw3QGLDoXt6C8OoACwgKOhyNE=
Subject key identifier: 23:C2:A6:C9:BF:07:FE:70:7A:C3:1A:6B:6C:DB:EA:F9:64:76:43:EC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C41
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/I8Kmyb8H_nB6wxprbNvq-WR2Q-w.roa
Signing time: Fri 23 May 2025 10:08:27 +0000
ROA not before: Fri 23 May 2025 10:08:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3137 (0xc41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 10:08:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=23C2A6C9BF07FE707AC31A6B6CDBEAF9647643EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:b9:df:03:f1:fc:31:1e:cf:79:70:54:9f:
46:fe:90:5c:cc:08:45:13:43:e3:06:f4:46:3c:9f:
00:eb:fd:ab:fb:34:bd:4f:d2:bb:19:72:00:38:cd:
74:6f:bf:e8:8e:43:c6:5a:04:3c:d4:e0:f2:35:d2:
a3:92:af:72:fc:2e:df:2d:a2:1c:43:ef:bd:ea:b3:
34:5e:e8:5f:05:7b:46:6d:6b:c2:d2:e7:a3:04:e8:
50:04:c2:70:65:dc:97:11:07:44:57:20:ac:09:eb:
03:68:b9:2c:fa:68:67:ab:34:8a:52:46:27:f9:88:
ea:e2:32:0b:28:c0:89:c5:ca:f2:73:dc:dc:ca:0b:
b7:e0:7e:b4:e6:f3:46:00:ac:10:50:1f:a8:dc:17:
3b:2d:4d:fe:2c:6a:11:3f:b3:67:d7:1d:36:a1:5c:
d8:a4:c0:e5:6f:3b:36:31:c5:ff:88:ec:ad:48:fd:
87:d7:63:d4:9e:f3:6f:dc:85:7e:71:c0:85:75:70:
e0:ad:25:18:8c:14:3e:2c:3d:d1:97:e1:50:72:8a:
e9:6a:a0:38:81:f0:bb:fe:07:d7:fa:25:83:1a:9f:
03:af:56:a7:2f:5f:d5:47:bc:7e:88:2c:a8:8f:14:
dc:1c:23:49:c3:f5:6c:0b:3a:1c:75:c3:4e:78:91:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:A6:C9:BF:07:FE:70:7A:C3:1A:6B:6C:DB:EA:F9:64:76:43:EC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/I8Kmyb8H_nB6wxprbNvq-WR2Q-w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:d0:1a:2e:69:33:f4:96:4a:fe:e6:7e:68:9c:46:da:77:9e:
a2:49:51:ab:7d:ae:c4:9d:6f:e9:01:b1:6e:d6:ce:97:15:f0:
5d:77:cb:0a:e0:3c:a1:0d:f7:72:2b:1b:a0:0a:67:6e:16:31:
fa:b9:b7:55:25:e1:00:32:f0:c9:ce:43:c3:c7:d3:a9:13:ac:
ce:cf:04:da:6e:04:74:55:24:4b:8f:69:a5:ee:f2:6d:27:30:
18:99:a7:c7:28:37:a9:3d:5b:84:e9:4a:33:7f:35:e7:66:03:
37:02:11:e6:4a:bb:d9:ba:86:98:f2:88:3b:9c:52:cb:53:27:
f8:ec:07:a6:15:5a:16:3e:dc:3c:d4:45:e1:8c:85:8f:03:30:
56:df:f9:2d:65:b2:a0:6f:c2:b4:77:4d:00:86:39:f1:60:52:
c4:71:58:7e:f9:d0:1a:35:89:92:e9:c2:6f:3f:d9:39:3f:8c:
a6:8b:56:55:b9:f7:0f:16:58:8c:06:93:89:6d:f4:93:52:5d:
3a:ff:f7:af:03:7e:a1:4b:a8:d9:f2:af:6e:29:fe:8c:ea:16:
12:79:ef:26:98:b6:33:52:72:68:b3:cb:f3:99:ae:e5:35:c7:
13:69:41:b5:74:35:6d:60:77:a7:27:76:41:2e:04:47:0e:64:
29:56:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:58:31 2025 by rpki-client