Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/IPDhuC7sqxs-2xlc3ArM1RVPgnI.roa
File: IPDhuC7sqxs-2xlc3ArM1RVPgnI.roa (raw, json)
Hash identifier: OYQO1WmPRnAt0IdimzQcMHnP5Ez7tMDzfCyZ0KK+/Kk=
Subject key identifier: 20:F0:E1:B8:2E:EC:AB:1B:3E:DB:19:5C:DC:0A:CC:D5:15:4F:82:72
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07DD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IPDhuC7sqxs-2xlc3ArM1RVPgnI.roa
Signing time: Sat 17 May 2025 13:38:12 +0000
ROA not before: Sat 17 May 2025 13:38:12 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2013 (0x7dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 13:38:12 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=20F0E1B82EECAB1B3EDB195CDC0ACCD5154F8272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:9b:67:36:81:32:3c:8b:b5:01:a3:63:9f:
d1:4f:10:fc:68:05:08:cf:f8:0a:3e:4f:ec:bd:2b:
60:5e:35:a3:e6:11:f4:4b:92:bb:75:2a:29:51:bc:
2d:73:fb:12:99:b1:76:72:4a:b7:bb:d0:bf:9d:f4:
d4:38:97:c9:c8:e7:39:48:c7:ab:1b:9a:6e:11:1e:
a4:71:2f:e0:ec:7d:26:15:2b:f2:38:e2:ad:4a:00:
0c:7a:be:7c:9e:95:b4:bc:0a:87:06:ed:86:ea:ab:
e4:1e:c8:40:2f:c1:75:7e:65:ce:b0:d4:9f:4a:d2:
8f:cd:dc:eb:ed:1c:25:c0:57:d2:20:29:75:05:3b:
75:65:ba:87:be:22:00:c7:d5:5d:b8:92:1e:2b:93:
08:6f:ec:b1:24:29:8a:af:3c:b3:72:49:f7:7a:d0:
45:4d:f7:0a:51:7b:f9:86:fe:5a:ce:c5:85:2f:fe:
57:71:aa:12:09:b4:51:8d:6d:9c:05:54:15:df:1a:
0a:60:f4:d8:cd:3c:81:5f:3c:32:24:6a:41:d7:b1:
25:fa:71:76:3c:e3:63:30:73:3b:da:1d:c5:e7:44:
db:2c:16:7a:5a:e2:a0:54:f8:c8:a4:51:40:c2:da:
2d:f1:98:79:dd:8e:4e:16:28:0f:7f:7c:6c:44:e7:
17:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F0:E1:B8:2E:EC:AB:1B:3E:DB:19:5C:DC:0A:CC:D5:15:4F:82:72
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IPDhuC7sqxs-2xlc3ArM1RVPgnI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:d2:d5:b2:cd:8c:5e:f9:1c:97:d3:54:c3:3e:76:0d:00:bc:
93:39:06:d4:25:29:fd:f8:cf:e5:c4:42:5a:cd:e2:e1:a0:52:
83:29:76:60:2f:1d:e8:28:a0:aa:d6:ac:cb:80:4f:0b:44:3e:
ad:cc:48:07:8e:3f:2d:87:7b:8b:e7:91:91:8e:e9:10:e0:cf:
30:b2:ba:62:43:7c:a2:7b:1d:e5:94:d0:50:84:1b:d7:aa:b8:
51:7c:7d:10:dc:f5:47:55:15:0a:b9:7d:34:69:bc:25:c9:c7:
fe:c5:f1:9e:a3:31:fc:e1:05:e0:2e:db:ab:64:5c:b4:76:a9:
0a:1f:6e:bf:ac:9e:5d:58:fc:9e:e2:4a:39:da:da:1f:a7:15:
17:ac:93:14:13:9b:9c:7a:3c:80:d4:55:4c:53:e4:2f:1e:1c:
2b:e8:55:c8:5a:35:10:dd:76:ed:e9:5a:09:22:d6:18:24:00:
75:0e:8c:c6:a7:df:9c:b3:39:44:cc:84:f8:df:dd:1a:a9:84:
47:71:13:fe:e4:71:c8:d4:be:65:2d:20:16:e1:50:3d:7c:98:
90:46:31:f3:3a:b5:88:e1:50:78:2b:ed:f1:e2:32:25:b3:ac:
13:0a:3b:f2:3c:58:aa:35:b1:90:1e:4e:e8:10:d8:c3:46:d3:
fa:80:d3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 03:02:29 2025 by rpki-client