Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Ipa_THnZRbdNq0BG9QtZu3WwxR0.roa
File: Ipa_THnZRbdNq0BG9QtZu3WwxR0.roa (raw, json)
Hash identifier: yPCK3m44jBcSO5WP56IJjv7xtyz1hapgQBBW32bPKM4=
Subject key identifier: 22:96:BF:4C:79:D9:45:B7:4D:AB:40:46:F5:0B:59:BB:75:B0:C5:1D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1F65
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ipa_THnZRbdNq0BG9QtZu3WwxR0.roa
Signing time: Tue 17 Jun 2025 22:40:04 +0000
ROA not before: Tue 17 Jun 2025 22:40:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8037 (0x1f65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 22:40:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2296BF4C79D945B74DAB4046F50B59BB75B0C51D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:23:e5:87:bc:70:cc:99:9c:3f:b0:3c:44:
9c:45:f1:f3:d2:77:bb:01:2f:ac:26:55:f7:23:b8:
67:83:fa:77:8a:20:7d:2d:c4:fb:74:2a:a7:f8:c2:
43:b4:a3:2d:4e:3c:b9:2a:3e:a7:2f:d0:67:87:c1:
64:0e:b4:ca:08:60:93:24:a1:b6:3f:5b:70:19:9b:
e3:72:5a:2e:f5:af:83:7f:aa:c2:57:7b:be:72:77:
05:00:17:a8:19:8c:87:39:b1:d4:f2:5b:53:b0:de:
14:1e:0d:7e:4f:fc:31:42:76:36:f8:47:0b:df:b6:
dc:ac:fe:06:16:af:4c:57:06:13:06:8b:57:11:f6:
fb:4c:f6:1e:0c:dc:48:45:ff:4f:b2:4f:f9:17:35:
01:38:ae:c4:39:bf:be:05:7a:37:7b:14:f1:43:c5:
6a:8a:1e:a2:f8:da:11:1f:e8:01:5c:64:d1:ba:11:
65:d9:fb:5c:2b:0e:18:d7:44:7e:22:18:68:19:a4:
05:71:80:a6:35:13:cb:48:73:da:00:05:49:b1:06:
21:aa:e8:01:d2:14:7a:d5:1d:15:c0:3c:4f:a8:3b:
61:75:6e:5a:1e:07:36:dd:89:fc:2b:dc:64:bf:af:
59:48:1a:c5:d2:5b:32:b4:f6:69:92:dd:bc:34:b6:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:96:BF:4C:79:D9:45:B7:4D:AB:40:46:F5:0B:59:BB:75:B0:C5:1D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ipa_THnZRbdNq0BG9QtZu3WwxR0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:4c:64:d7:83:ec:9b:d2:0e:ea:5e:e6:ea:1c:cf:7e:73:2e:
0c:4c:10:48:9d:03:f6:41:4e:2e:73:7c:8e:30:82:39:48:01:
f4:f4:87:50:28:3f:61:19:38:8f:aa:9e:1a:db:a4:7c:ca:d5:
ee:d4:85:83:78:16:f4:9f:4f:99:45:bd:14:c3:73:0e:3b:44:
3f:7c:fb:ad:14:1a:47:eb:4d:fb:c7:be:be:fa:95:4d:34:71:
11:a2:46:48:92:b1:7c:8c:49:5b:7d:0d:01:4a:c1:f2:be:55:
17:8d:37:c7:94:11:b8:53:ac:97:e1:df:3c:a3:7b:d3:78:11:
4c:d5:a7:7f:f1:cb:b5:ce:3f:d8:bb:07:4c:e2:49:13:74:0a:
5e:82:0e:09:67:75:2d:b4:29:a5:8a:db:7c:63:35:a4:5a:4f:
29:c8:1d:20:c9:94:58:30:85:56:51:77:29:fe:a6:d9:85:03:
83:42:04:ca:92:13:12:e4:65:af:54:8d:a4:b1:be:f4:70:65:
93:e2:5d:4c:88:a6:0a:1e:fc:31:0f:a1:93:34:2a:b4:35:81:
2e:a9:94:16:45:cf:a8:b9:2d:07:18:8e:8f:65:2f:0c:aa:e6:
9d:86:ba:76:86:c5:e1:71:ac:9c:29:f2:cb:41:c1:5d:62:05:
ed:39:82:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:46:11 2025 by rpki-client