Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/K2g3npDxN4rzIBjD0IwMws2SFoU.roa
File: K2g3npDxN4rzIBjD0IwMws2SFoU.roa (raw, json)
Hash identifier: AFdedR77No4Wpp51ml0f65enXroi1ADNEUwY5k+I8/I=
Subject key identifier: 2B:68:37:9E:90:F1:37:8A:F3:20:18:C3:D0:8C:0C:C2:CD:92:16:85
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2005
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/K2g3npDxN4rzIBjD0IwMws2SFoU.roa
Signing time: Wed 18 Jun 2025 20:58:58 +0000
ROA not before: Wed 18 Jun 2025 20:58:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8197 (0x2005)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 18 20:58:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2B68379E90F1378AF32018C3D08C0CC2CD921685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:46:ec:8a:a8:47:83:87:42:2a:a0:48:aa:
68:79:75:3c:e1:0b:44:39:9c:54:26:0e:47:54:70:
bf:2f:74:a9:85:72:85:5c:c1:2c:77:4b:cb:1c:58:
8a:64:6f:c4:68:10:85:32:0d:4b:a4:1c:01:c3:99:
ca:28:00:f2:e9:61:b3:70:7a:cd:1f:cc:31:f5:c9:
a4:d5:d5:4e:5f:4e:56:ea:f5:98:1c:06:6b:bc:3a:
be:3c:d6:f8:a8:3a:78:d2:8c:16:96:0a:de:60:d6:
a2:03:f1:27:10:0a:95:e9:45:8b:5d:f7:a9:13:fa:
8b:a7:74:eb:19:15:ed:e8:08:f2:cb:83:be:c3:de:
5e:94:44:46:25:3f:b3:99:8d:d4:68:3c:98:94:50:
94:1d:30:78:3a:5d:b6:6c:b5:61:d4:79:18:33:16:
9a:7f:8b:df:da:13:e3:6d:4f:72:e7:c1:aa:58:0e:
24:2f:f2:3a:21:18:ac:bb:78:32:5a:3a:47:1c:5b:
44:0c:a2:2f:46:6f:3e:24:91:b1:be:50:00:c1:25:
ce:fc:82:5a:ab:96:de:b9:35:45:05:53:32:26:f7:
02:02:85:ab:68:ae:64:6c:1d:a5:47:10:b9:0c:ab:
32:30:6f:60:a5:04:40:72:4f:de:ec:38:1a:92:72:
93:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:68:37:9E:90:F1:37:8A:F3:20:18:C3:D0:8C:0C:C2:CD:92:16:85
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/K2g3npDxN4rzIBjD0IwMws2SFoU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:50:c7:86:bc:53:80:91:dc:fe:98:16:31:a5:fd:01:53:88:
28:44:25:6e:2c:94:8e:44:5a:07:73:d4:2e:92:65:cb:3f:e0:
fc:4f:c6:08:9d:cd:ff:97:55:80:e9:cf:7c:a7:9b:d5:7e:78:
9a:99:ac:45:8b:4b:f7:99:f8:57:d9:18:29:6b:41:67:06:33:
cc:9f:fd:b5:ff:7a:5d:7e:9d:f9:aa:13:fd:bf:c1:b2:cb:fa:
e5:e5:44:d5:66:35:97:15:9d:bb:1c:0d:d4:44:2d:47:88:b1:
66:f2:05:8d:38:a5:a1:04:be:90:5a:f9:37:46:41:17:69:17:
9d:21:95:70:3e:b5:2b:05:3c:ef:91:4a:0d:71:88:c8:57:76:
40:7d:e3:88:18:f9:a3:6a:f8:96:85:93:a2:71:a1:61:e2:db:
4f:4e:28:94:19:c0:2d:c6:00:e9:a2:ad:f6:28:40:cf:41:53:
2b:87:ba:da:25:f2:a8:bd:a7:78:d4:e9:e4:04:9b:34:77:9d:
f9:93:ac:bf:43:5d:a2:76:ac:67:15:81:0b:d7:d7:ed:bb:74:
b0:bd:5c:80:9a:16:c9:65:72:13:3d:c5:2b:18:47:eb:11:aa:
64:dc:76:d9:a1:26:dd:08:b9:f1:6c:03:82:80:f1:e9:48:24:
f7:0f:18:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:09:11 2025 by rpki-client