Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/KHjMI6GxBhmCwFGog4yCT0IxZNA.roa
File: KHjMI6GxBhmCwFGog4yCT0IxZNA.roa (raw, json)
Hash identifier: 2Rb6fi3gIeHT35Ote61gxaGL96WtjX7Srm+s3GJq8XE=
Subject key identifier: 28:78:CC:23:A1:B1:06:19:82:C0:51:A8:83:8C:82:4F:42:31:64:D0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1F91
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KHjMI6GxBhmCwFGog4yCT0IxZNA.roa
Signing time: Wed 18 Jun 2025 04:10:04 +0000
ROA not before: Wed 18 Jun 2025 04:10:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8081 (0x1f91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 18 04:10:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2878CC23A1B1061982C051A8838C824F423164D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ba:5f:15:fc:4e:6c:cc:45:0a:da:22:cd:c1:
03:2c:68:97:df:ca:6e:a4:de:95:64:5f:75:00:20:
f6:45:21:d1:41:63:ce:11:81:14:ff:c7:fd:1e:09:
7e:c7:e6:0d:85:f3:04:e3:99:ff:3c:1d:46:16:d6:
6f:91:65:d3:2c:0e:73:b9:94:de:7c:40:b5:62:72:
c1:ad:bf:cf:b1:fc:ea:39:dd:57:70:b1:a4:09:13:
32:7b:80:1a:83:e1:c8:3f:88:6e:19:3a:e6:ca:89:
dc:d5:a6:d0:58:cc:c0:be:03:f8:b2:fb:f0:13:fd:
72:64:5d:48:f6:ae:7d:81:3b:03:9d:d6:28:99:02:
e5:94:3b:37:7c:94:69:6f:56:17:98:45:50:9c:ba:
0e:60:73:f2:d8:e0:c9:c5:85:ea:d0:df:44:bc:6b:
09:a2:9e:85:1f:0b:c6:9e:18:1b:e2:1a:17:82:9f:
ba:53:2e:59:76:5b:77:b2:b9:67:8e:6a:f3:27:c3:
d1:5f:5c:86:ce:0e:af:74:e5:33:9d:cc:f2:2e:9c:
0c:93:2d:03:f2:7c:2d:83:75:d1:7b:79:99:af:08:
05:b3:bb:f1:af:9f:34:85:ba:76:53:4d:c3:8b:12:
61:62:03:13:a4:eb:b0:2c:e0:6d:42:cb:80:f6:41:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:78:CC:23:A1:B1:06:19:82:C0:51:A8:83:8C:82:4F:42:31:64:D0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KHjMI6GxBhmCwFGog4yCT0IxZNA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:34:75:45:4a:ca:fc:31:89:a4:5e:e5:d4:f8:21:b8:52:4e:
16:cc:5f:af:65:d2:f2:5f:a6:9b:ea:be:7a:19:3f:f3:77:9f:
f8:a2:ce:8c:9e:91:d5:72:b0:24:1e:d9:8b:63:05:50:1e:00:
8c:43:03:c5:e4:a7:75:12:d6:d0:db:d7:3b:55:8b:6c:0c:e8:
4d:0c:e8:78:c3:eb:44:e1:89:53:e8:ba:47:8b:07:2b:91:d6:
9b:9b:ae:f7:6c:18:84:fa:ac:20:83:41:7b:2c:43:25:8f:52:
e1:b9:68:35:a1:1a:53:ca:06:65:0c:a4:94:fd:38:1b:fb:9f:
f9:ec:f3:0f:c6:72:99:d7:94:a0:34:30:07:49:87:49:f0:8d:
9a:d8:12:3a:be:ca:be:8a:84:e1:08:ec:77:30:30:d7:e7:c6:
2d:13:0e:02:02:cc:fd:ad:65:ec:0b:27:65:6c:8b:bf:03:55:
71:71:f6:06:b5:37:10:7a:b0:70:f3:61:2c:ca:69:65:06:df:
1f:2e:25:79:f0:0d:b4:7f:7a:5e:95:7d:8b:7d:3d:cd:c1:65:
3f:cf:09:63:8c:54:ad:ef:e9:30:92:24:ff:d1:b9:99:31:eb:
1c:e5:71:aa:06:df:9e:84:e3:ff:d4:8f:26:15:2b:1f:b6:6a:
ff:96:10:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:07:10 2025 by rpki-client