Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Pt17C8BaudaSDp27rNZOCFDje3U.roa
File: Pt17C8BaudaSDp27rNZOCFDje3U.roa (raw, json)
Hash identifier: XjOVnqGtdt2OFooWoJsSmSq3eYtOUPxg9sUbzmQO5Rg=
Subject key identifier: 3E:DD:7B:0B:C0:5A:B9:D6:92:0E:9D:BB:AC:D6:4E:08:50:E3:7B:75
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2385
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Pt17C8BaudaSDp27rNZOCFDje3U.roa
Signing time: Mon 23 Jun 2025 22:11:58 +0000
ROA not before: Mon 23 Jun 2025 22:11:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9093 (0x2385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 23 22:11:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3EDD7B0BC05AB9D6920E9DBBACD64E0850E37B75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:66:46:2a:1c:05:52:d6:cc:16:af:52:9a:
2a:16:ba:81:d4:63:2e:8c:de:c4:d0:1f:ec:b9:c5:
b6:40:95:7d:35:e3:7b:a0:60:39:f4:d2:40:71:88:
eb:35:cf:a8:16:82:39:7d:3f:cb:16:48:4b:e7:3b:
c5:fb:dc:e1:34:bd:56:a6:83:60:7b:90:7d:47:be:
14:4e:97:9b:e2:63:6b:29:94:e4:9a:31:15:cb:b5:
86:7c:3a:05:42:6a:f0:fe:c0:e8:09:23:05:03:94:
0e:08:f4:ea:56:59:38:e6:af:d0:7d:44:d7:3e:69:
fe:e1:c7:3d:9f:a6:df:0e:9a:8f:de:58:b8:48:f5:
e2:df:7e:d5:56:25:50:b3:86:f6:8e:0c:5b:e8:b3:
0d:46:66:2d:8f:12:62:31:21:93:69:bf:30:07:5f:
dd:8f:82:32:a9:b7:60:9a:8a:1c:a3:c6:e5:36:27:
77:b1:44:7b:87:8c:40:ae:f2:df:88:ad:a0:c6:94:
db:5e:e1:0b:05:ef:97:5f:8f:56:be:99:df:bb:f0:
c1:02:14:49:28:39:fa:9d:13:fd:21:f5:27:30:47:
47:f6:56:49:6a:cb:61:2e:45:89:d4:84:61:fb:de:
5f:ca:90:bd:e2:64:43:ba:8d:0b:c4:b3:de:dd:bb:
2c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DD:7B:0B:C0:5A:B9:D6:92:0E:9D:BB:AC:D6:4E:08:50:E3:7B:75
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Pt17C8BaudaSDp27rNZOCFDje3U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:94:36:82:1d:aa:ad:1a:03:34:29:ba:d4:e7:18:bf:99:d4:
35:25:51:f7:c2:1f:c1:4e:f6:da:6e:e1:a4:fe:42:a0:d9:ea:
96:03:b1:35:bc:94:e3:70:df:f4:f3:16:d9:94:c6:a1:e6:41:
bd:b3:2c:70:0e:3c:0a:53:f9:82:1b:91:a3:6a:a8:5a:3d:dc:
4c:bc:61:b8:81:01:0d:38:50:65:71:0a:09:69:21:fc:9d:cb:
89:b5:5f:ee:41:76:4a:c6:15:84:32:52:e1:2b:d8:47:b9:3b:
8d:16:0f:69:b1:fa:15:9b:a3:1c:7a:b5:a9:01:ec:90:a1:49:
ab:ac:64:69:b9:df:b4:31:3f:9c:4d:ed:8d:87:5f:3b:3e:60:
d5:80:33:b9:09:cd:bc:74:a5:4a:e0:9d:1f:a9:8e:89:09:c5:
1f:e1:bb:51:e5:0f:de:24:30:fa:f3:21:57:74:4e:24:3b:f6:
72:f1:4b:38:b1:3c:cf:17:e8:86:f8:cf:21:cd:33:28:37:b9:
2e:9a:c1:47:90:12:27:24:c5:da:aa:86:a3:c3:76:db:89:ed:
c0:63:d0:0a:54:bc:b0:12:5c:65:3f:67:6f:5b:45:23:a8:e7:
88:b4:86:85:84:26:9e:f7:3c:88:1a:38:be:9a:e9:3a:d5:a6:
06:7e:64:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:07:54 2025 by rpki-client