Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PzUX13VGjzXERyGLBuABxwZMf20.roa
File: PzUX13VGjzXERyGLBuABxwZMf20.roa (raw, json)
Hash identifier: uncku+WDzLPjH2WEAQiFdFiEiwSI5+nBxd7k9koVkSM=
Subject key identifier: 3F:35:17:D7:75:46:8F:35:C4:47:21:8B:06:E0:01:C7:06:4C:7F:6D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1FFD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PzUX13VGjzXERyGLBuABxwZMf20.roa
Signing time: Wed 18 Jun 2025 18:34:41 +0000
ROA not before: Wed 18 Jun 2025 18:34:41 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8189 (0x1ffd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 18 18:34:41 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3F3517D775468F35C447218B06E001C7064C7F6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:ef:67:e9:90:75:41:03:de:0e:1d:9d:f6:
a5:6a:d7:b4:32:ec:59:1f:9f:d9:92:e3:27:dd:da:
8a:7b:8b:bb:30:32:f7:a7:f8:aa:76:87:d8:43:06:
38:b3:83:54:92:0a:13:2a:1e:39:53:07:97:99:85:
4b:bb:ce:6a:56:8d:0a:79:37:e2:82:ef:f7:98:82:
5a:1c:ee:a8:5f:ca:a7:f5:fd:af:c5:7b:55:52:a6:
51:9c:95:58:48:82:08:b9:50:3d:6f:5e:fc:29:fa:
ef:fe:84:c7:c3:28:d0:12:81:b1:81:ed:b4:ca:bf:
c4:de:f2:ec:b7:9c:e7:a4:7d:d7:9b:bb:05:df:c1:
76:97:92:b0:49:29:2a:67:ab:ea:88:b7:a0:91:5e:
ff:95:c4:eb:ed:90:90:bd:8d:ed:79:d1:35:10:7a:
a3:9c:e3:e6:c0:e0:ed:38:09:9f:bd:16:05:f8:5e:
36:d1:37:02:a1:2b:02:82:48:8b:ff:45:2b:57:a9:
42:29:76:c7:ce:60:1b:da:04:a1:29:3b:d8:b5:6b:
16:f7:e5:9e:05:27:d0:e9:db:3b:f7:68:5e:a9:d6:
db:47:cd:e5:b3:ba:6f:c2:92:cf:6c:f1:c9:38:59:
05:25:a9:ae:52:fe:0b:67:a7:a9:dc:a4:77:58:e5:
94:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:35:17:D7:75:46:8F:35:C4:47:21:8B:06:E0:01:C7:06:4C:7F:6D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PzUX13VGjzXERyGLBuABxwZMf20.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:6c:d8:5d:b4:36:6e:3f:b3:f7:00:7b:c0:03:de:7f:bc:f6:
e1:38:80:1e:3c:b7:0e:b7:06:3f:05:22:3c:03:52:ec:20:6c:
0b:e6:54:c7:bf:e8:62:79:c8:ec:83:3e:96:1d:65:ca:78:6d:
74:68:b8:3d:61:50:c2:d1:b4:d2:4e:03:64:a0:35:ff:e5:dd:
b1:40:9e:48:31:23:72:e7:f7:89:9a:ae:ce:82:5a:4e:bf:e3:
be:73:44:bd:eb:81:9f:8b:a7:e9:c7:db:a1:13:6c:34:34:1f:
b8:72:1b:61:34:6a:fe:68:0f:6e:2f:59:64:65:e6:c6:0e:df:
39:95:fe:37:60:bb:44:28:ec:7b:c9:9f:d4:e7:e8:09:ba:3d:
2e:eb:c7:68:a8:24:5a:c2:d3:a4:8f:e5:7c:50:64:c6:a6:de:
6f:53:d9:39:f7:db:95:35:d8:93:c8:54:02:ff:99:ac:6e:c4:
15:cf:36:6e:d8:3e:72:64:67:ba:98:72:57:7b:f3:4c:99:b8:
a7:c8:04:50:c3:a0:5c:d0:19:4f:85:18:80:9c:ea:c0:3a:b8:
a0:b3:52:1e:04:39:07:43:c4:5a:ae:fb:12:43:70:63:5d:44:
53:4a:9c:72:34:f6:d8:fa:d7:e5:39:44:58:36:7d:45:5c:7c:
19:8d:a1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:05:28 2025 by rpki-client