Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/QJslGTNK19yprt9ho-KjGthHfsg.roa
File: QJslGTNK19yprt9ho-KjGthHfsg.roa (raw, json)
Hash identifier: j3ytRyoQS7m6sAcNVq21itcyhvNdH6aWfwup144Ml6M=
Subject key identifier: 40:9B:25:19:33:4A:D7:DC:A9:AE:DF:61:A3:E2:A3:1A:D8:47:7E:C8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E21
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QJslGTNK19yprt9ho-KjGthHfsg.roa
Signing time: Sun 25 May 2025 22:08:38 +0000
ROA not before: Sun 25 May 2025 22:08:38 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3617 (0xe21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 22:08:38 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=409B2519334AD7DCA9AEDF61A3E2A31AD8477EC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:eb:3f:a9:a7:9d:27:56:6e:d6:03:d1:b6:
5d:69:be:32:94:c0:2d:c4:85:35:13:83:f7:14:af:
9c:b3:d2:45:39:c9:3b:38:76:0f:58:9b:ac:d3:1c:
70:00:2a:1a:17:63:cf:6c:c7:db:89:55:3e:80:5c:
a6:ae:e5:7d:0c:26:0e:19:18:e3:96:18:ed:1b:35:
02:9c:f1:51:b5:d3:a4:6b:36:cd:7c:99:ca:ea:61:
84:46:19:84:c1:93:86:b4:34:71:b1:63:db:47:d1:
d7:b0:eb:78:18:46:73:b6:bf:72:0e:83:c8:8e:f7:
ec:2b:ce:f4:45:56:d5:7c:73:3a:7a:c8:60:bf:aa:
86:07:fa:0a:67:1d:69:ae:58:b1:ee:0b:a3:67:e2:
5e:9e:f3:49:69:f4:ec:ef:c3:8a:89:e5:52:bf:df:
ff:29:16:c3:7a:47:b0:e1:9d:d6:b0:02:5c:df:14:
62:17:1a:47:0c:38:90:95:c3:ff:f3:e3:51:36:7a:
1e:01:88:35:36:c3:d4:dc:be:9e:5f:c7:2e:c7:4b:
b3:c0:24:9c:5f:44:e1:b7:96:8e:6e:b4:32:ed:ce:
d2:76:9b:94:4e:db:ad:cd:d2:5c:1a:ad:8f:f3:66:
39:78:05:29:30:05:eb:57:3d:82:e9:bb:54:f8:29:
ce:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9B:25:19:33:4A:D7:DC:A9:AE:DF:61:A3:E2:A3:1A:D8:47:7E:C8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QJslGTNK19yprt9ho-KjGthHfsg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:26:13:ba:58:4a:ed:a1:40:91:8f:ba:90:e8:51:c9:2b:12:
86:57:bc:60:f4:f3:e7:f1:8d:4e:b7:f8:85:b7:12:fd:3c:b4:
6a:c5:84:7d:af:cc:78:f8:02:52:15:c9:7f:b5:f8:83:da:da:
09:b1:7c:d5:b3:88:ba:5b:29:25:98:c9:9e:69:4d:f1:92:07:
1a:62:8d:4c:71:65:02:d1:8f:1f:8b:e7:96:1b:4d:93:de:7f:
b3:2e:39:63:70:4a:85:cd:7f:d7:e3:b7:e1:c0:73:06:23:7b:
ce:76:b5:4c:4e:41:2f:af:1c:ba:4b:13:e6:b4:74:4f:09:35:
94:2b:0a:93:d7:be:de:0a:d2:2d:de:e5:c4:9d:0a:0a:06:1b:
f5:5e:56:5c:da:b1:9f:91:82:81:b0:8b:94:25:54:8e:61:e3:
83:ed:a3:1b:02:44:9e:1d:43:17:f2:8c:79:3d:c2:46:4e:94:
42:5f:71:0f:31:3c:53:6d:44:98:4e:4f:74:36:81:fc:32:4b:
05:65:c2:f9:68:ca:1d:25:b0:44:93:8a:30:00:5f:d7:0a:b0:
f9:71:40:6d:5e:f2:b8:84:1d:6c:f1:93:6e:af:ee:2f:33:58:
5b:0d:0e:13:1f:97:4f:87:8c:24:e4:58:c6:e2:64:26:9b:3e:
22:2c:cd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:41:22 2025 by rpki-client