Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/SJANVhTR0asATfl5CgnVUgLwjts.roa
File: SJANVhTR0asATfl5CgnVUgLwjts.roa (raw, json)
Hash identifier: P2cDF9npRsie+CDqPtTnJBHZ1/V+Db/+HXEzfHdYVoE=
Subject key identifier: 48:90:0D:56:14:D1:D1:AB:00:4D:F9:79:0A:09:D5:52:02:F0:8E:DB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2405
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SJANVhTR0asATfl5CgnVUgLwjts.roa
Signing time: Tue 24 Jun 2025 14:12:02 +0000
ROA not before: Tue 24 Jun 2025 14:12:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9221 (0x2405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 14:12:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=48900D5614D1D1AB004DF9790A09D55202F08EDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:16:ee:e4:6a:15:b2:5e:3b:d3:a0:a6:5c:5d:
12:99:b4:34:09:6c:9e:ef:aa:54:85:e8:75:31:22:
22:3e:de:b8:14:c9:71:dd:fb:58:d9:8e:fd:aa:fe:
d4:7c:bb:58:9b:08:cb:15:71:ca:cd:f7:39:4f:16:
df:ac:7c:d3:9b:d7:c7:59:07:17:89:20:1f:d1:81:
4e:bd:b0:f9:29:e3:78:af:35:08:c1:64:05:cc:a5:
d8:c8:9e:77:f8:ee:5c:fa:c5:e4:7d:44:ca:2d:fd:
93:91:1c:73:c1:3e:c0:83:7c:14:8e:c0:ce:3e:f1:
5d:af:e7:d2:39:73:ea:e5:cc:c5:15:fd:c0:7b:1e:
f6:28:a7:c6:a2:66:07:4d:09:92:49:8f:2e:75:43:
ac:3c:18:73:22:a2:ad:b9:73:27:de:81:d6:6b:ea:
dc:7d:ce:6a:69:b9:bc:89:29:df:09:14:f6:20:58:
8c:72:45:58:76:8c:89:76:ea:5d:3f:7f:5b:44:87:
b3:cf:82:76:6f:8d:2e:9c:6a:b5:b2:35:cc:e0:fe:
69:29:23:53:ee:d7:9c:d5:f3:37:9f:ce:96:75:4d:
b2:e0:56:28:85:ea:d3:ff:f7:e6:b7:6d:83:c3:68:
f3:a0:70:0f:9a:21:97:3f:d0:76:e0:c7:8a:f6:6a:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:90:0D:56:14:D1:D1:AB:00:4D:F9:79:0A:09:D5:52:02:F0:8E:DB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SJANVhTR0asATfl5CgnVUgLwjts.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:11:62:08:e8:fc:0d:91:d6:cd:55:34:80:a7:c3:a8:7a:33:
a2:cc:63:7f:df:65:e8:bd:a9:fe:dc:a1:ba:f9:63:a6:48:97:
07:48:ef:b5:c8:5c:ec:3e:bd:07:7a:d3:e7:eb:0f:80:7f:bc:
d0:eb:c1:98:ba:d0:1c:58:d5:13:f9:5a:d5:74:20:28:af:61:
ba:3a:14:a7:21:22:14:70:26:d5:6f:f4:dd:54:6d:99:7f:ad:
c3:a1:51:c2:a5:1b:74:53:78:d0:92:00:55:b8:5f:59:f3:2e:
52:34:a1:c4:ad:ca:66:fb:36:d0:11:82:bf:4d:b3:fb:17:6d:
6b:ba:bf:d3:04:7b:18:cf:b3:fb:99:be:c1:9a:7b:c4:8f:65:
fe:65:9f:09:c0:15:ff:b1:3b:ab:58:24:a1:45:9a:d8:e1:45:
09:cf:de:86:ff:96:eb:fa:79:70:d7:f7:ca:b8:e7:5d:ec:db:
62:9e:0f:c0:48:60:de:8e:16:e9:38:04:cb:a8:ee:4f:59:ef:
eb:c4:4e:e8:12:d2:c3:6b:f1:d9:da:b9:d2:5f:e2:79:8a:45:
99:0b:60:0c:79:48:b2:fa:bd:1a:8d:c5:11:6f:6f:d0:d1:b0:
a7:eb:3e:7f:bf:88:fe:05:07:e4:3f:23:96:ef:08:09:cb:ac:
95:f0:52:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:46:22 2025 by rpki-client