Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ScxsX3nBatYAhJik6I2FeIekoDI.roa
File: ScxsX3nBatYAhJik6I2FeIekoDI.roa (raw, json)
Hash identifier: fbwk8NvwVJWSIEH65pnOqprFrX+RuBlBgjCnTY3NbLg=
Subject key identifier: 49:CC:6C:5F:79:C1:6A:D6:00:84:98:A4:E8:8D:85:78:87:A4:A0:32
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 12B5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ScxsX3nBatYAhJik6I2FeIekoDI.roa
Signing time: Sun 01 Jun 2025 00:39:23 +0000
ROA not before: Sun 01 Jun 2025 00:39:23 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4789 (0x12b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 00:39:23 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=49CC6C5F79C16AD6008498A4E88D857887A4A032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:df:cf:3e:81:5c:f1:5a:ad:a7:f6:db:59:
b1:4f:f9:61:ca:c3:16:48:16:08:42:d7:08:f5:e7:
4f:fd:3a:31:96:73:c1:cc:ce:c8:b8:e3:50:9c:a7:
dc:a7:69:8b:8e:0e:98:4a:1a:8d:df:c6:aa:0f:62:
99:87:0e:e6:b1:07:21:35:78:46:42:09:a3:aa:22:
42:ba:f4:e9:8a:7d:ad:58:79:f5:bc:8f:09:75:2d:
4c:ed:27:5b:7e:f0:30:12:11:b1:60:7e:e2:e1:31:
ea:d3:c9:c5:f3:5c:eb:4e:87:b6:c0:87:4d:18:ea:
11:e8:d3:c7:ac:05:4c:01:87:19:a2:40:45:2f:f2:
4f:ef:68:f1:5c:0b:fa:d0:d4:fe:ab:62:6d:d6:b3:
b5:96:a4:cb:b2:ac:3d:6d:90:c6:00:e2:40:cf:98:
01:9e:87:34:4a:15:6e:3e:cf:85:85:1a:e3:43:e1:
dd:42:70:f9:28:b3:d4:8d:94:73:15:a4:a0:a8:4d:
e5:80:d6:b8:ac:fd:d4:b4:d4:46:4e:1b:3e:4b:5f:
51:dd:0e:86:73:cf:2f:86:c7:cd:30:6c:6d:e6:35:
8d:e1:f0:8a:75:d7:c5:dc:99:eb:c9:34:ae:f9:0f:
26:a0:87:9a:f6:a7:13:e5:12:f6:b0:f4:f0:08:6d:
62:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CC:6C:5F:79:C1:6A:D6:00:84:98:A4:E8:8D:85:78:87:A4:A0:32
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ScxsX3nBatYAhJik6I2FeIekoDI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4d:6c:2a:f8:9d:ef:28:5c:93:a4:5f:55:7b:35:8a:8d:49:eb:
69:02:b2:40:de:a7:21:cc:28:64:b5:c8:6f:c1:89:d6:5a:1e:
46:54:f0:bc:38:71:44:65:2c:87:eb:55:3f:64:9e:3c:69:0f:
b6:e3:f1:cd:6d:1d:ad:f2:94:1a:23:95:4c:b2:54:35:a1:08:
1f:49:66:c6:0c:62:11:43:db:e7:a8:d7:62:17:a4:c7:cc:05:
3e:4a:ac:45:b5:a7:8d:34:87:74:ce:72:6e:a7:7f:37:3c:5b:
34:e2:9d:c5:78:d3:34:e4:71:c2:6c:8e:4f:f3:66:e5:64:f4:
d4:2a:aa:71:68:0f:d1:a1:73:9e:37:c7:9b:20:35:d9:ac:62:
25:5b:0c:45:a2:d6:8c:fa:14:33:da:dd:23:e8:a6:af:47:43:
76:2c:e3:10:3e:34:b4:29:29:09:e3:da:7f:69:48:4f:e8:26:
c1:05:c5:25:6e:41:3d:53:dc:85:46:16:b8:bf:56:f7:c6:12:
45:ce:1b:96:1f:8d:7f:5f:02:81:cd:20:4f:12:dc:62:e0:03:
3d:b0:1f:de:64:ea:7e:c2:3f:67:da:27:61:06:86:a1:82:da:
f5:29:6a:2b:61:78:bb:5b:64:31:13:2d:2b:68:27:a0:fd:ef:
19:70:38:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:54:00 2025 by rpki-client