Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/UELHYCEf3WB-jSdvqgn4i4N8_x4.roa
File: UELHYCEf3WB-jSdvqgn4i4N8_x4.roa (raw, json)
Hash identifier: NO27pFCVDrxKn0Q2d42TVFDWRSM+3ErKR13F8dXdrJs=
Subject key identifier: 50:42:C7:60:21:1F:DD:60:7E:8D:27:6F:AA:09:F8:8B:83:7C:FF:1E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 23AD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UELHYCEf3WB-jSdvqgn4i4N8_x4.roa
Signing time: Tue 24 Jun 2025 03:11:59 +0000
ROA not before: Tue 24 Jun 2025 03:11:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9133 (0x23ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 03:11:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5042C760211FDD607E8D276FAA09F88B837CFF1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d2:70:c4:47:85:52:31:d0:c0:5c:c7:2a:ec:
05:2c:8f:4f:8e:f2:79:d8:76:99:ce:20:c8:da:70:
b3:54:cf:d8:f2:03:bb:9d:a5:b4:7f:70:c4:30:e8:
8b:5c:a6:68:0c:c4:ec:61:4f:ee:3b:12:ac:96:97:
b0:17:23:43:7e:b0:e3:fe:22:31:1d:90:1a:45:8b:
17:0e:22:ce:fe:3c:ae:be:9e:be:68:12:b6:b0:c7:
19:18:2d:1d:96:21:7b:70:ce:78:c0:96:91:a6:11:
78:49:9d:91:74:64:8e:c5:75:b5:b5:55:a8:50:bb:
4f:42:43:cd:53:ed:5c:ce:d1:69:14:b9:b8:64:98:
17:3d:fa:be:99:57:cc:0a:88:36:32:e1:f3:7d:72:
c8:ad:30:66:96:3d:d8:36:9f:ea:87:66:55:7f:ac:
da:67:fa:9a:cd:21:07:eb:5c:ea:be:94:af:b1:11:
18:56:d6:23:20:af:4f:7c:dc:ef:b3:f8:0c:6a:64:
f0:81:a3:6b:5b:b2:cb:d9:2a:1c:56:e2:8f:ee:21:
d3:0a:b9:a9:ff:67:18:e2:9a:37:03:cd:59:3d:e6:
44:32:7d:45:4f:32:fe:57:b0:25:fd:1d:35:72:31:
c3:0d:62:5f:06:ea:2b:d0:87:fb:0a:78:fd:cc:14:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:42:C7:60:21:1F:DD:60:7E:8D:27:6F:AA:09:F8:8B:83:7C:FF:1E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UELHYCEf3WB-jSdvqgn4i4N8_x4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:57:31:07:e2:9c:7f:e0:1e:f6:d4:4a:73:e2:2d:33:6b:58:
29:1e:b0:17:8b:5e:71:e8:23:f5:5c:85:87:c0:38:22:81:a9:
b3:72:ca:96:6a:c4:3c:6b:38:2f:78:7f:63:7b:ed:eb:10:22:
58:6e:8a:2e:14:1e:8e:56:bc:be:3f:3e:83:27:ac:23:2e:5d:
1d:78:21:00:44:dc:36:9e:95:f4:9d:7e:a2:22:d0:51:56:62:
35:b7:8c:e8:cd:da:1d:fb:ea:c4:5b:f8:94:a7:19:2e:db:17:
1a:18:f2:81:a8:26:d3:71:74:0a:1e:be:5e:cd:48:99:e7:86:
bb:45:a2:9e:f1:f0:9f:20:cd:12:ab:9b:38:89:ab:3e:c6:53:
96:38:33:92:11:6c:f5:df:7a:a5:aa:a5:47:78:d8:d5:1f:9e:
67:84:ec:76:9d:d0:fc:d0:47:b7:aa:34:25:d1:cd:df:ce:25:
2b:2f:b2:58:ee:5d:47:27:93:5e:f2:4e:27:61:4a:3b:8b:06:
15:5f:7d:95:92:07:f4:1d:fc:78:68:e0:e5:b2:fb:e4:75:cc:
e0:6e:7a:1c:87:98:f4:b0:8b:71:de:99:b2:08:3a:ba:ec:45:
02:95:af:86:73:66:81:54:1b:01:0e:69:21:54:60:e4:58:25:
37:af:2f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:09:08 2025 by rpki-client