Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ZiTBrsUk-234N_shxcAYat8xymo.roa
File: ZiTBrsUk-234N_shxcAYat8xymo.roa (raw, json)
Hash identifier: FJPwrLWN22TK6ebfPzqAyWMjqVpIAOIal84gC5JHdt0=
Subject key identifier: 66:24:C1:AE:C5:24:FB:6D:F8:37:FB:21:C5:C0:18:6A:DF:31:CA:6A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2061
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZiTBrsUk-234N_shxcAYat8xymo.roa
Signing time: Thu 19 Jun 2025 11:51:44 +0000
ROA not before: Thu 19 Jun 2025 11:51:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8289 (0x2061)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 11:51:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6624C1AEC524FB6DF837FB21C5C0186ADF31CA6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9c:bb:4a:9f:d3:fa:55:4d:f7:41:ba:3e:06:
51:6d:73:c2:57:6a:26:2b:bd:9b:1b:7c:70:89:11:
b0:30:8b:27:df:f6:f5:af:78:e6:f3:26:b0:c4:8a:
56:dd:67:84:ee:e0:d5:7d:a1:34:a5:ec:bc:73:8c:
87:26:92:d9:3f:bd:11:30:c2:a3:a7:31:30:62:b5:
0f:41:99:6e:ed:d8:2f:29:63:a1:78:ff:10:63:8b:
3a:d2:83:cd:7d:04:55:d1:04:9c:d4:6d:74:c2:9a:
2d:72:d0:ba:07:88:5a:be:3f:58:29:9d:15:19:3e:
8d:18:7b:77:89:4d:11:6d:60:19:bc:8f:7f:6a:f3:
13:32:34:a7:25:c6:ac:f0:f4:c8:b5:53:4c:4c:05:
10:b4:71:ae:68:16:3e:f3:3b:a5:76:d6:86:6b:92:
28:3c:8f:a7:d7:c6:74:5d:77:12:ba:df:f3:87:c3:
ee:f0:99:36:5c:17:8a:02:07:aa:20:d5:7b:6d:69:
74:a6:18:e2:70:97:e7:7f:f7:3d:9d:a6:16:18:3f:
66:19:f4:87:de:60:4b:27:b2:b2:4c:2e:0b:b3:a8:
67:a6:73:81:a9:87:41:99:8a:6d:d2:d8:85:35:78:
3e:7a:f7:ef:50:07:ed:62:81:b6:c5:03:5e:8a:c3:
c2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:24:C1:AE:C5:24:FB:6D:F8:37:FB:21:C5:C0:18:6A:DF:31:CA:6A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZiTBrsUk-234N_shxcAYat8xymo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:2e:1b:dc:89:26:54:87:85:dc:0e:7b:17:97:99:bf:e9:62:
bc:04:12:5c:80:65:72:51:f6:6c:84:b6:82:83:a5:ae:60:5e:
74:1a:f4:4d:94:66:be:c8:15:f1:52:96:d0:b0:3d:8c:f8:2f:
ff:ef:b9:89:3b:eb:05:a1:6b:aa:9d:ba:10:49:0e:c3:fd:d1:
fb:68:a5:2b:2d:00:7d:9e:57:57:e7:e0:ad:e6:ae:4e:a9:d4:
0b:d7:f5:57:f5:72:5a:8c:66:57:4f:e7:49:4b:72:53:fa:25:
ad:55:3e:db:49:6a:80:ca:4c:63:ef:30:35:25:b4:2c:a1:be:
43:3d:44:26:83:84:02:b9:fb:02:4f:b4:af:4e:9f:f8:95:fd:
d8:bc:89:90:4e:9d:90:d6:50:d8:dc:0e:fa:24:be:bd:31:30:
a2:73:7e:95:89:95:79:ea:cc:37:9c:c0:dc:49:13:0a:b8:c5:
1f:20:7a:59:6f:d4:c7:40:68:88:70:49:85:4d:ec:02:2b:e7:
52:5e:71:66:f3:79:45:e1:c1:82:ea:7a:21:a1:86:9a:87:de:
fe:89:6e:47:09:e7:89:4a:bd:1b:82:9f:c8:c4:81:75:a8:1f:
16:85:dc:65:89:79:0f:4d:bd:63:dd:96:08:fe:46:f6:fd:8a:
db:0a:b4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:43 2025 by rpki-client