Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/bugwWJQffPlRM4HQCT6tl30S-Xs.roa
File: bugwWJQffPlRM4HQCT6tl30S-Xs.roa (raw, json)
Hash identifier: HO/X7ppqbYbRDWX1UNqoTCJKfVf/JMSWhn0GC8F1LVw=
Subject key identifier: 6E:E8:30:58:94:1F:7C:F9:51:33:81:D0:09:3E:AD:97:7D:12:F9:7B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1D25
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bugwWJQffPlRM4HQCT6tl30S-Xs.roa
Signing time: Sat 14 Jun 2025 22:39:57 +0000
ROA not before: Sat 14 Jun 2025 22:39:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7461 (0x1d25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 22:39:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6EE83058941F7CF9513381D0093EAD977D12F97B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:ff:07:9d:e1:e0:05:6d:f8:64:7b:b5:2c:
74:a4:06:c3:9c:bf:a7:4d:a6:dd:05:86:b5:f7:c5:
de:65:0b:d5:1b:40:a5:9f:fa:ac:14:11:ae:fe:ab:
ec:cf:4b:56:38:82:08:40:eb:8f:74:7a:df:11:97:
97:8c:51:df:8b:cd:41:e9:76:f8:34:fa:7f:60:fb:
97:80:59:48:f3:33:e9:a0:20:53:41:2c:aa:9e:bc:
46:d2:2d:8d:79:77:a2:7a:34:2b:1d:0a:12:63:a1:
e8:97:cc:b1:1a:d6:d2:f3:55:c9:ab:37:57:9c:f1:
6f:4b:67:dc:c9:b5:de:fb:92:18:c0:21:ec:7f:21:
89:66:eb:a1:53:8d:fe:e2:af:3e:2f:25:18:1c:cf:
6e:b0:e6:e1:83:c4:8a:5b:23:d6:7d:1a:90:33:8f:
5c:d4:28:05:53:28:45:79:e4:3b:33:57:bf:f2:92:
74:18:76:95:55:70:4b:65:32:d1:1a:9b:e3:28:31:
43:10:6d:93:7e:7e:10:bd:ce:bd:83:da:44:32:ac:
5a:26:14:d3:a3:cd:d7:1d:41:2c:fe:37:55:8e:4b:
d1:01:9d:5e:fa:00:ac:9d:d6:c0:93:7d:75:08:75:
32:9f:79:71:1c:80:5f:05:b9:96:9d:95:c2:67:fa:
85:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E8:30:58:94:1F:7C:F9:51:33:81:D0:09:3E:AD:97:7D:12:F9:7B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bugwWJQffPlRM4HQCT6tl30S-Xs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:c3:db:4a:b1:4d:b4:fe:86:47:1e:16:ae:88:6f:d2:71:e9:
e8:19:1d:92:c8:c9:22:0a:b9:1e:88:3e:b5:d6:67:ce:68:ce:
18:a6:80:1f:ed:a7:1c:02:ea:59:11:69:a9:83:f6:f6:3e:00:
44:b7:b4:a2:20:0e:2e:c8:29:d4:59:d3:75:e2:fd:e8:cb:d4:
e1:cd:26:1b:72:7c:ac:39:08:10:41:65:c9:8a:b0:5f:6f:56:
fe:74:81:e8:a2:74:77:e0:d4:f8:53:26:af:18:20:7d:0d:3c:
f9:00:dc:7c:cc:be:17:81:62:49:e0:58:41:84:d8:d4:3b:6d:
2f:ec:df:6d:1c:57:e1:7c:57:6b:77:6e:5d:83:4c:35:ee:83:
d2:42:3f:c2:27:52:01:67:d9:78:d6:c8:da:d9:7f:78:e6:bb:
5c:b0:1b:26:0e:20:28:7b:25:10:f5:9c:74:d1:fd:9a:67:cc:
b7:ac:58:98:89:ab:1c:fa:b3:fa:6b:4e:87:12:38:af:fd:3f:
b7:5d:9a:c5:26:28:cc:e5:db:b0:1f:74:dc:20:89:e7:0f:07:
b2:24:81:db:d9:00:b9:c2:62:1d:a2:32:72:b4:1a:35:ac:d9:
9f:0a:9c:66:d5:62:db:c2:e9:ee:a3:75:b7:d7:51:ad:e2:c6:
50:3e:c6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:37 2025 by rpki-client