Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/gG-fFDz3HfnZX8PA3hnFw0ep6EM.roa
File: gG-fFDz3HfnZX8PA3hnFw0ep6EM.roa (raw, json)
Hash identifier: kRjZuu25GLOUARdMsIkrDnybKbtv0kt+kRjkdG2jBXE=
Subject key identifier: 80:6F:9F:14:3C:F7:1D:F9:D9:5F:C3:C0:DE:19:C5:C3:47:A9:E8:43
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 091D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gG-fFDz3HfnZX8PA3hnFw0ep6EM.roa
Signing time: Mon 19 May 2025 05:38:09 +0000
ROA not before: Mon 19 May 2025 05:38:09 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2333 (0x91d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 05:38:09 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=806F9F143CF71DF9D95FC3C0DE19C5C347A9E843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:68:e8:88:47:27:7a:bb:75:c6:b8:92:2c:
f0:9e:1f:f1:98:78:9f:69:a9:b9:d0:78:e3:38:d0:
70:6f:eb:3c:52:e1:80:23:cc:ea:19:cc:be:51:83:
90:df:5f:20:44:03:05:98:11:c0:d7:3c:6c:25:20:
e8:7f:29:7f:5b:ac:9b:57:f4:6d:9d:78:80:e9:fb:
cd:44:69:20:46:b7:c4:24:85:d8:5c:32:ad:d5:4f:
9d:0f:cf:46:ee:df:4a:8c:85:2b:9c:01:7c:90:ff:
38:ab:85:26:f2:78:7d:98:65:c2:b5:2e:9c:90:d3:
ea:99:1b:cf:da:f2:68:ec:4f:62:f6:0d:8c:3e:03:
ba:8b:be:eb:d7:00:c6:06:cd:b9:e7:fe:52:c8:0b:
d5:e6:ea:58:d0:16:b4:94:b8:6e:7f:a8:f9:32:34:
8a:b0:6e:46:db:80:36:da:66:8a:b3:64:7a:03:6e:
0c:17:67:38:5d:cd:a8:1f:22:b6:99:d8:69:f3:eb:
ad:cb:fd:e5:a7:6c:c4:65:e8:31:91:62:c3:51:2c:
c5:59:94:df:a4:8f:80:70:f2:48:60:bc:1e:0a:87:
4c:82:0e:6f:c5:e0:d7:ee:72:88:dc:f3:9f:09:95:
51:39:3e:b3:9d:94:77:2a:63:b5:1d:6b:38:d1:05:
ba:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6F:9F:14:3C:F7:1D:F9:D9:5F:C3:C0:DE:19:C5:C3:47:A9:E8:43
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gG-fFDz3HfnZX8PA3hnFw0ep6EM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
91:dc:e8:0a:61:9e:c5:ca:d8:a0:e2:3d:4c:a1:74:6d:a4:e5:
d4:a6:19:f3:73:87:99:ed:3b:8c:49:f8:2b:5e:7e:bc:2b:0d:
94:b9:b2:1d:ba:06:b2:90:14:01:0c:98:79:29:b4:da:a8:71:
c1:6e:6e:c3:8f:30:03:4f:c9:14:f1:62:38:38:9c:42:09:4a:
99:3d:69:a8:b1:e9:3a:69:69:af:fb:2c:04:07:c3:ab:0d:4f:
35:b9:f2:ba:18:d5:99:a6:e9:d8:08:3c:ad:88:03:5c:fc:52:
01:77:28:45:b0:1f:99:51:ae:57:f5:12:f3:d8:a1:35:54:f7:
6b:e7:b9:10:43:bf:b2:75:ef:ff:7f:c6:45:3e:3f:75:c3:14:
4c:15:1e:ae:c0:11:13:c8:0a:07:cc:2d:2b:21:4c:4a:d1:36:
3e:af:93:75:7e:8f:55:e0:b9:05:9b:d3:1c:eb:21:0c:6c:25:
41:a9:3b:69:96:76:30:8f:98:fa:f5:6d:e6:bd:23:2f:bd:9e:
a1:2f:99:61:c1:66:2e:7a:87:bb:87:8c:ba:be:54:dd:c3:47:
29:af:0e:ce:da:09:f4:af:5d:52:41:41:33:e5:e1:7b:30:5a:
a0:1d:eb:bf:1b:02:ca:f1:f9:66:e2:16:eb:db:66:09:12:aa:
e1:c3:cc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:12:42 2025 by rpki-client