Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ini0fhePYyZ2XoESnoOkHVe6r1E.roa
File: ini0fhePYyZ2XoESnoOkHVe6r1E.roa (raw, json)
Hash identifier: 7wQuOkMk8lPKkEG4N1XunWR4ILdHUVDd9QKltU67p7k=
Subject key identifier: 8A:78:B4:7E:17:8F:63:26:76:5E:81:12:9E:83:A4:1D:57:BA:AF:51
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07F5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ini0fhePYyZ2XoESnoOkHVe6r1E.roa
Signing time: Sat 17 May 2025 16:38:18 +0000
ROA not before: Sat 17 May 2025 16:38:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2037 (0x7f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 16:38:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8A78B47E178F6326765E81129E83A41D57BAAF51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:ea:ad:71:c3:05:88:67:59:a0:9f:d3:59:
11:af:26:f3:1a:7e:a2:69:f7:5d:1d:cb:0f:34:df:
95:c2:cf:19:a3:d0:61:a1:d3:cb:bf:4d:eb:02:a7:
03:af:36:cf:8b:1c:fc:c5:4e:49:d7:b0:dd:35:de:
de:bf:9c:2c:bd:8d:24:a7:9a:df:8f:85:ea:d2:3c:
c0:77:07:11:7b:f2:be:1b:65:05:38:41:e0:2a:b6:
f2:0b:98:5f:e6:5e:5f:ff:8e:89:bf:bc:74:26:7c:
79:6e:d0:39:bb:d9:65:f4:f9:c1:67:e4:9e:4a:95:
72:ce:90:01:1b:eb:00:76:9b:82:c3:c5:68:d5:9a:
2c:34:c2:d9:df:db:0e:75:1a:af:4c:16:2f:b6:43:
28:5e:ab:9e:be:68:08:0b:55:1c:cd:eb:76:c4:e6:
18:49:ee:6d:19:87:d8:25:e6:28:f2:7d:7f:e5:8e:
e4:80:b3:7a:0d:4e:80:9d:f8:ee:14:69:b2:22:3f:
cb:d5:dc:62:17:be:08:b2:84:54:0e:f0:73:4a:8c:
90:73:e9:99:4b:be:30:3e:1b:81:ce:77:1f:61:87:
81:73:4b:02:72:93:2f:3e:7e:56:8b:27:80:b4:4d:
c3:49:77:d0:b1:51:c6:51:51:3e:7a:ef:09:4e:f2:
df:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:78:B4:7E:17:8F:63:26:76:5E:81:12:9E:83:A4:1D:57:BA:AF:51
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ini0fhePYyZ2XoESnoOkHVe6r1E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:14:16:4a:00:fe:79:0f:8e:af:26:7c:ba:2d:7b:97:f1:d1:
13:98:a3:5e:84:bb:28:da:81:6c:9f:e7:ec:1f:3d:bf:d3:73:
06:53:af:53:e4:2f:d7:7e:e2:10:a5:8b:1a:47:08:9b:36:c2:
31:5c:92:04:63:9b:d8:a1:5c:8c:fb:15:d9:f4:b2:78:f9:87:
20:d7:1f:bd:93:21:44:33:2a:0f:f6:dd:b9:5f:37:45:94:94:
8a:5a:a8:56:ed:fa:15:58:43:ce:44:7c:60:9f:6e:80:63:c0:
96:08:2c:38:93:d9:98:0a:b6:de:23:05:a1:85:6c:37:f9:a5:
5e:1b:aa:7f:96:34:77:d4:7a:a9:4b:86:98:2a:4b:9d:ad:47:
5d:c2:1b:4d:1c:34:06:bd:1c:72:6e:6e:2f:b2:83:39:80:9b:
b8:52:e9:06:f0:09:44:83:47:b5:dd:39:d2:36:fb:fe:29:ec:
5e:ea:de:f0:ed:76:a9:1a:b1:d6:e2:62:67:58:60:04:dc:90:
f1:f7:1e:cb:cd:39:3b:11:6b:88:1d:05:2f:4e:e8:ed:28:c1:
46:0d:4f:d5:15:3b:79:4e:d9:60:f9:55:62:35:42:d0:cb:9c:
5e:79:45:70:4e:e5:44:4b:39:d3:49:6e:18:2f:a8:8b:db:db:
b2:04:e4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:12:50 2025 by rpki-client