Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/jGUsRSJbV_7UEROuQC6bB0PRECw.roa
File: jGUsRSJbV_7UEROuQC6bB0PRECw.roa (raw, json)
Hash identifier: n2TSjIJCECiLkaQSbZKtruBLDUpCpi6g9HWzN4ZvIgE=
Subject key identifier: 8C:65:2C:45:22:5B:57:FE:D4:11:13:AE:40:2E:9B:07:43:D1:10:2C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2489
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jGUsRSJbV_7UEROuQC6bB0PRECw.roa
Signing time: Wed 25 Jun 2025 06:42:08 +0000
ROA not before: Wed 25 Jun 2025 06:42:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9353 (0x2489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 25 06:42:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8C652C45225B57FED41113AE402E9B0743D1102C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:e2:43:ff:3b:d4:a1:02:5a:42:f8:b4:89:
a6:0c:7b:69:c9:cd:e0:8d:d6:ee:b2:d2:78:eb:b7:
c7:4a:35:16:9f:90:33:3a:9a:e5:d3:be:a9:5e:10:
1f:60:73:d7:f9:4b:ec:70:5b:ca:3b:fb:f3:3c:e7:
e6:d4:9a:78:32:77:dd:67:eb:c8:4d:b1:38:e3:04:
90:9e:82:1c:e8:73:b3:70:3e:26:d8:97:c6:69:4d:
3a:ac:b8:1f:76:23:74:b6:75:7c:6f:cd:6d:11:1f:
56:5d:da:70:da:25:57:97:9c:2c:e6:1b:f4:c4:9d:
64:87:98:12:5c:ce:17:89:6c:cf:46:e1:a5:9f:17:
96:71:be:88:00:0c:2e:f6:a9:36:6e:6d:d8:28:6d:
28:d0:3b:40:c2:5a:3a:6d:41:75:d8:b7:ca:d6:d7:
f6:42:e6:11:7e:84:62:f4:7f:60:e4:25:f7:9f:2b:
c4:34:32:8b:5c:77:3c:1b:c1:0d:fd:3e:19:22:f3:
a3:26:f9:03:ce:df:cd:c6:b8:0e:17:1c:85:2c:86:
0b:57:17:7e:a7:5a:b6:81:cd:8e:df:a1:31:ad:dc:
92:ec:b3:f9:83:cc:b0:83:fd:c4:fc:91:eb:ef:d9:
c8:eb:80:e2:fe:4d:00:96:f5:08:f5:24:fb:a1:09:
69:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:65:2C:45:22:5B:57:FE:D4:11:13:AE:40:2E:9B:07:43:D1:10:2C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jGUsRSJbV_7UEROuQC6bB0PRECw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:c8:6b:2b:09:dd:f5:b1:cd:16:29:c5:e9:1d:64:00:84:aa:
24:1d:a4:f0:95:b2:73:08:7c:7e:71:fa:a9:80:07:86:36:ca:
49:00:a7:ee:65:ec:b2:74:23:6f:59:a0:d7:17:56:7e:c3:38:
a9:37:3d:46:6a:b6:c7:0d:ee:e1:e6:b2:5a:b9:36:74:08:d3:
83:5a:57:f7:ea:22:e6:74:2d:27:94:a0:ac:bb:7d:0a:22:e0:
1b:7f:42:59:b2:0e:5f:6a:8a:5f:53:fa:ca:e5:b1:fd:f2:05:
05:5a:2f:26:cc:b7:fd:de:05:84:9f:5c:c4:2a:0c:e8:37:aa:
e2:3b:2a:f1:81:d4:fa:20:ce:46:45:b7:90:31:a9:dc:85:1f:
dc:9d:3f:51:08:42:8c:e9:43:ec:24:c5:b0:b8:64:6e:78:78:
cb:2e:86:4f:21:9d:bb:50:ad:3b:ca:39:f4:39:07:b7:d9:25:
35:ec:9c:3f:dc:3a:cc:30:ac:6b:68:f8:73:8f:44:89:41:21:
c9:06:ed:da:00:ce:30:75:79:40:cb:22:4f:28:58:3c:92:77:
5d:bc:85:4c:d5:44:df:6f:07:69:7c:96:25:c3:da:42:d1:0b:
3c:03:ef:b6:c8:eb:37:57:ef:28:2b:96:a3:bc:9b:4d:98:36:
e7:49:1e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:40 2025 by rpki-client