Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/jdoIN5Qp4AGiiG11ge20JxQpw60.roa
File: jdoIN5Qp4AGiiG11ge20JxQpw60.roa (raw, json)
Hash identifier: OnCSPvWMys6O0Ij7VEik/z3Msf04y8agSIzQYP6k9GQ=
Subject key identifier: 8D:DA:08:37:94:29:E0:01:A2:88:6D:75:81:ED:B4:27:14:29:C3:AD
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2439
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jdoIN5Qp4AGiiG11ge20JxQpw60.roa
Signing time: Tue 24 Jun 2025 20:42:06 +0000
ROA not before: Tue 24 Jun 2025 20:42:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9273 (0x2439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 20:42:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8DDA08379429E001A2886D7581EDB4271429C3AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:1f:a1:a3:5e:d9:cf:f1:0d:e1:04:07:a1:
b0:50:26:76:f7:65:5f:ca:c3:2a:99:f0:35:bd:7f:
79:b6:c0:3b:ff:04:7e:81:85:4b:cb:e6:c5:4b:0a:
77:fe:27:09:38:b2:89:62:ad:6f:7b:d0:ab:f1:15:
57:4c:41:80:97:5e:94:e0:e7:95:93:1f:1e:a0:ac:
2e:42:5a:38:72:b0:6a:4f:b4:bf:b5:be:de:4a:9f:
17:cb:88:31:2b:a0:fc:ab:b5:79:d9:56:86:ff:6a:
b5:98:49:66:e1:fa:94:b0:e4:e0:da:10:17:b0:e8:
a0:15:90:ad:00:22:36:b4:e3:bf:f6:00:20:37:f8:
87:de:21:c3:38:50:8c:fe:af:2c:31:0c:7e:c4:9c:
51:6c:bb:5d:25:69:9a:c1:bd:91:03:a2:43:63:80:
04:af:fd:dc:33:d1:93:92:69:a1:85:50:e2:f2:be:
7c:73:6d:87:69:a8:a0:f8:8b:20:ea:c6:14:5c:8a:
1d:45:51:5d:81:fa:4c:f6:12:2a:08:cb:e5:4d:44:
39:3d:42:f5:f0:d4:0e:5f:b2:47:a9:6a:10:14:e3:
51:46:3b:c7:6d:30:03:4a:e7:b6:21:95:ee:89:58:
a8:20:04:c6:f2:64:b2:f6:b3:74:39:e6:04:ff:83:
ed:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DA:08:37:94:29:E0:01:A2:88:6D:75:81:ED:B4:27:14:29:C3:AD
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jdoIN5Qp4AGiiG11ge20JxQpw60.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:80:9e:07:54:c1:2f:31:96:52:e8:29:7c:4c:60:34:24:5b:
9d:07:d5:67:c2:59:ba:f2:ae:64:32:3e:6a:ea:58:34:d2:22:
ce:67:18:f9:85:ea:bd:e5:b3:41:ab:8d:83:5c:4b:46:a0:65:
42:90:c4:ee:0e:cb:43:c6:01:12:36:90:a5:1c:7c:ce:4e:3a:
15:13:69:67:01:d9:66:d5:aa:29:1c:9e:ee:be:e4:36:c6:24:
27:e5:4f:26:96:58:56:64:90:44:07:42:9d:d7:d0:a9:c5:f4:
7e:c4:1d:43:ce:31:1e:b9:f0:3a:e9:a4:30:92:b7:bb:fb:11:
00:a1:1a:fc:c6:d7:fe:4a:98:dc:83:90:5d:e9:c9:12:81:73:
bd:a0:46:34:c3:87:13:2f:11:f7:51:0c:7e:82:d3:07:94:77:
f2:6a:c1:8f:0d:65:46:08:09:0f:81:b4:94:a7:03:9b:76:0c:
b3:5b:79:fa:ac:e7:d9:79:ff:cd:cd:f5:7a:16:82:6b:10:fe:
af:f4:30:0b:2f:95:d5:c4:e3:86:14:76:b6:40:71:b9:fe:fd:
66:ff:33:59:40:3d:c2:30:6e:dd:5a:5e:09:72:0e:b3:3a:4a:
47:60:25:de:92:45:f6:f8:f0:0b:a0:da:d2:d9:9e:39:c2:b0:
f3:88:cb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:36 2025 by rpki-client