Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/jyLKdAnhxh6jtSunjw5Zk_6v3d0.roa
File: jyLKdAnhxh6jtSunjw5Zk_6v3d0.roa (raw, json)
Hash identifier: ysRVWwA8DzSe5zQmdqO9LVmmFIsbeVc6dTjV9SnWMFk=
Subject key identifier: 8F:22:CA:74:09:E1:C6:1E:A3:B5:2B:A7:8F:0E:59:93:FE:AF:DD:DD
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1391
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jyLKdAnhxh6jtSunjw5Zk_6v3d0.roa
Signing time: Mon 02 Jun 2025 04:09:23 +0000
ROA not before: Mon 02 Jun 2025 04:09:23 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5009 (0x1391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 2 04:09:23 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8F22CA7409E1C61EA3B52BA78F0E5993FEAFDDDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:aa:d8:ef:53:68:7e:c2:d7:97:d9:80:59:
f3:a0:64:28:a0:1c:ac:a7:63:cf:06:5e:2c:7c:d3:
91:7a:25:b1:60:d6:50:30:4d:e0:f2:18:53:1e:65:
33:7b:79:9e:98:be:6b:f2:bf:64:23:79:dc:2f:87:
1c:3f:6f:7c:44:d2:a6:8e:c0:01:5c:6a:09:72:12:
9f:d6:40:0a:01:71:56:eb:e7:01:18:c6:02:9b:2e:
a4:90:d1:06:2f:76:78:c7:e9:3d:8d:e1:c9:52:0c:
b0:8f:d2:d9:78:50:23:b3:49:06:68:4d:3f:bd:2e:
55:bc:83:5c:29:23:0b:fe:c2:64:51:d4:ef:8a:f4:
0e:4b:34:a3:b8:12:7a:be:52:f5:12:ef:27:db:84:
9e:50:0b:fb:58:b7:39:9d:df:0d:bf:15:12:79:e5:
5f:b5:1f:57:2a:17:69:66:25:4f:8e:fd:71:bf:97:
b9:b4:f7:28:b8:0f:17:14:95:54:ac:74:39:f8:30:
cd:5f:c1:08:25:17:91:ac:a4:b9:2a:c9:53:75:83:
3d:c3:cb:f7:ad:df:26:48:f1:b8:ab:8b:f3:78:c6:
4a:f5:24:66:1e:b5:15:43:38:a0:00:93:b0:29:1d:
92:22:1c:cf:16:6a:ac:f6:08:8a:d7:8c:53:1b:8f:
13:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:22:CA:74:09:E1:C6:1E:A3:B5:2B:A7:8F:0E:59:93:FE:AF:DD:DD
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jyLKdAnhxh6jtSunjw5Zk_6v3d0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:af:c8:62:ab:99:72:79:80:95:e3:1e:db:fe:a5:69:ca:6c:
5d:45:48:5b:a6:7b:86:1d:14:60:98:82:3b:79:ff:31:b0:0b:
17:14:49:83:28:bd:74:99:d8:5d:5a:f1:a2:9c:e4:a3:62:aa:
16:62:89:9a:30:6e:dd:1a:54:4d:21:5a:14:ce:73:75:02:c2:
4e:f7:1c:63:4f:b2:03:af:a8:50:90:2a:c0:46:1d:4b:5d:ec:
c9:b9:63:b6:a0:ce:51:a7:93:c5:d7:07:f6:e1:5e:bf:a1:ec:
b3:bf:53:4b:63:15:21:16:99:fe:2b:f7:19:97:1e:ad:02:47:
43:ac:98:19:9d:9f:57:05:9c:d3:d3:12:64:3f:ec:72:69:be:
49:94:6c:4c:36:29:0d:22:df:3f:28:13:b4:4e:68:e6:57:45:
16:0e:10:ce:9a:bc:15:5f:6d:ad:3e:77:a0:93:d5:f8:4a:70:
07:05:b7:52:41:cf:81:fc:b1:f5:41:b4:c7:33:c5:0c:55:6d:
b3:36:89:2e:69:e2:36:5a:3b:0e:fe:54:ef:cc:db:15:f4:7f:
a4:f5:69:b5:63:4c:de:72:f3:a4:7b:5a:f4:5a:15:15:6b:b5:
f4:56:da:89:c6:e5:b4:dd:1e:5b:5e:c8:dd:37:07:87:9f:93:
08:b4:96:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:43 2025 by rpki-client