Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/k6F5a96OfOXqDX30a8GW_kkwTmw.roa
File: k6F5a96OfOXqDX30a8GW_kkwTmw.roa (raw, json)
Hash identifier: JMM3jOntKpqUBdYnJj5DPcsCFCQggPdq5Csct/CgKds=
Subject key identifier: 93:A1:79:6B:DE:8E:7C:E5:EA:0D:7D:F4:6B:C1:96:FE:49:30:4E:6C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0801
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/k6F5a96OfOXqDX30a8GW_kkwTmw.roa
Signing time: Sat 17 May 2025 18:08:12 +0000
ROA not before: Sat 17 May 2025 18:08:12 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2049 (0x801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 18:08:12 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=93A1796BDE8E7CE5EA0D7DF46BC196FE49304E6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:dc:5b:f5:65:69:75:f5:dd:0e:c1:2c:66:
d0:c2:23:03:83:d8:ad:4f:99:e3:52:93:c2:a5:54:
59:2e:8c:e0:96:ee:30:dc:52:77:e4:87:49:64:6e:
cc:16:dc:7c:38:e3:2a:d9:8c:d4:0e:87:fd:8a:31:
f9:f7:a8:3f:c1:43:b9:f2:30:1b:5e:af:67:fc:a9:
bb:2b:24:7a:36:db:22:64:a7:c9:d9:98:61:2a:64:
a5:24:db:63:7c:8d:49:98:6a:c8:44:e9:a2:41:83:
4b:35:f0:5e:ef:40:09:ab:1e:53:9c:b8:41:e2:e9:
0d:0d:df:d4:7b:14:3f:8d:20:cf:cc:e4:5e:fb:6e:
5c:7d:75:10:23:f1:b9:e2:70:cb:65:18:48:f1:cf:
10:b4:db:59:ab:2b:7c:a4:8a:fa:29:d6:0f:28:2d:
96:e6:24:b1:5e:48:a6:eb:af:f1:69:54:fa:b4:57:
f4:b2:7d:94:9d:83:e5:fd:05:8c:48:65:dd:83:54:
85:aa:f3:b3:0c:3a:eb:65:b1:31:22:2e:e6:4f:f3:
a5:29:c7:3a:d6:d3:85:c7:58:a1:fa:ad:f1:1c:91:
ef:7f:09:79:31:08:d3:17:bc:a0:51:90:13:f0:3a:
f6:be:76:d1:e6:22:10:7c:33:b6:8d:93:64:ad:6b:
e6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A1:79:6B:DE:8E:7C:E5:EA:0D:7D:F4:6B:C1:96:FE:49:30:4E:6C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/k6F5a96OfOXqDX30a8GW_kkwTmw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:83:11:bf:7e:26:46:41:4b:9c:e4:00:4d:85:f3:75:ca:f3:
60:0b:1e:be:b9:05:e5:92:0a:7d:fc:8f:52:d9:7a:26:13:81:
94:03:6b:da:51:f0:94:aa:81:3a:33:70:be:a4:55:fa:a3:72:
bc:7d:59:5a:a0:5b:67:e6:7f:00:ae:be:14:35:86:8e:9b:d7:
87:ea:91:b1:92:5a:b7:95:32:ae:61:4f:11:6d:89:12:e3:b3:
ed:49:c3:f1:d8:0e:bf:b4:51:d4:07:2e:60:e6:a4:2d:c3:bb:
16:14:30:8b:45:52:d5:53:d5:9f:8a:c3:10:50:26:53:a0:9e:
dd:f0:0f:c5:0f:dc:0d:8b:ae:26:52:ea:52:1d:5b:02:e7:64:
f4:8c:54:7f:94:29:5a:a8:39:73:33:93:32:83:62:54:17:4e:
72:1d:b7:8b:33:18:9c:33:c5:c5:ba:38:6d:6a:41:18:72:fc:
7e:a1:ee:fc:08:08:5a:10:13:87:d8:b2:e6:78:fb:ac:96:3e:
70:d9:c4:fa:fe:46:52:5e:f7:e5:46:27:ab:7f:28:8c:f6:94:
23:6f:80:b5:28:6a:b7:05:52:a3:28:61:a6:23:e1:3b:81:cf:
6e:60:fc:b9:ec:40:9e:0a:bf:f5:56:c3:95:a6:bd:1c:03:ed:
5b:9d:40:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:02:08 2025 by rpki-client