Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/kDlo6DRyCJ_8EcJz3A7rF1wmd3E.roa
File: kDlo6DRyCJ_8EcJz3A7rF1wmd3E.roa (raw, json)
Hash identifier: VYxcx8jsKj3znHm3K5OMFXHH829Sb6StR+vT7hNwBUg=
Subject key identifier: 90:39:68:E8:34:72:08:9F:FC:11:C2:73:DC:0E:EB:17:5C:26:77:71
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1C7D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kDlo6DRyCJ_8EcJz3A7rF1wmd3E.roa
Signing time: Sat 14 Jun 2025 01:39:54 +0000
ROA not before: Sat 14 Jun 2025 01:39:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7293 (0x1c7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 01:39:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=903968E83472089FFC11C273DC0EEB175C267771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:09:78:32:e6:d7:f3:4b:de:e5:4d:ba:d8:50:
e2:66:1d:ae:5a:e3:ee:de:58:45:75:07:d9:97:b5:
1e:c0:f7:ee:8a:ed:e7:61:7a:ae:4d:97:06:94:90:
9c:37:c6:17:6c:74:c5:30:29:13:a1:0a:df:df:47:
78:9c:74:76:5b:9b:14:82:ea:63:6a:d8:5f:49:f5:
97:55:4a:73:e2:fd:74:c0:fd:d0:d4:9a:d1:bb:bf:
ba:dd:b7:ba:8c:93:e1:2a:de:0e:41:96:7e:7f:68:
3a:f6:e5:b9:1b:fd:30:aa:81:7b:09:ea:ca:c1:aa:
4e:01:17:6f:63:43:8f:29:f8:fb:a9:fe:45:ef:a3:
a9:e8:3f:45:48:e8:bf:e3:2b:a2:86:5c:e0:d1:d1:
be:e3:fe:8d:ed:92:2e:80:80:ca:05:b0:d2:1e:02:
a2:e8:64:1e:91:e6:6f:29:28:df:85:56:4b:2e:4e:
86:95:98:cb:6c:b8:b1:fe:de:a3:ef:83:3c:bc:e9:
80:8a:bb:f6:a8:63:6e:bf:d0:70:fe:5f:e2:1d:05:
d4:26:79:3f:87:c8:ae:21:6d:80:ac:bc:3b:b5:87:
4e:1b:83:73:1b:ae:77:0f:34:da:bf:d9:ae:17:1f:
3c:e2:00:23:21:1b:c7:d5:c1:08:ba:a7:29:33:af:
08:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:39:68:E8:34:72:08:9F:FC:11:C2:73:DC:0E:EB:17:5C:26:77:71
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kDlo6DRyCJ_8EcJz3A7rF1wmd3E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:a2:ba:81:d7:4e:93:33:4e:24:92:3e:cb:6c:ad:68:02:47:
7d:4f:34:7e:f4:0a:4e:d6:c4:b8:b9:c1:33:ce:05:da:31:cb:
06:8f:1e:3e:81:97:68:2e:99:0a:ad:d2:06:29:00:b6:ee:cf:
bf:03:d7:31:0a:07:8e:7b:b3:54:32:fa:6a:8b:8f:3d:b6:97:
fc:dd:42:13:3f:4b:3b:20:0f:aa:7a:01:0b:a3:57:2b:ed:5a:
d2:f6:18:91:d3:8c:d2:f6:8d:22:4c:30:00:9a:97:00:40:db:
87:39:23:d4:78:40:a1:4a:c5:33:cd:98:94:15:02:95:b2:68:
6b:09:d1:8a:08:25:0a:66:b1:28:c7:bc:a7:b9:25:c3:6c:9e:
31:69:60:53:b0:98:6f:c6:f7:75:b0:57:47:7e:10:1f:1e:cc:
40:f1:ec:89:5f:4b:9b:f4:3f:b1:42:75:1c:38:12:54:5e:53:
ea:a6:14:db:70:66:ac:53:cc:51:3a:96:37:2f:10:81:23:81:
0e:29:65:59:7f:b8:db:16:9a:17:0c:85:07:9a:df:3e:34:eb:
90:bc:b9:9d:95:fa:de:87:47:01:d5:1b:75:bf:ec:71:ec:e3:
ef:57:6b:12:f6:14:94:d0:89:7b:f1:f8:40:18:83:68:3b:c9:
81:d4:e5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:43:20 2025 by rpki-client