Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/nPuUhT3YQk5MMOyALnUhyMzqrWQ.roa
File: nPuUhT3YQk5MMOyALnUhyMzqrWQ.roa (raw, json)
Hash identifier: wPADzOCd1++JZyWcRscNHKV7HFUDLurPQv8cL6Wmb0I=
Subject key identifier: 9C:FB:94:85:3D:D8:42:4E:4C:30:EC:80:2E:75:21:C8:CC:EA:AD:64
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 12BD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nPuUhT3YQk5MMOyALnUhyMzqrWQ.roa
Signing time: Sun 01 Jun 2025 01:39:07 +0000
ROA not before: Sun 01 Jun 2025 01:39:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4797 (0x12bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 01:39:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9CFB94853DD8424E4C30EC802E7521C8CCEAAD64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a9:c1:dc:e8:7b:59:40:6e:67:e2:e8:cb:b6:
bd:f0:48:e6:91:45:70:99:dc:db:bf:c2:25:24:ee:
5e:44:19:83:be:92:4d:59:93:96:94:bd:c0:a7:73:
54:3a:07:50:f3:cb:5c:4a:12:d9:25:54:1e:60:d5:
c4:8e:8f:7c:67:b8:b0:7b:df:6c:27:1f:31:2a:0b:
ed:0f:e6:f5:a3:24:a2:13:08:07:a9:e9:92:52:78:
fc:fb:7d:fb:2c:15:cf:a0:9f:27:7b:8c:90:16:c3:
d7:50:df:60:38:f8:c2:6d:78:dc:32:00:8d:17:b1:
45:53:10:e2:13:5b:b3:f1:57:d1:1a:c9:c0:dc:7a:
78:9a:33:84:11:d7:a6:52:5b:e0:32:3f:84:ac:27:
64:bc:65:19:97:cd:02:80:10:9c:5b:b6:11:5f:9d:
36:37:52:25:39:9c:c8:18:54:1c:7c:ff:24:bf:3a:
ff:65:e1:5a:c3:3a:17:d7:ac:06:0a:82:30:69:83:
84:8f:4f:55:07:22:3b:38:84:ee:e7:70:2f:a4:6d:
3d:36:91:39:d2:3f:99:9b:5d:20:45:09:51:c0:0b:
23:13:af:48:26:8f:4e:e1:fb:2c:5e:fa:33:fa:12:
4f:6c:14:88:11:9a:13:31:56:25:58:c7:79:84:03:
a9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FB:94:85:3D:D8:42:4E:4C:30:EC:80:2E:75:21:C8:CC:EA:AD:64
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nPuUhT3YQk5MMOyALnUhyMzqrWQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:ac:f9:3a:f3:fb:f4:2e:4d:cc:b6:91:d0:00:ed:61:2c:75:
c9:6e:86:c1:7d:05:a0:d5:71:0b:69:be:63:47:89:07:29:78:
f2:dc:d8:95:f0:ee:88:f1:6e:cd:22:1f:b0:03:fb:fb:54:51:
f9:ee:5d:9f:2d:2b:47:c4:ac:4c:72:28:c5:5b:99:12:2e:11:
2c:e9:22:3a:2f:37:7e:fe:c7:36:9d:bb:01:95:b6:a6:d0:eb:
35:6a:03:49:d2:d8:15:b7:fe:a4:29:d6:63:d2:5c:2d:6d:36:
28:06:2e:dc:fb:80:f0:db:a3:96:c2:ae:43:bf:16:ee:bd:90:
43:56:7f:6a:25:21:2d:87:ba:ff:66:d0:13:e3:15:75:36:fa:
51:31:ec:0a:20:84:93:e5:26:df:fb:f3:80:a7:39:65:94:c0:
d5:ed:a0:a4:d7:c6:33:ef:f1:f5:03:99:28:17:bf:9a:0f:32:
73:19:e8:1a:81:3e:a5:73:a5:3a:05:20:bf:6d:45:6a:92:8c:
ba:e6:d0:8e:b0:86:88:90:2b:7a:6b:76:e5:c3:6f:73:fd:74:
ee:05:51:2d:4c:97:b7:66:fb:45:bc:b7:e8:02:40:c3:6e:1f:
a2:c8:1f:c1:d3:3b:d3:83:9f:59:66:d6:f2:b7:a8:03:9d:16:
6b:e1:c6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:36:10 2025 by rpki-client