Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/pVQelOvUfo3b52VBsOBG3Q0lbeQ.roa
File: pVQelOvUfo3b52VBsOBG3Q0lbeQ.roa (raw, json)
Hash identifier: KWXtwaYEz0OADhwL5VsdDXHhBcyxr0ep8rsLFMRM6kw=
Subject key identifier: A5:54:1E:94:EB:D4:7E:8D:DB:E7:65:41:B0:E0:46:DD:0D:25:6D:E4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2099
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/pVQelOvUfo3b52VBsOBG3Q0lbeQ.roa
Signing time: Thu 19 Jun 2025 22:02:14 +0000
ROA not before: Thu 19 Jun 2025 22:02:14 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8345 (0x2099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 22:02:14 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A5541E94EBD47E8DDBE76541B0E046DD0D256DE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:71:ff:79:b0:a0:4c:29:a1:94:c3:29:81:58:
e3:32:46:59:68:27:02:3a:85:e6:77:c4:60:00:7a:
88:b1:31:e8:56:ff:75:6a:7b:82:b8:4f:64:40:ae:
2d:77:03:bb:90:08:59:30:17:76:73:07:77:11:36:
58:96:38:2b:97:ce:6a:2a:53:5e:a9:59:97:75:0d:
fe:7f:d8:d5:21:ac:b4:fe:dd:75:f3:67:be:9a:3d:
09:73:ee:76:59:ad:ce:b8:c3:0d:35:90:43:cf:60:
f2:c7:b7:34:a4:a0:58:f8:40:9e:6d:a2:7d:ae:6d:
a6:4a:83:24:fe:69:fb:2e:a0:80:64:bd:54:14:b7:
a1:65:e9:82:e8:2e:5a:9d:57:66:5a:9b:f6:f7:ac:
47:2e:ce:ae:c7:64:4d:da:68:23:be:12:a7:b5:9d:
f0:9b:40:ae:3a:72:f9:e7:88:27:3e:76:03:6e:3a:
ac:f8:70:1f:d1:a4:6f:ba:4b:fc:23:d8:77:31:5c:
e5:84:1c:62:b3:83:6f:50:a3:68:f7:06:3e:46:9e:
1c:aa:44:5b:b3:ad:9e:93:87:c5:b8:e0:7f:53:5c:
21:08:61:fd:55:78:a2:2c:8d:bd:8c:20:8f:b3:f3:
68:da:4c:8d:9c:ff:4b:50:0d:03:75:ca:c0:d9:b7:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:54:1E:94:EB:D4:7E:8D:DB:E7:65:41:B0:E0:46:DD:0D:25:6D:E4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/pVQelOvUfo3b52VBsOBG3Q0lbeQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
51:1d:50:21:7d:b3:27:5d:51:f0:9b:79:5e:b5:52:01:93:e3:
78:2d:48:f9:f1:97:5a:f9:2d:18:ad:bf:d0:e9:84:c2:c7:8a:
77:c7:21:39:7e:70:46:4e:c2:85:3c:1d:29:87:fb:cc:6e:10:
d0:32:47:80:5e:eb:13:e6:50:b3:4c:0d:ee:00:f9:58:ca:e8:
62:30:24:79:f2:a4:1b:58:0f:2a:14:ae:15:64:df:e6:61:9f:
20:61:dc:3d:e9:0e:99:21:31:bf:67:f9:ba:04:26:3a:23:82:
56:14:d8:d2:42:f5:dc:87:11:dc:01:75:46:ba:59:9d:49:e8:
86:dd:92:c5:b7:fa:09:f1:fa:f9:32:16:49:08:8c:c6:1a:4d:
ca:b5:b6:cb:71:5f:47:57:75:4b:9a:1f:87:8c:ba:dc:a3:a9:
92:0b:81:17:a7:17:1a:8b:f1:7e:ec:25:1e:71:50:dc:7d:62:
50:b0:70:24:46:10:e4:df:16:8b:c3:54:c1:69:b2:58:ca:bc:
87:55:19:20:1d:3c:0b:44:55:26:be:8f:dc:8d:cf:4c:d2:17:
a3:30:01:db:3a:91:f1:4c:be:42:4e:1f:e2:d0:94:37:c1:78:
d0:58:51:27:64:da:29:53:6e:ae:fc:32:ec:14:82:8f:d2:3c:
29:80:70:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:50 2025 by rpki-client