Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/pi0gm3iHxWp0viTqR4X21z2ktyA.roa
File: pi0gm3iHxWp0viTqR4X21z2ktyA.roa (raw, json)
Hash identifier: wGX11fCiyemtTT8YHwlqvnhSaRi4C1buSiCb8vXw7/4=
Subject key identifier: A6:2D:20:9B:78:87:C5:6A:74:BE:24:EA:47:85:F6:D7:3D:A4:B7:20
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1EC1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/pi0gm3iHxWp0viTqR4X21z2ktyA.roa
Signing time: Tue 17 Jun 2025 02:10:03 +0000
ROA not before: Tue 17 Jun 2025 02:10:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7873 (0x1ec1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 02:10:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A62D209B7887C56A74BE24EA4785F6D73DA4B720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:14:62:3d:fc:44:2b:43:6f:a5:75:4e:59:
10:4a:2b:86:1e:22:3c:58:ab:8e:df:1d:b0:78:87:
72:d5:d2:95:cf:f3:9b:13:51:b8:1f:eb:fb:54:1d:
d8:40:32:ea:f9:f2:18:57:b1:a4:28:89:54:3b:5b:
b7:02:e5:50:f1:8c:b6:ae:ce:f6:79:9b:42:28:67:
35:5b:1c:a0:5c:10:0c:de:e2:6d:75:75:37:08:5a:
8c:3b:74:67:80:30:43:5b:d2:f3:c7:91:4e:01:5a:
8d:8b:13:c0:8c:eb:99:aa:df:d0:87:24:b3:b3:65:
ff:2d:29:86:76:04:97:77:c0:a3:5b:62:ba:ac:d9:
a8:9e:6a:06:c2:d9:34:83:28:ec:e4:96:bc:ed:a0:
d3:b7:04:5a:ef:a8:41:b1:19:e9:c2:dc:e5:e2:c0:
39:95:b1:c3:e6:f2:cb:08:41:ca:43:2c:56:4a:ee:
2c:9d:8c:65:e6:18:74:2d:f6:51:7f:06:04:39:fb:
ef:85:d1:06:99:d2:a3:cf:ca:3e:59:5f:6e:7c:1f:
7c:17:98:81:40:af:31:26:36:bc:2a:59:56:f5:62:
82:12:e8:db:0c:17:cc:34:e8:a7:88:25:39:a1:c0:
6d:6b:7e:12:3a:5e:5f:9c:65:ea:93:68:ce:50:0a:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2D:20:9B:78:87:C5:6A:74:BE:24:EA:47:85:F6:D7:3D:A4:B7:20
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/pi0gm3iHxWp0viTqR4X21z2ktyA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:fe:ec:bc:8c:f6:47:db:3d:85:9c:22:c9:08:9c:21:3c:39:
73:e3:d7:ed:3a:2c:46:e9:ea:5d:d6:9b:5a:e8:94:67:a0:be:
26:27:5c:02:aa:3e:e0:81:b4:b2:5b:53:bf:d9:80:49:a0:35:
bf:b2:1e:54:91:e0:39:75:93:c3:c0:40:2d:45:91:e1:cf:ac:
25:34:67:99:4e:66:cb:8f:4f:7c:73:90:14:71:04:ce:85:8b:
a4:9c:98:4f:7f:0a:74:80:16:80:c3:18:41:2b:7e:e4:69:03:
b2:90:1e:df:0d:34:3d:36:34:87:1d:d6:23:3e:28:4a:50:6d:
69:0b:a5:dd:71:f0:03:a4:28:58:37:00:39:60:37:4e:45:31:
17:5d:3e:a5:32:6e:cd:6b:0d:00:85:c4:39:f9:e7:0c:50:2a:
2a:f9:60:73:d8:89:89:69:9f:1a:98:9e:27:2d:1c:5f:a2:b9:
f5:69:e0:a7:c6:a0:09:77:4b:53:56:42:59:24:51:45:c0:38:
06:a0:30:1f:6d:18:c0:56:2a:ac:5f:04:e7:ff:d0:67:44:89:
2b:f4:d4:e0:10:81:20:32:f9:15:cb:80:7a:24:9d:77:2e:41:
c2:05:a5:86:3b:71:c6:92:32:63:60:86:11:14:06:ab:16:1e:
1c:f3:52:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:50:47 2025 by rpki-client