Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/qjhp6t0CLxoZ3HrK6sqtAcH76Oc.roa
File: qjhp6t0CLxoZ3HrK6sqtAcH76Oc.roa (raw, json)
Hash identifier: JA9Jr4MpgZUx27UvuP7NMZN76OqtAdOG8RgOni6bGfs=
Subject key identifier: AA:38:69:EA:DD:02:2F:1A:19:DC:7A:CA:EA:CA:AD:01:C1:FB:E8:E7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B91
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qjhp6t0CLxoZ3HrK6sqtAcH76Oc.roa
Signing time: Thu 22 May 2025 12:08:24 +0000
ROA not before: Thu 22 May 2025 12:08:24 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2961 (0xb91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 12:08:24 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AA3869EADD022F1A19DC7ACAEACAAD01C1FBE8E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:ea:57:88:06:c9:af:9a:4a:cd:4f:c6:6e:
22:af:17:f4:91:c6:b6:b6:00:91:ee:a7:ab:55:52:
04:2e:39:55:08:37:c3:87:33:ff:03:d4:ca:90:99:
ef:6a:94:64:57:10:0a:21:81:64:cf:5b:0b:ec:76:
a7:10:e3:f7:1e:6c:80:fa:24:eb:8f:e5:f7:fa:50:
7b:a1:bd:ac:be:88:21:07:64:de:06:8e:9f:c5:70:
3e:02:c5:49:4e:44:b0:b8:7f:4d:15:7e:1e:ea:94:
2b:6e:22:60:6d:7e:46:9f:f0:20:d1:68:f9:d1:e4:
0e:ad:b3:aa:98:25:c0:1c:0d:96:68:b4:cf:c4:ed:
89:81:3b:25:56:f9:ae:35:da:77:0b:15:26:b4:e0:
53:f0:db:69:bf:ca:25:9b:58:eb:4c:de:17:92:ea:
96:00:85:2f:19:e6:f1:0e:8c:64:63:14:8a:9b:4b:
71:fa:1b:c0:25:af:7b:20:7b:fb:6a:55:5b:65:89:
a0:a5:14:4b:f7:f8:f5:75:5e:6f:ef:8a:69:2c:c1:
8d:0e:03:d9:2c:3a:7d:26:db:5b:ef:f9:8f:ef:81:
15:d8:6a:cb:4b:0c:1c:e6:4b:d2:b1:00:73:97:4f:
60:81:91:08:42:84:eb:df:6b:48:08:6c:4b:db:29:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:38:69:EA:DD:02:2F:1A:19:DC:7A:CA:EA:CA:AD:01:C1:FB:E8:E7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qjhp6t0CLxoZ3HrK6sqtAcH76Oc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:45:34:65:79:e0:41:4e:a9:01:80:58:96:c7:7b:a4:fc:03:
17:ac:80:25:0b:60:bd:54:ac:01:31:8f:46:aa:b2:25:c4:62:
39:f7:b2:f7:72:46:c9:e0:a3:ac:35:52:d3:b5:02:1e:45:68:
de:8c:cb:7f:85:7c:d6:be:78:3e:1f:fb:e3:b4:e8:49:4b:33:
c2:1c:0b:c5:46:01:a9:15:46:55:6a:c3:d0:a1:e1:81:9f:1e:
8f:e5:4a:cd:e3:2b:09:7a:0c:6e:8d:44:ac:23:b9:58:c8:59:
5b:7a:1b:99:fa:36:ae:97:11:41:53:ab:43:ad:9d:44:07:72:
fa:4c:4f:98:53:99:42:3b:21:4b:ec:98:52:97:79:9f:d2:1d:
fe:b5:a2:86:a1:7d:d5:5b:47:cd:5e:b1:2f:7b:29:ce:ba:01:
ee:19:17:8e:a0:fe:b7:64:fa:db:93:c2:84:6f:91:1f:1e:4e:
09:e0:e4:46:0a:b8:3c:6b:f9:71:95:75:89:cf:2f:e0:56:fb:
ef:96:bd:b4:4c:94:06:52:3d:eb:2a:05:d5:ac:64:18:f9:a6:
b5:71:ca:c4:f7:49:3d:b7:29:59:1b:d4:7d:b2:58:74:fe:46:
34:6e:53:49:e3:f5:c4:bc:9a:7e:58:db:3f:90:2e:02:df:89:
eb:52:15:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:55:47 2025 by rpki-client