Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/qx5FpoQFBUedh5TM8dORMhV9Y34.roa
File: qx5FpoQFBUedh5TM8dORMhV9Y34.roa (raw, json)
Hash identifier: uV6D6PVjp29SluuJ14Z/dprbGIdq7NIyn1p7g0RYHoE=
Subject key identifier: AB:1E:45:A6:84:05:05:47:9D:87:94:CC:F1:D3:91:32:15:7D:63:7E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 12F9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qx5FpoQFBUedh5TM8dORMhV9Y34.roa
Signing time: Sun 01 Jun 2025 09:09:09 +0000
ROA not before: Sun 01 Jun 2025 09:09:09 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4857 (0x12f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 09:09:09 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AB1E45A6840505479D8794CCF1D39132157D637E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:83:66:40:0a:13:c0:19:4e:49:a8:fe:8d:
86:7c:39:84:c6:22:03:36:4d:75:c6:7d:a0:de:7f:
cd:7f:dc:08:b4:b4:60:d2:cb:8a:b0:97:f6:cd:04:
34:2b:7c:3b:f1:4d:47:eb:36:d2:1b:da:30:89:e6:
7d:d7:4f:df:a0:11:91:17:7b:6e:74:77:a7:81:3a:
94:5a:a2:b2:9b:c3:74:44:bb:de:45:51:b4:d6:57:
18:2c:0b:ec:4b:b1:ba:01:f6:09:36:e1:d3:9d:0c:
a8:30:00:98:35:67:62:22:90:01:02:74:6f:a6:4e:
69:96:b3:93:a8:41:89:13:0b:85:66:c6:7d:df:97:
13:63:80:83:c5:26:f3:0d:a8:eb:d2:ef:59:6e:1a:
e6:a0:7a:28:d2:2f:60:48:da:fb:62:d6:d6:6d:f1:
33:c0:34:77:75:7e:2b:1e:5d:38:79:a9:d9:5a:04:
37:f0:cd:7f:39:97:d9:9e:e8:40:d3:45:30:d3:84:
c4:30:66:c5:b1:e2:a2:df:31:e6:33:91:01:89:d7:
f7:c2:bc:a8:6c:f2:1e:df:fd:25:77:8e:eb:43:ab:
04:b7:8a:c1:f2:3d:1c:44:a6:a8:aa:3c:f7:2b:f1:
3a:f7:ef:7a:88:d2:7b:e8:4e:8b:e3:f8:b2:d1:27:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1E:45:A6:84:05:05:47:9D:87:94:CC:F1:D3:91:32:15:7D:63:7E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qx5FpoQFBUedh5TM8dORMhV9Y34.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:21:d9:a2:9a:e6:93:2e:66:63:f4:9d:27:8b:fc:67:a0:15:
5b:f4:4a:83:99:21:ed:9f:31:3e:03:89:ac:63:26:48:ea:f8:
41:f3:ec:22:5e:6e:25:9c:d7:59:13:8e:3a:92:36:74:2c:8d:
6b:da:14:92:10:1e:d6:18:f1:b7:d8:6a:d1:03:15:cc:e5:17:
8a:e6:0b:3b:52:57:40:3e:87:67:14:50:4f:f4:58:d0:5e:d6:
ab:af:09:d2:85:b7:ce:3a:82:75:65:43:2d:00:4c:c9:76:25:
5a:39:b4:8e:7a:ed:a8:66:1f:9b:30:0f:6a:ed:cf:58:0c:70:
49:3b:18:c7:12:e3:99:53:5d:88:75:28:fd:8d:9f:ae:a8:95:
43:82:34:eb:b8:c7:41:ed:8a:55:9f:86:e6:2f:c5:71:b8:0e:
64:68:41:31:a3:5b:df:c6:c8:03:b7:83:39:21:19:69:aa:f9:
a2:10:26:ae:5e:40:9f:1a:e7:9e:74:b5:5b:5a:36:cf:72:1d:
f2:0a:41:6c:30:84:cf:6d:58:f0:e2:30:e8:1f:e0:30:34:78:
ff:19:4c:47:1e:35:7f:af:5f:71:83:04:55:a1:90:9d:1e:90:
1a:d6:4c:d2:af:c3:8b:56:11:d5:a3:78:4c:90:10:da:d7:c4:
31:f1:3a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:04:01 2025 by rpki-client