Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/rm7A7GtrTwNYt8eons1Bd2sq_eg.roa
File: rm7A7GtrTwNYt8eons1Bd2sq_eg.roa (raw, json)
Hash identifier: SJYa/ZG932Ly5u29D4u9VPOCTzwMEqme+FpAL4Gxz3M=
Subject key identifier: AE:6E:C0:EC:6B:6B:4F:03:58:B7:C7:A8:9E:CD:41:77:6B:2A:FD:E8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2441
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rm7A7GtrTwNYt8eons1Bd2sq_eg.roa
Signing time: Tue 24 Jun 2025 21:42:02 +0000
ROA not before: Tue 24 Jun 2025 21:42:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9281 (0x2441)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 21:42:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AE6EC0EC6B6B4F0358B7C7A89ECD41776B2AFDE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:e3:09:cc:af:63:88:cf:73:df:23:71:f2:
59:be:62:bd:87:ef:dc:6f:08:0a:98:1d:07:2e:9e:
87:5e:d1:eb:18:3b:41:e3:15:20:72:b8:95:92:58:
bd:38:53:24:ac:1b:de:71:6b:f1:4d:60:78:c2:5f:
4c:c5:61:fd:3c:76:26:a3:6b:9f:d8:5b:46:e3:3e:
9d:3f:00:79:73:9b:23:5b:dc:a7:b2:16:f7:17:12:
34:60:f7:56:01:98:34:5a:e8:6a:d7:bb:05:2e:99:
d6:ab:d0:fe:86:97:40:d9:ba:19:f5:2a:00:47:b1:
f8:7f:f8:f8:3a:f7:e8:d2:3b:78:97:bb:9a:10:94:
84:8a:d9:80:30:0b:b8:10:4e:f7:2a:72:49:17:8f:
21:28:9e:69:03:25:a5:45:6b:bb:32:99:a1:e3:87:
80:ac:46:46:47:97:73:1b:1e:c1:91:75:c6:bf:24:
0b:64:0c:7d:f4:46:1f:2c:8d:74:97:c7:1e:c5:32:
dc:60:56:7c:54:01:bd:92:ab:fa:14:bb:a0:f8:eb:
d9:9f:2e:16:7f:eb:6b:d7:2a:0f:ea:21:b5:27:ce:
79:31:b5:85:76:b9:23:a7:91:af:32:85:05:11:ac:
30:6f:ed:71:e6:46:84:42:aa:3a:4a:6c:d8:b1:91:
76:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6E:C0:EC:6B:6B:4F:03:58:B7:C7:A8:9E:CD:41:77:6B:2A:FD:E8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rm7A7GtrTwNYt8eons1Bd2sq_eg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:a6:6d:b8:2b:cb:04:69:b5:ce:c6:89:a6:38:ca:05:be:fb:
ee:84:3a:3d:83:da:62:7b:20:ea:a5:1a:6c:0f:12:78:9a:42:
bd:60:6d:ef:1a:f5:96:d4:6b:b0:40:46:59:18:f6:4e:e6:85:
88:ce:db:ac:4e:cd:c2:36:64:50:4a:3f:8a:9c:c9:5b:1f:2b:
5b:e6:a8:7f:96:78:7f:d0:95:e5:9c:bc:64:0e:dd:61:3d:f4:
17:12:16:4a:8b:76:eb:d0:8c:36:fa:49:15:31:88:85:53:25:
0c:3e:46:c2:93:82:a4:c7:06:7c:da:97:c9:ee:1f:f2:de:0b:
41:e5:6b:4d:f3:68:1c:c0:ad:92:11:ee:c4:98:6b:7d:77:d7:
1f:df:5f:7f:c4:d9:63:7d:46:2f:56:5a:5a:a1:26:4e:f9:80:
b1:f8:03:f4:71:91:ab:74:58:1b:7e:3d:74:2d:d6:cc:f2:16:
7d:62:97:7f:6b:02:9b:ee:4f:cf:ae:ce:95:c3:94:7e:0d:74:
09:63:61:a9:07:96:0d:ef:23:4e:0c:9f:00:ea:dc:df:5a:69:
ca:cd:83:68:35:b3:09:44:55:eb:b8:1a:b1:66:6d:dc:6c:e5:
c3:b5:1b:21:d9:00:67:68:54:ac:c9:c7:43:c1:65:54:b0:91:
bb:83:cd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:39 2025 by rpki-client