
Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/u43ZqODxsGRffDaW6l3Zzk1go3s.roa
File: u43ZqODxsGRffDaW6l3Zzk1go3s.roa (raw, json)
Hash identifier: ypn8wMRi0COYPCKfhBKP7TptrzIEOVGZSvKYhxNdFkg=
Subject key identifier: BB:8D:D9:A8:E0:F1:B0:64:5F:7C:36:96:EA:5D:D9:CE:4D:60:A3:7B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2071
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/u43ZqODxsGRffDaW6l3Zzk1go3s.roa
Signing time: Thu 19 Jun 2025 15:43:39 +0000
ROA not before: Thu 19 Jun 2025 15:43:39 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8305 (0x2071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 15:43:39 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BB8DD9A8E0F1B0645F7C3696EA5DD9CE4D60A37B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:11:0c:e8:ff:7a:18:c0:42:d5:21:54:4c:
7c:6d:af:ec:54:95:72:3b:0d:52:c1:1a:90:48:e0:
dc:66:2d:a6:4b:e0:9e:36:30:26:b5:80:ee:59:5e:
fc:57:0b:24:ff:ca:82:c7:1f:47:57:e1:57:a3:be:
7b:7c:32:38:52:06:56:0a:00:21:3d:5d:37:2c:eb:
e6:8f:38:22:01:64:c7:3a:0c:98:c4:25:35:d5:9d:
1b:b3:4f:59:aa:11:b5:bd:2a:5e:0e:16:cb:f3:22:
3b:c0:30:01:79:0c:14:27:d9:96:80:22:ea:54:6b:
36:e5:0d:ae:8d:be:41:a8:34:ed:5a:b7:c3:bf:74:
a7:08:e8:9e:01:fd:27:28:0c:a1:91:76:0c:5f:57:
92:74:5e:06:ca:6e:39:35:e8:62:c1:a2:cd:b9:b4:
75:34:1f:23:07:98:65:67:ae:cd:c3:75:69:32:50:
9f:89:14:11:a1:41:4a:29:c6:bc:23:07:9b:38:92:
cf:00:89:b0:9f:9f:bd:7c:cf:9d:39:f8:12:57:be:
80:29:a4:7b:99:b1:5e:0f:2f:93:1d:41:ec:0e:e6:
51:a8:b0:bc:bd:74:bf:dc:75:f2:82:8b:89:3e:82:
82:4a:70:b7:2c:e1:88:46:49:02:29:bf:be:d7:80:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8D:D9:A8:E0:F1:B0:64:5F:7C:36:96:EA:5D:D9:CE:4D:60:A3:7B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/u43ZqODxsGRffDaW6l3Zzk1go3s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:52:97:1e:fd:30:e9:7b:75:24:96:e5:b8:f0:d3:6f:f2:2f:
85:10:b4:a8:3d:0d:6d:3d:1e:5b:6e:b3:a3:43:ab:3a:d4:d0:
da:e4:23:7a:96:b6:3e:20:f0:c1:1a:04:df:18:75:2c:6f:a3:
86:ac:55:18:5a:e6:da:0b:d6:ca:3c:43:95:ff:7e:d7:11:e7:
05:73:4f:71:73:f5:57:41:6d:76:34:b9:94:88:7e:1e:6a:c8:
db:bb:74:7e:28:73:6a:42:a0:e5:a6:d4:87:69:7f:72:e0:54:
2c:cb:b9:77:e7:84:8a:ea:f4:1f:27:e3:e7:2d:72:e5:f9:c9:
3d:c1:2b:42:73:76:2d:37:8d:46:94:b1:01:34:2f:4a:37:0c:
1a:64:1b:ed:0e:bf:8e:12:37:88:7c:f6:69:5e:ef:bb:19:8c:
d8:e8:dc:11:b8:22:5f:eb:f4:ae:3d:97:aa:bc:a8:83:30:21:
25:b7:e6:d0:50:69:c7:1c:a4:58:cb:85:3b:f6:7e:c8:6a:85:
b3:83:b3:ed:86:99:54:1a:63:2b:4a:86:8c:8e:e0:43:6f:52:
7a:1e:e8:be:1c:3b:50:0e:52:b5:f8:2a:49:02:9c:e8:6b:65:
38:bd:ce:c6:30:80:e8:e3:9f:64:60:d7:b8:8c:f0:02:80:11:
0f:59:64:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:48:43 2025 by rpki-client