Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ugqwZw-jae8mxfGdWn9-bxzGtw4.roa
File: ugqwZw-jae8mxfGdWn9-bxzGtw4.roa (raw, json)
Hash identifier: Q8y7uoBrfppBZvQmLMNgLAqcv9OC2+RLp0Ne3InttQs=
Subject key identifier: BA:0A:B0:67:0F:A3:69:EF:26:C5:F1:9D:5A:7F:7E:6F:1C:C6:B7:0E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2049
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ugqwZw-jae8mxfGdWn9-bxzGtw4.roa
Signing time: Thu 19 Jun 2025 08:08:28 +0000
ROA not before: Thu 19 Jun 2025 08:08:28 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8265 (0x2049)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 08:08:28 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BA0AB0670FA369EF26C5F19D5A7F7E6F1CC6B70E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:7d:80:f4:1c:a1:69:22:45:08:5b:22:7d:
e2:ef:3f:9c:bd:9c:9b:3d:5b:86:69:ce:b5:6f:11:
92:22:60:93:dc:9e:f1:c1:f9:ec:81:f6:3d:f5:39:
9b:cd:6c:9a:da:01:1d:11:6e:8d:a1:3e:0a:58:41:
c2:83:79:50:20:ee:49:b0:aa:ea:eb:05:88:49:3b:
7e:00:e9:f8:13:ae:a7:18:45:bc:e9:dc:ef:6d:64:
15:96:de:63:8e:15:9f:43:70:b0:a1:c5:80:b1:33:
0b:ae:32:7e:3e:02:c8:6f:49:64:dc:36:79:14:91:
99:cc:d0:49:9e:f9:2d:44:4e:5c:de:db:3e:6e:bd:
9b:18:c7:da:9f:da:68:33:0d:c3:3e:f8:4b:e6:06:
b9:6f:f6:2f:e9:c6:6d:1b:30:34:af:9d:6c:9f:a2:
02:0c:1a:3c:df:7f:19:2e:f2:3d:da:1e:da:de:09:
6e:04:78:5e:3b:08:63:76:0e:dc:f5:8a:13:1e:f3:
0d:24:8b:cb:64:55:42:28:f8:41:a5:89:69:d6:f2:
eb:11:7a:cc:25:96:65:7c:78:20:bb:45:14:af:0e:
8f:15:0b:08:3a:45:c0:b4:15:d9:8b:66:0a:44:02:
07:66:fa:5e:34:f8:70:61:d3:06:70:74:9f:41:0d:
43:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0A:B0:67:0F:A3:69:EF:26:C5:F1:9D:5A:7F:7E:6F:1C:C6:B7:0E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ugqwZw-jae8mxfGdWn9-bxzGtw4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:c0:84:9e:42:bf:e3:00:ef:28:0c:a2:81:5a:02:20:71:f7:
ed:92:24:50:88:e5:a4:ad:4d:c6:92:9f:21:06:16:d9:38:66:
b5:20:a0:34:63:c0:19:84:62:f0:7b:9c:c7:2e:85:9d:b3:7b:
52:c0:de:b2:02:c4:63:07:93:bc:32:75:90:d0:3b:32:d6:2b:
a9:a1:cf:98:8c:15:03:96:0d:de:69:f1:bf:73:ae:53:2a:e3:
3d:64:5c:62:2f:60:34:0d:6a:49:df:3a:b3:ad:0c:5f:e9:aa:
66:5c:76:37:cf:0f:e2:8e:62:44:fd:34:f8:77:5b:b2:c0:55:
69:5e:9a:99:97:3d:ba:8a:8f:89:9b:59:da:e6:6c:02:cb:3d:
dc:2f:6b:4d:ba:8d:40:f6:52:78:fa:aa:f8:42:16:eb:65:a7:
da:e6:a0:66:68:47:80:1b:c8:b1:d5:e6:62:df:05:f2:31:04:
ee:dc:23:92:ab:e6:fb:d8:a8:8a:d4:70:d3:04:f8:08:e6:90:
b9:67:fb:f5:f2:e1:55:ed:7d:b7:6e:71:07:3a:c0:99:32:67:
60:7f:98:63:b6:c6:22:3b:bf:1e:b8:7a:1a:db:2c:56:21:6d:
0f:13:d3:27:ee:ff:ec:64:b3:ee:14:62:af:2c:47:a9:95:ee:
1c:a9:28:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:50:37 2025 by rpki-client