Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/w6qh-dL2F1QlQlcShEMmWDoBLBs.roa
File: w6qh-dL2F1QlQlcShEMmWDoBLBs.roa (raw, json)
Hash identifier: Gj51MpGrvg/dvDXXHIRc+GRYJCDWwN2rm8XNhkiKgQQ=
Subject key identifier: C3:AA:A1:F9:D2:F6:17:54:25:42:57:12:84:43:26:58:3A:01:2C:1B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2411
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/w6qh-dL2F1QlQlcShEMmWDoBLBs.roa
Signing time: Tue 24 Jun 2025 15:42:05 +0000
ROA not before: Tue 24 Jun 2025 15:42:05 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9233 (0x2411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 15:42:05 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C3AAA1F9D2F6175425425712844326583A012C1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:3e:e9:d1:de:e7:cd:c7:e4:d2:e6:53:4e:
ed:6f:a8:de:e7:a0:a8:29:b7:f4:d5:88:1b:2d:51:
eb:3b:95:23:67:1c:de:39:9b:18:67:9b:78:d5:8b:
8d:db:7b:f6:8c:56:11:6f:07:aa:91:35:ff:07:22:
eb:05:86:b2:9a:ee:a2:90:f7:a3:2d:72:c5:a8:49:
68:cb:3b:a9:5a:ea:9a:7c:51:7c:64:5b:09:4b:87:
d2:fe:2e:9d:be:5f:82:c2:6e:40:2a:24:61:3b:42:
5c:8e:2d:f9:55:eb:c2:e6:39:fc:9d:d4:7e:7a:5c:
b9:77:c5:5d:7c:4b:99:5f:73:4c:99:7c:ce:84:9b:
91:12:47:bf:00:26:74:9f:31:b4:bb:ad:1f:bc:66:
3e:62:b1:0c:3e:49:c3:5c:b0:ac:c7:19:ba:e5:e1:
5a:11:88:0c:42:b4:d7:c0:79:42:47:a8:50:98:1e:
d9:5f:c5:e8:36:f6:a7:92:96:a5:da:94:51:c3:3f:
9f:20:d9:bb:aa:69:96:45:a4:b8:1d:62:a1:35:b5:
d4:97:10:9f:bf:75:3f:e4:e9:73:ee:c2:0b:2a:e1:
4b:94:18:2c:ae:71:c0:05:e1:e1:e5:32:44:ce:8f:
45:9a:cf:27:1f:42:b8:0b:4f:76:08:29:ba:9e:b4:
16:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AA:A1:F9:D2:F6:17:54:25:42:57:12:84:43:26:58:3A:01:2C:1B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/w6qh-dL2F1QlQlcShEMmWDoBLBs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:44:38:d0:5d:c9:65:8e:e7:55:0a:4a:37:df:b5:02:2d:9a:
0e:51:ba:44:9a:ff:c8:e6:a0:88:7d:f6:d1:3f:8e:0c:1f:22:
20:0f:94:53:22:ca:66:eb:f3:c2:f5:c4:cc:d4:07:d3:b6:ed:
0a:9d:71:88:37:cb:50:4d:de:96:cf:b8:32:61:a3:9e:3e:40:
4d:1d:09:d8:f3:b2:8f:73:0f:11:10:36:98:a7:59:52:07:dd:
88:b2:c1:70:be:67:71:6e:dc:12:e7:66:ba:96:49:65:50:bf:
ce:72:95:b6:b9:32:c2:d7:8f:7f:93:95:95:73:60:36:cf:56:
1f:b0:b5:5f:26:a0:5f:90:60:b7:7a:55:74:49:de:ae:ed:92:
9e:15:10:90:8d:2a:03:0d:c6:23:b9:5b:92:98:92:9a:13:a3:
9a:ca:d7:a6:75:38:17:4e:76:3f:4e:4b:bf:8e:56:f5:4a:95:
ca:bd:be:88:c7:ca:0c:a9:d7:45:38:17:55:af:77:a8:48:2d:
51:56:dd:72:bd:1e:28:92:ab:40:3e:6d:f8:c5:26:e6:93:97:
bf:71:c8:56:e0:69:69:ef:95:aa:32:c5:98:7a:50:3a:41:fb:
a0:5e:09:c4:d2:a2:fc:b9:26:c4:e2:3d:c1:82:4c:f2:16:93:
0d:2c:0b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:35:54 2025 by rpki-client