Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/xjFiX3Tazv8vfdg-hyeTJDL2nNg.roa
File: xjFiX3Tazv8vfdg-hyeTJDL2nNg.roa (raw, json)
Hash identifier: gUxofjjudyH3PmCtDnO7DZvfyzdGsLaCGiY65N7kKeQ=
Subject key identifier: C6:31:62:5F:74:DA:CE:FF:2F:7D:D8:3E:87:27:93:24:32:F6:9C:D8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1869
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xjFiX3Tazv8vfdg-hyeTJDL2nNg.roa
Signing time: Sun 08 Jun 2025 15:09:34 +0000
ROA not before: Sun 08 Jun 2025 15:09:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6249 (0x1869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 15:09:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C631625F74DACEFF2F7DD83E8727932432F69CD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:5a:f2:24:75:a8:55:05:66:12:5c:1c:82:
0e:9c:49:ba:ef:10:03:bf:61:62:ca:72:34:60:2e:
28:13:ca:1f:09:98:a0:9a:27:4c:86:84:6e:6a:5a:
1e:9a:85:48:8c:8b:ad:b8:35:e5:c7:d1:b0:24:38:
61:1f:fc:77:ef:a1:a2:24:c4:c5:0c:c6:22:1a:c4:
ea:df:6b:a2:1c:74:9f:6b:c8:aa:01:6b:6b:56:25:
dc:e2:db:cd:48:c7:27:c4:56:64:09:66:e6:5e:33:
27:e8:90:51:ef:63:36:6c:44:35:41:2c:71:f1:32:
78:fc:7b:f6:d2:53:b3:dc:87:8d:f9:e3:7c:86:de:
87:ff:b9:54:1b:f9:8d:f7:7f:f8:b5:88:cb:81:0d:
9e:5a:f3:e7:35:2b:f4:42:54:b5:45:90:69:39:c4:
16:93:9b:f5:20:b7:75:94:a5:96:c9:3e:41:11:49:
7a:33:5e:51:af:8f:21:3f:df:44:52:ca:e8:02:71:
ed:94:d7:1f:14:47:a6:ce:dc:c2:36:bc:b9:72:3a:
35:5d:2b:83:80:ee:86:ec:33:ee:fc:1a:a6:72:0a:
23:55:68:62:76:74:69:17:44:55:39:22:74:8d:18:
64:82:ae:26:8d:8e:fb:72:66:d2:bc:96:9e:a8:83:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:31:62:5F:74:DA:CE:FF:2F:7D:D8:3E:87:27:93:24:32:F6:9C:D8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xjFiX3Tazv8vfdg-hyeTJDL2nNg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:04:de:f8:3b:fa:fa:c8:47:5d:06:69:e0:db:12:52:a1:10:
3e:54:ae:bf:d6:35:ae:05:18:78:d9:1e:bb:df:58:bc:b7:02:
a7:24:ae:36:d3:04:64:32:fd:19:56:90:00:fe:0a:1e:5e:e4:
ca:93:5e:4c:6e:b4:c4:53:1b:50:fd:e7:a2:a9:a5:26:d2:50:
63:66:d0:24:06:05:99:c6:7e:5f:91:b7:f5:83:81:29:9b:0f:
e2:23:35:1e:f2:39:b7:59:3b:e3:46:c1:5c:65:b5:66:66:c1:
01:a0:10:5d:f2:ec:6f:ca:7b:29:25:3b:18:a8:30:34:77:b4:
2b:bc:15:ca:17:f3:22:0d:ab:24:6f:20:f8:7c:f3:ab:40:91:
22:95:90:62:23:26:51:71:28:c1:90:f6:fc:1b:9a:78:3a:93:
f2:68:39:ef:d2:dd:29:f0:1b:ab:ad:45:64:cc:a0:3c:85:1e:
1d:14:33:29:84:fc:44:eb:f1:c2:3c:cd:93:4e:0c:47:78:81:
13:fa:48:dc:21:c5:b8:aa:c7:0a:b1:da:a1:c8:5a:62:9b:37:
56:ce:3f:30:d7:91:d5:d9:a8:89:d1:8d:31:70:00:13:d5:62:
ae:97:5d:72:fb:4a:ea:45:34:ca:20:6e:53:bb:75:03:69:91:
62:2a:01:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:42:19 2025 by rpki-client