Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/04XkHybd6q-6oZVjtyX32mgUNbU.roa
File: 04XkHybd6q-6oZVjtyX32mgUNbU.roa (raw, json)
Hash identifier: ZdFMr2NKV6rK2LoPBzsbaXMH681KDUhrg0Mc0uy1HPQ=
Subject key identifier: D3:85:E4:1F:26:DD:EA:AF:BA:A1:95:63:B7:25:F7:DA:68:14:35:B5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0769
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/04XkHybd6q-6oZVjtyX32mgUNbU.roa
Signing time: Fri 16 May 2025 23:08:08 +0000
ROA not before: Fri 16 May 2025 23:08:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1897 (0x769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 23:08:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D385E41F26DDEAAFBAA19563B725F7DA681435B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:c7:ac:88:2b:e1:af:58:d4:46:63:41:1e:
f2:1f:33:2a:30:d4:f8:47:fb:ac:98:f5:99:56:ef:
93:1d:28:b4:01:70:cb:fc:94:03:2c:e7:9a:af:f6:
7f:80:c0:86:38:b2:e3:56:43:85:93:ae:fd:ee:19:
3c:12:68:30:be:1a:60:9e:73:39:68:9a:9f:9d:f8:
e2:70:61:7a:8c:6a:fb:b9:2e:ee:e6:82:ee:ba:42:
6f:96:de:5c:61:6c:96:25:42:9c:d0:c1:b3:59:94:
c4:d3:0d:ea:43:66:8e:d5:7b:5a:9a:1a:84:ee:47:
bf:ef:84:9a:31:48:43:61:43:73:48:ff:68:8a:c4:
33:db:d4:e0:95:ce:78:3b:c1:b8:63:3b:23:00:49:
8c:7b:c6:e8:8c:71:7d:3e:0a:ca:b3:f7:b1:34:6b:
9e:28:92:ac:4d:3c:72:4e:ce:02:92:6a:86:fa:76:
8f:2b:57:2b:98:b4:ca:be:ae:c7:fa:1f:45:ca:85:
24:5e:78:75:24:07:77:2d:9b:cd:3d:d6:26:b5:c8:
d4:6a:c6:97:73:72:d6:39:90:c8:bf:1c:55:f6:19:
6e:66:a8:5c:44:bf:78:7f:25:69:b6:39:26:8f:8f:
fd:bd:8e:41:b7:08:fe:01:8d:c7:33:0b:00:24:2f:
1c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:85:E4:1F:26:DD:EA:AF:BA:A1:95:63:B7:25:F7:DA:68:14:35:B5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/04XkHybd6q-6oZVjtyX32mgUNbU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:fc:6d:c5:d3:a8:87:45:9d:b0:72:b5:4e:e7:13:26:37:de:
3b:39:31:bf:11:ee:17:cb:55:7d:38:ff:73:90:4d:ed:b8:37:
89:ef:d3:f4:f7:b5:a8:9c:25:4d:f1:cd:3b:c9:52:33:8a:e0:
79:51:cd:63:13:de:13:fa:0f:22:a8:17:6f:c8:28:9d:30:4c:
3c:75:a7:c7:94:b3:c6:b7:d3:be:54:b5:4c:f8:d7:7f:26:be:
29:0e:b7:2d:36:f9:08:27:6b:46:60:95:30:f4:96:89:5d:7f:
6f:d5:e4:81:2a:f8:13:e4:1b:48:44:f3:9c:8a:79:c1:60:40:
bb:3c:8a:18:27:16:ad:88:55:f0:cb:68:21:90:64:4b:62:65:
04:67:27:29:2f:87:ff:09:4f:2f:f0:a4:4d:7d:b8:53:90:7b:
59:b7:1b:3f:aa:fa:a5:cb:e1:5c:89:f9:5e:7a:f2:d9:90:10:
ab:29:1a:b6:de:21:4b:a2:e9:3e:b9:5d:56:4e:3d:f8:62:7e:
d0:3b:ae:c9:0e:cf:a0:f9:43:8d:a8:98:12:19:ca:5a:c0:5c:
32:11:83:87:2a:29:80:0c:2d:b3:22:d8:d2:d3:64:b6:c6:2d:
aa:45:b3:55:e9:04:6d:8d:82:cd:b5:e3:6d:85:d3:9e:b8:50:
b6:1d:4b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:25:57 2025 by rpki-client