Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/1Cjxt-advOu2mG74f1agMWqdpig.roa
File: 1Cjxt-advOu2mG74f1agMWqdpig.roa (raw, json)
Hash identifier: 2nuXW/AhZTHwqyhdwjo08srhK/BZMg0xA0B+E+pODqA=
Subject key identifier: D4:28:F1:B7:E6:9D:BC:EB:B6:98:6E:F8:7F:56:A0:31:6A:9D:A6:28
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0229
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1Cjxt-advOu2mG74f1agMWqdpig.roa
Signing time: Fri 09 May 2025 23:08:20 +0000
ROA not before: Fri 09 May 2025 23:08:20 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 23:08:20 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D428F1B7E69DBCEBB6986EF87F56A0316A9DA628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:ae:20:93:66:c1:e7:cd:1e:8e:45:3f:f2:
c4:97:e1:72:3f:41:ee:78:ec:1b:64:e2:a7:b0:5c:
3e:43:c7:5b:19:5b:4a:2b:27:fc:e7:3b:31:b6:19:
66:af:88:4f:ee:47:8f:a7:4c:78:1e:57:a4:93:64:
cf:91:00:1b:8b:aa:ae:96:60:7a:36:f4:1b:17:b9:
4f:e8:94:39:76:db:f0:b6:15:70:ca:05:b4:d1:78:
f0:62:73:e7:e6:04:53:56:05:e8:ec:01:36:0f:8a:
d7:93:92:c1:29:f6:3c:b3:19:8d:93:38:79:45:0b:
a3:6f:3a:97:f0:c3:f4:b4:6a:eb:1b:d5:28:c8:9b:
d2:0f:30:b7:92:ba:9e:95:ed:58:52:9d:40:d4:8c:
3d:39:80:95:26:32:bd:0e:d3:08:90:60:1e:95:85:
23:b4:27:eb:48:b0:e9:0f:a8:6c:eb:e7:55:41:ff:
94:74:1d:7a:75:48:d7:bf:f9:ab:92:a3:81:4b:05:
c0:ce:d9:b6:bc:01:2a:6a:d1:b6:9d:6d:c7:bb:a6:
88:15:8e:7c:4d:3d:74:3c:5f:2e:88:e1:4d:9a:df:
6f:78:7a:cb:6d:40:b9:e9:be:5a:d8:cc:37:ac:8e:
d6:1f:5b:22:cb:6c:93:90:81:91:5d:ee:cb:37:ca:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:28:F1:B7:E6:9D:BC:EB:B6:98:6E:F8:7F:56:A0:31:6A:9D:A6:28
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1Cjxt-advOu2mG74f1agMWqdpig.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:21:1d:fa:56:35:c2:a1:95:89:2e:8c:da:3a:4e:bc:47:17:
82:89:84:e4:77:80:fa:39:8a:14:36:f6:39:f6:a8:2a:4b:d9:
fd:a7:4b:88:5b:d8:9f:d8:77:6f:a0:67:bb:31:1b:90:58:3f:
0c:4c:cb:37:c6:0c:09:95:9e:b2:ff:2d:0e:1a:ac:81:4a:4f:
b2:c4:7e:ca:68:03:a9:ee:38:e5:5e:38:a4:f6:bd:8d:10:68:
ce:d1:a6:69:5b:b6:0e:60:4a:eb:ef:18:c5:a3:11:80:28:81:
18:61:b0:95:64:36:4e:3c:7e:bf:a5:44:d0:d7:08:51:5e:e5:
7e:47:04:92:43:7d:2b:a0:b9:1b:7c:b8:81:b0:96:f4:a9:bd:
31:35:b7:68:39:7e:89:24:01:4c:8e:18:5c:ba:9c:ac:21:c6:
4a:7e:af:39:de:fe:6c:8e:37:0c:06:83:90:1e:4d:4e:27:bd:
a1:54:5e:73:2c:58:55:16:2b:c8:03:d8:1b:77:6a:07:88:29:
96:a7:2f:a2:45:55:ac:84:b5:87:53:af:4c:97:e1:4d:05:14:
f1:91:8c:de:2b:9f:27:22:b2:4a:83:ce:8e:d9:7d:92:bd:20:
5f:f3:40:56:38:17:e1:c8:0d:46:04:2a:bd:30:1d:8c:19:a7:
2a:4c:64:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:37:36 2025 by rpki-client