Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/1qEktXl2C7-aCrDkPim8OT7WdLc.roa
File: 1qEktXl2C7-aCrDkPim8OT7WdLc.roa (raw, json)
Hash identifier: 5w/aRjuK/U9O7KlMcN26KYLTBvZfYTgELfdbR/HAzVE=
Subject key identifier: D6:A1:24:B5:79:76:0B:BF:9A:0A:B0:E4:3E:29:BC:39:3E:D6:74:B7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 032D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1qEktXl2C7-aCrDkPim8OT7WdLc.roa
Signing time: Sun 11 May 2025 07:37:56 +0000
ROA not before: Sun 11 May 2025 07:37:56 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 813 (0x32d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 07:37:56 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D6A124B579760BBF9A0AB0E43E29BC393ED674B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:9a:2b:55:5a:d3:a7:16:ff:b5:39:76:a3:
19:34:e3:ad:de:55:c5:b7:7e:7c:cb:3e:1b:69:80:
d8:8f:46:07:6e:a1:33:3b:61:5b:88:49:52:5d:72:
5c:be:5b:eb:c8:b9:0b:9f:c0:44:2b:74:4f:25:f9:
f1:08:23:c7:06:59:41:cc:89:35:bb:a3:a2:59:97:
0c:98:76:ae:34:e8:37:4f:b9:5c:b4:9f:30:7c:de:
44:80:a4:f0:f5:1d:7d:70:09:4f:bd:5c:36:ca:2f:
6a:9a:f7:22:1e:bb:53:4b:89:b3:37:3e:7a:df:80:
6e:3d:d1:be:49:55:a7:75:25:3f:ec:83:b5:57:c3:
36:9e:5f:62:66:df:12:11:82:2a:8b:39:cd:e0:6c:
97:c5:86:6b:a4:d3:59:d8:53:0f:f8:44:68:45:88:
4d:0a:e3:c9:c8:95:8b:dd:cd:d0:cc:87:8d:c1:12:
3e:40:03:fd:33:6a:0e:2a:c8:84:7f:cf:34:36:83:
b0:1c:3d:2b:81:51:f0:db:33:25:41:28:97:14:23:
3e:7a:2a:97:e3:c7:be:9d:d3:a6:4d:d9:d5:a9:33:
53:0c:26:0a:5a:d8:9e:dc:a3:e7:51:f5:56:35:1c:
77:16:db:ea:a4:3b:1a:43:f0:95:83:37:06:ae:2a:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A1:24:B5:79:76:0B:BF:9A:0A:B0:E4:3E:29:BC:39:3E:D6:74:B7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1qEktXl2C7-aCrDkPim8OT7WdLc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:1d:62:fb:02:43:a3:1c:cd:c1:a6:dd:9c:43:8b:b0:be:44:
f4:61:63:b5:99:98:56:5e:42:62:9b:1d:a2:59:5f:17:db:04:
1b:36:b6:d9:89:43:70:ee:86:e6:3a:18:52:e1:c4:f3:1d:bb:
19:18:bc:e4:00:6b:fa:c1:ca:5b:66:7f:dd:35:66:4f:47:1c:
a9:37:0c:1d:35:ae:da:84:ef:85:14:c0:71:f1:26:b2:b2:cf:
c9:47:97:5d:7f:37:4a:9a:ef:94:52:6d:c6:68:8a:c0:fc:d7:
65:28:b4:2e:2f:a5:f7:0f:40:bd:d8:45:10:91:8e:ee:5b:4a:
16:da:63:c7:29:54:e9:f9:3a:40:50:1c:3d:2e:0e:80:a4:0f:
22:bb:84:05:4e:02:0d:89:87:46:1e:01:3d:6e:b2:98:6a:8d:
63:7d:d6:71:c1:6c:6c:3f:5f:d9:f3:72:33:5e:85:1d:ca:47:
44:83:68:7c:dd:44:3b:3e:35:4e:4d:e7:17:d6:8f:a1:a5:81:
77:3d:91:11:3b:da:fc:f2:24:2d:11:9b:34:03:a2:62:24:48:
a0:45:ad:f5:15:23:bf:52:2e:22:2f:62:e7:6a:a2:72:38:3f:
1c:b5:4a:5e:ad:68:1a:b7:a1:1e:7b:6a:d5:0f:31:8c:33:c8:
0d:11:46:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:51:10 2025 by rpki-client