Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/2e-qBlrgB7HC0BYOjGIMmIYnnZc.roa
File: 2e-qBlrgB7HC0BYOjGIMmIYnnZc.roa (raw, json)
Hash identifier: pCgFrRPChypn10px45JRjn0YlLRTe2lWr4YpB3R3+pI=
Subject key identifier: D9:EF:AA:06:5A:E0:07:B1:C2:D0:16:0E:8C:62:0C:98:86:27:9D:97
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0125
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2e-qBlrgB7HC0BYOjGIMmIYnnZc.roa
Signing time: Thu 08 May 2025 14:37:42 +0000
ROA not before: Thu 08 May 2025 14:37:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 14:37:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D9EFAA065AE007B1C2D0160E8C620C9886279D97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:71:5c:ae:26:b7:56:3d:20:09:9a:f5:83:
3b:5b:69:d4:a8:07:37:35:65:7e:a1:8d:fb:77:dc:
7c:af:38:af:12:0b:bc:b3:70:83:ad:f4:cd:56:fd:
97:19:49:c6:f6:03:57:b6:10:99:83:13:0f:90:e3:
b6:17:8d:93:8b:be:dc:2c:4d:9d:da:3f:9b:3d:99:
18:93:68:e4:83:84:f8:0c:a6:08:cb:33:79:a1:10:
47:88:ee:91:a8:f7:7e:c8:b1:c4:5e:70:bc:17:9d:
bf:b3:78:ab:5f:3b:e9:23:f3:d4:0d:4f:3c:ea:a3:
73:aa:ec:c1:1a:26:c8:72:9c:45:5f:79:00:c4:88:
79:d5:0d:68:0f:9f:63:3d:73:30:b2:cd:03:25:dd:
8e:e0:ed:37:be:99:aa:43:4d:99:db:5f:9f:1f:8e:
0e:39:a5:3f:0a:cd:6c:c5:21:5a:89:dc:eb:84:e3:
3c:0c:11:c0:99:08:14:56:15:66:d1:52:54:e6:74:
7e:38:58:f6:6a:a6:56:c0:fa:32:9f:ec:71:94:f0:
e7:a7:e2:d6:3d:6a:85:94:dd:bf:ef:67:d2:b8:17:
97:44:cc:87:d7:51:57:be:36:9a:a3:8d:8e:27:af:
6d:e3:4f:86:09:78:56:f0:2c:c4:5f:05:5e:ae:fd:
02:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EF:AA:06:5A:E0:07:B1:C2:D0:16:0E:8C:62:0C:98:86:27:9D:97
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2e-qBlrgB7HC0BYOjGIMmIYnnZc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:6e:a4:b9:b8:e8:0f:67:19:f6:29:96:01:d2:a2:56:fb:ee:
ac:e0:c6:5b:f8:3f:c6:b5:d7:07:0a:5e:0d:b0:49:5f:bb:a9:
0b:b0:28:db:e1:cc:7b:b3:18:ee:4c:42:72:73:09:d0:b0:42:
b3:cd:72:18:ef:e7:b0:54:45:51:ef:44:0d:fd:23:18:21:58:
b2:59:b9:1d:7c:e8:a1:ac:64:16:bb:e3:fb:c6:c1:36:62:a4:
f3:a6:34:33:1f:bc:31:81:e0:33:37:c6:f2:d4:9c:fd:e3:8c:
de:2e:da:00:9a:53:43:29:34:3c:e8:76:e0:69:f5:34:86:56:
37:e2:ad:d0:28:57:a0:e3:d3:f7:bc:4e:4f:57:3c:97:d8:25:
9a:9e:a5:76:bc:70:8a:e1:cc:71:2d:06:99:bb:0f:2a:10:2b:
9d:8d:0b:1b:60:f2:db:36:f1:fe:08:8a:19:c6:9e:88:06:4e:
06:78:37:15:bb:8a:be:3b:cc:ed:59:a7:69:11:3f:8f:1b:44:
c4:0c:5c:d4:28:ef:98:6f:4e:07:20:b2:65:32:d7:0d:ba:82:
f8:cd:d6:2b:f3:bb:8e:eb:52:c1:25:9a:64:c1:b2:5e:19:3c:
ed:4f:ca:e3:4b:51:2b:84:2a:81:65:11:5a:10:66:bc:35:fa:
50:c6:7a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:38:24 2025 by rpki-client