Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/3LqgdaKmVmlzHmcJ52RGN8gLqhM.roa
File: 3LqgdaKmVmlzHmcJ52RGN8gLqhM.roa (raw, json)
Hash identifier: RxlpeZOfQacOBxbDAJCxkCtpqbzbmu83ilDdW5p9e68=
Subject key identifier: DC:BA:A0:75:A2:A6:56:69:73:1E:67:09:E7:64:46:37:C8:0B:AA:13
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03B9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3LqgdaKmVmlzHmcJ52RGN8gLqhM.roa
Signing time: Mon 12 May 2025 01:08:27 +0000
ROA not before: Mon 12 May 2025 01:08:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953 (0x3b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 01:08:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DCBAA075A2A65669731E6709E7644637C80BAA13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:f4:7e:8a:91:d9:0e:ac:89:f5:81:72:83:
d2:fd:09:39:32:6e:23:c6:4e:c5:21:3a:c9:cb:90:
3c:40:83:40:3b:89:82:e4:61:66:e9:b4:44:64:c9:
a8:42:0e:37:44:4c:ab:f7:cd:f2:a9:36:43:8f:f1:
86:f5:b9:4a:b0:17:c1:4f:b8:77:ca:a3:c1:24:80:
9e:11:42:6e:48:31:3e:a3:e2:cf:0c:56:1b:94:ac:
bd:f1:f1:82:0b:4a:bf:2e:2b:d0:06:1c:fa:1b:90:
46:8f:ab:3e:0d:de:4f:12:6a:3b:7a:3e:17:98:a4:
9c:81:d8:7e:a3:15:38:f2:0c:20:10:2d:0c:29:99:
1a:57:54:ab:f5:9e:e8:4b:3b:d6:7c:a3:ab:d0:8e:
b3:71:ff:69:4f:b9:ad:69:95:72:9b:43:21:7d:46:
48:7a:a9:5a:48:ed:c1:da:66:83:0c:77:72:40:ae:
64:e5:13:a1:8d:8b:d0:bb:72:ac:d8:7f:07:b6:f1:
c4:9d:a2:6e:69:71:50:db:4a:05:ab:ec:c5:04:d3:
bf:30:9a:10:bf:91:f3:69:d0:be:4e:65:1c:32:bc:
b8:62:e6:c8:7f:92:46:97:1c:6f:14:80:7f:4c:55:
82:e6:28:11:6e:1b:71:01:f4:3c:ea:73:94:70:bf:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BA:A0:75:A2:A6:56:69:73:1E:67:09:E7:64:46:37:C8:0B:AA:13
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3LqgdaKmVmlzHmcJ52RGN8gLqhM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:bf:08:a6:0b:8a:4b:66:c7:26:de:99:6c:18:7d:c2:5a:45:
65:99:62:f1:64:e0:72:11:0b:39:80:f7:5f:a0:fa:e4:cd:55:
ad:b5:6a:f1:1b:7b:4c:53:29:d6:b4:53:78:25:36:69:10:da:
e4:3c:f9:07:45:62:16:9b:bf:be:53:02:96:ba:4c:87:ab:c2:
b0:65:e6:70:ae:6e:ec:ab:ce:d2:c3:00:c8:c9:08:56:5e:18:
6b:8c:f9:c7:86:f3:3c:25:9b:aa:1f:4a:7e:02:ab:6f:36:5a:
28:44:e9:18:4c:d4:41:a8:a9:1e:2a:e2:d2:12:6e:ed:d0:44:
61:2c:db:73:76:80:83:8d:d0:2f:95:5f:33:e3:bf:1f:c8:83:
26:79:66:09:f7:b6:ef:a4:9f:60:ee:1e:84:57:c8:ff:ce:39:
07:83:c5:b5:1b:96:1b:b8:46:10:86:0f:26:6a:35:bb:34:19:
5a:36:5c:0c:29:4d:de:a1:e6:bd:c6:59:23:c7:f3:11:0f:3c:
b7:f0:57:e8:47:65:5a:07:b1:08:39:81:b5:26:e2:2b:31:df:
56:0e:36:75:2f:61:e4:7a:3a:ac:91:ab:cb:27:c1:dd:7a:57:
49:ac:56:f5:f0:fe:3d:bc:a1:cc:98:be:14:9e:af:fd:43:b1:
4f:f7:6f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 09:13:33 2025 by rpki-client