Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4GljamuFsEwaDuxTLB0iEviz80M.roa
File: 4GljamuFsEwaDuxTLB0iEviz80M.roa (raw, json)
Hash identifier: 552F9SNNw2ekW0Q2QYlbSQVf272s+QEjhpylcGr7Lps=
Subject key identifier: E0:69:63:6A:6B:85:B0:4C:1A:0E:EC:53:2C:1D:22:12:F8:B3:F3:43
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0211
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4GljamuFsEwaDuxTLB0iEviz80M.roa
Signing time: Fri 09 May 2025 20:08:14 +0000
ROA not before: Fri 09 May 2025 20:08:14 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 20:08:14 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E069636A6B85B04C1A0EEC532C1D2212F8B3F343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:cb:6f:3d:bc:34:93:c1:a9:6a:2c:d8:9a:
f1:50:7e:fa:f3:ee:75:2e:57:91:b4:55:12:fa:25:
84:f8:e7:80:d5:a1:ed:16:73:17:96:43:38:6d:a5:
fb:99:5c:86:12:ea:b1:64:85:4f:e9:1d:c0:db:a6:
0a:56:92:60:36:01:fa:1f:b0:d3:34:0f:b9:6c:05:
4e:a5:8e:98:35:32:13:98:b3:76:f6:de:31:f7:46:
16:13:67:5f:05:dd:7e:97:b8:43:10:6b:5a:1e:da:
5c:33:11:99:89:b1:2d:5e:30:3b:14:4b:65:2b:03:
9e:cc:82:d3:41:c3:d6:28:7a:85:5c:8e:ba:b7:b4:
53:e5:fb:3c:37:c9:52:b6:68:9c:48:6d:b3:5d:37:
60:a6:c5:4c:49:26:19:78:0e:05:db:03:af:c2:26:
7b:a9:2f:85:7f:c2:e8:ef:6a:5b:7f:2a:ff:c4:44:
a1:40:b0:86:f0:0d:16:ad:83:10:f0:1a:34:82:01:
88:f7:d0:d2:f9:6f:ac:5e:4b:19:33:0a:0e:5b:60:
33:c3:f8:ef:c3:11:57:bf:24:b3:b7:57:44:68:67:
13:e9:6a:5d:42:d2:37:ff:4a:ed:e7:7b:4e:18:48:
0a:26:50:fb:29:4a:bf:e7:98:eb:17:5d:cd:e7:93:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:69:63:6A:6B:85:B0:4C:1A:0E:EC:53:2C:1D:22:12:F8:B3:F3:43
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4GljamuFsEwaDuxTLB0iEviz80M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:8e:8c:57:fd:d3:46:e1:2e:28:44:55:ce:3d:3c:57:77:de:
81:49:69:52:71:91:80:0e:7f:30:58:33:48:f6:9f:95:d6:b3:
45:36:dd:d3:87:7d:d6:54:1a:a6:51:d8:8c:34:f0:f2:2e:04:
a3:78:ca:e5:2f:cc:84:63:7e:66:07:d9:f5:ba:87:17:6f:f4:
36:28:1b:16:c6:2f:92:88:13:dd:46:2e:4d:b1:a0:a5:31:8c:
94:c8:e5:76:cb:ad:1e:a9:0f:c7:80:1c:16:88:31:25:13:a7:
ee:01:e3:bd:63:2f:b1:81:4e:af:01:48:90:58:88:b2:f8:e7:
3c:24:32:7f:f8:75:15:6f:df:4b:8f:cb:0a:57:61:7c:88:b7:
3e:52:b2:2a:36:13:11:85:41:7b:e8:82:89:eb:52:de:c7:d6:
9a:ad:92:79:0f:36:ad:53:cd:9e:97:74:4f:9b:9e:86:bd:5d:
b8:7f:7e:0c:b6:e6:92:c2:22:51:31:9b:dc:e3:65:9d:db:c2:
89:7e:b4:c7:31:ae:50:4c:57:9c:84:7a:f5:60:f3:63:a6:65:
d2:6f:9a:07:b3:ad:ae:2e:68:24:8d:bf:b1:b6:de:a2:47:87:
dc:e8:89:30:ea:4b:ab:cd:2e:d4:09:d1:1d:3b:3f:66:18:32:
39:8b:c2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:14:26 2025 by rpki-client