Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/66UiHBGrsKbfcp29gPamXv30KVI.roa
File: 66UiHBGrsKbfcp29gPamXv30KVI.roa (raw, json)
Hash identifier: bsmpeUkZkU7HSIhMCr+D95POJZlZhyS5qRxQT6NJSBU=
Subject key identifier: EB:A5:22:1C:11:AB:B0:A6:DF:72:9D:BD:80:F6:A6:5E:FD:F4:29:52
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 06B9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/66UiHBGrsKbfcp29gPamXv30KVI.roa
Signing time: Fri 16 May 2025 01:08:02 +0000
ROA not before: Fri 16 May 2025 01:08:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1721 (0x6b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 01:08:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EBA5221C11ABB0A6DF729DBD80F6A65EFDF42952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3d:4a:19:45:83:1b:0a:35:21:b7:b5:2f:89:
c8:20:52:ca:62:e9:a6:84:6a:85:7a:ad:7c:d8:ca:
40:12:fc:c3:75:7a:bf:87:be:fd:53:26:48:57:7a:
4e:37:ec:ae:b7:bc:81:64:05:c6:29:67:0b:24:25:
6a:23:44:68:c6:a8:b4:96:de:16:0e:67:1c:9c:d2:
42:c1:09:29:55:e7:90:5c:74:17:22:e6:11:a0:3c:
69:f3:45:c2:43:66:56:f7:80:37:c6:77:67:42:c1:
36:da:5d:bf:1b:c6:76:fe:8d:1e:8c:c9:f1:1a:4b:
cf:d6:37:f6:53:1a:ba:79:42:0a:af:c7:60:ed:78:
c0:21:ab:3a:f1:66:3e:6d:5c:14:b3:ac:be:37:62:
61:20:b9:1b:18:b0:3c:a5:51:2e:c6:5e:4b:1a:b9:
0a:1a:af:40:39:fc:d5:f9:a4:cf:9a:cf:29:48:e2:
6a:b9:1e:dd:8f:8a:b0:ae:f9:09:c6:20:83:79:87:
42:8d:fb:ff:64:85:b6:b9:df:d9:a9:ea:58:df:34:
df:66:42:40:90:85:4e:4f:b6:6d:e0:d9:e7:00:ce:
f7:d6:ec:40:0e:7f:81:0b:44:b1:b0:fb:8d:86:c6:
82:c5:7a:d4:68:9b:be:06:83:95:70:e6:6f:06:fd:
29:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A5:22:1C:11:AB:B0:A6:DF:72:9D:BD:80:F6:A6:5E:FD:F4:29:52
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/66UiHBGrsKbfcp29gPamXv30KVI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:3f:b9:3d:a7:76:9c:90:02:57:50:ba:92:b4:e4:93:3a:9f:
66:7a:27:dd:e6:b2:ae:7a:90:cc:02:ec:19:fa:c8:c8:bb:b9:
0a:f2:94:30:0c:7f:94:14:5f:e1:c9:68:9a:78:82:62:b3:c0:
77:5c:d4:e6:92:50:80:23:ee:f3:cb:46:0f:23:f7:78:ef:54:
0c:24:72:6e:3b:2f:53:aa:90:97:0b:ac:ea:03:b2:1a:17:14:
a1:6d:07:15:5d:6f:2a:e3:df:76:e5:ae:c0:7f:49:df:9f:06:
ce:5c:25:69:9c:a6:c6:e5:27:30:8a:55:f2:47:fb:c4:5c:1a:
80:35:bb:c4:bd:2f:02:f2:69:7d:12:e5:16:f1:0e:67:0c:66:
fa:df:ae:57:de:eb:40:6d:3e:bb:e2:36:0e:59:5d:69:e2:83:
c4:bb:cd:b2:f4:5f:36:83:e1:a8:a2:3a:09:b9:0f:b7:4e:72:
24:b6:a8:bc:a6:92:7d:88:a2:26:40:d9:96:c6:15:ed:5e:3f:
d8:80:4f:74:84:a6:78:5b:15:8a:fc:60:be:06:fb:d2:38:a6:
d2:d6:4d:93:5d:69:6f:79:66:4b:5b:2b:ed:cf:98:8d:ac:ab:
8e:2f:b7:41:79:ae:a2:df:32:67:c3:50:7f:f1:2b:80:3d:fc:
8f:3e:08:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:59:52 2025 by rpki-client