Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/6L__B6bz8o8Z-m8AKisK9QnbtbI.roa
File: 6L__B6bz8o8Z-m8AKisK9QnbtbI.roa (raw, json)
Hash identifier: PP/6RINvi206mv1rmLJC5bgCmvw3n+bHRBcnQBzpmVA=
Subject key identifier: E8:BF:FF:07:A6:F3:F2:8F:19:FA:6F:00:2A:2B:0A:F5:09:DB:B5:B2
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0739
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6L__B6bz8o8Z-m8AKisK9QnbtbI.roa
Signing time: Fri 16 May 2025 17:08:47 +0000
ROA not before: Fri 16 May 2025 17:08:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1849 (0x739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 17:08:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E8BFFF07A6F3F28F19FA6F002A2B0AF509DBB5B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:9e:8c:ec:43:23:f2:97:64:71:a5:ee:fb:
04:69:dc:b5:22:4a:91:5f:b5:32:fd:75:fc:94:55:
b7:3e:e2:8c:5e:de:0a:fa:72:ad:9d:2a:42:17:aa:
dc:08:ca:85:bb:92:2f:af:62:ca:bc:d1:50:58:f0:
c5:c2:b9:9f:b2:01:88:0a:db:0a:16:0b:ea:fd:0d:
58:e2:5d:54:3c:88:80:49:af:27:57:6a:e1:50:fc:
c9:e8:ff:21:30:e5:e2:bf:d0:81:46:6e:13:84:f2:
b5:89:89:72:5a:d5:47:45:0a:80:ad:34:2d:c8:09:
89:b6:ae:f9:8d:f1:6a:8c:c9:a6:8b:88:74:ee:f9:
99:eb:b7:f2:53:f2:8e:2b:c3:85:60:24:01:f7:8b:
f8:19:6b:6f:c2:fe:bb:6d:74:6c:d3:2a:48:f7:04:
d2:2b:8b:21:c0:fb:cf:7e:bb:f0:72:cf:dd:55:b6:
b7:76:2c:87:ba:de:7c:a4:ce:35:5f:c5:67:36:5c:
1b:04:74:bc:e3:f2:c8:6b:01:d4:ea:15:81:61:52:
58:16:6c:1c:d5:53:e3:e4:38:8f:74:e5:3d:2a:83:
f1:ff:b8:62:9a:7d:53:ae:c4:db:22:16:39:b1:2d:
9d:05:c2:c5:fc:44:fa:9c:0a:9b:6e:09:67:12:74:
bd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BF:FF:07:A6:F3:F2:8F:19:FA:6F:00:2A:2B:0A:F5:09:DB:B5:B2
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6L__B6bz8o8Z-m8AKisK9QnbtbI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ab:6a:09:10:fc:69:e7:b8:19:dc:ff:6f:5b:9c:4c:f4:84:cb:
e1:b1:fb:53:5f:4f:05:62:46:38:98:f4:8b:86:70:1a:55:2f:
2e:b2:21:ae:bc:b4:53:87:0b:6b:0d:5d:d7:fc:8a:a4:59:9e:
f2:72:04:ae:6b:23:a4:84:4c:ed:7a:36:3a:31:41:07:4b:a3:
0f:7e:c3:dd:3f:63:ec:ca:9c:ea:1f:58:b9:31:b0:5d:86:e1:
42:dd:0b:1a:43:2f:74:8a:10:cb:38:9b:1e:cc:c2:e0:12:0c:
f0:41:0d:ed:c9:25:15:00:97:92:31:ab:31:21:c4:4c:c7:94:
16:21:e0:b6:84:4a:1c:09:24:d6:3a:b6:77:2b:8a:6b:25:93:
27:1d:20:ce:94:2d:95:f5:21:16:55:07:11:25:86:a2:d0:24:
5a:a1:00:82:2c:fb:91:7e:6e:87:7a:43:f3:03:bf:52:a8:d8:
26:be:ac:5b:55:34:8b:c1:09:3b:89:14:90:9a:8f:58:09:76:
03:7b:12:87:69:38:80:68:f0:07:28:1d:18:f5:32:97:e4:85:
be:76:ad:28:f6:73:7c:d4:a7:6d:29:f1:5c:ba:eb:b8:16:bc:
c3:46:a4:2a:60:ef:1d:fe:c3:d7:71:74:22:9b:de:3b:b5:b3:
86:30:a3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:02:55 2025 by rpki-client