Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/6Obr9S5Q-Gq1IJaDk4iZAHXSqPQ.roa
File: 6Obr9S5Q-Gq1IJaDk4iZAHXSqPQ.roa (raw, json)
Hash identifier: HwavtwbLqubSuqyTGeJOmH7d1L9VvkJcIoztC/WTt/U=
Subject key identifier: E8:E6:EB:F5:2E:50:F8:6A:B5:20:96:83:93:88:99:00:75:D2:A8:F4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0679
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6Obr9S5Q-Gq1IJaDk4iZAHXSqPQ.roa
Signing time: Thu 15 May 2025 17:08:03 +0000
ROA not before: Thu 15 May 2025 17:08:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1657 (0x679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 17:08:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E8E6EBF52E50F86AB52096839388990075D2A8F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:57:aa:37:40:8e:bd:44:ef:6e:01:2f:ab:
3f:33:1e:8d:3d:c8:14:33:f3:08:92:59:0e:76:a9:
56:2c:76:ae:fe:63:d4:f3:29:30:83:06:e2:da:2a:
14:a9:43:19:3d:3d:ed:92:8e:cb:5c:63:bf:d8:76:
8c:33:de:70:cb:b4:c5:4d:ce:53:01:c8:d5:b6:67:
bd:d0:03:16:1f:f5:b1:84:52:e9:3c:ab:27:dd:42:
7c:9f:08:28:8b:db:6b:28:aa:92:c2:3d:72:b4:a7:
3d:c5:5f:41:ff:db:39:a1:bd:9f:c2:a6:32:1b:a3:
79:80:d4:6a:d2:c7:33:1e:48:be:f4:f6:be:4f:6b:
b4:50:69:a8:d2:61:d3:7e:ef:d7:00:88:9b:b5:82:
c0:38:ff:a1:22:d5:80:c8:e7:d8:77:01:71:9c:4e:
45:98:34:2e:f8:24:c0:2d:7e:5c:87:07:5d:d0:01:
8c:11:bd:22:7b:bd:a9:39:e2:60:48:11:6b:8a:81:
6d:40:63:18:77:e8:11:4c:bd:f8:00:48:e8:77:08:
38:b1:4c:55:4d:f8:70:7f:44:04:dd:69:84:3f:34:
60:c3:37:5a:51:ca:70:21:f0:bf:3e:d8:da:11:61:
e8:66:4a:12:ed:cf:82:ae:90:58:ed:ea:1c:d8:f1:
45:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E6:EB:F5:2E:50:F8:6A:B5:20:96:83:93:88:99:00:75:D2:A8:F4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6Obr9S5Q-Gq1IJaDk4iZAHXSqPQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:68:e2:bc:6d:65:8a:bd:fb:a2:75:c8:6f:54:e9:47:a2:25:
3c:94:bb:98:c6:0d:7f:c5:0d:37:98:50:e2:b5:1b:09:cb:10:
23:2a:1a:91:d0:b6:15:f0:3c:cd:0e:85:8b:39:54:d8:9c:21:
1a:88:d2:14:a8:dd:b9:9a:d3:23:c8:66:c7:7e:5f:2b:94:8f:
5d:e0:36:01:15:1b:e6:d8:6a:52:cf:b4:e1:bc:12:e3:c5:2b:
5d:db:37:57:1f:a3:f4:95:72:96:7b:48:e3:63:16:dd:60:f8:
d0:47:cc:22:2d:fb:81:30:8e:83:bb:2d:cb:a1:83:41:30:a5:
c8:62:b3:0e:4f:f3:25:71:1a:cb:2b:24:63:85:1c:60:27:fc:
7d:db:7d:4b:e2:72:d8:2a:d1:d1:10:85:e9:fe:24:bf:86:f5:
e0:dc:79:92:79:be:0e:2d:71:c2:17:11:21:0c:5b:22:1c:2f:
d9:61:55:a2:8a:b3:84:f1:55:ee:b8:78:19:3a:78:bc:60:b9:
0b:20:0a:87:4d:69:9d:b7:64:21:32:11:8b:be:f3:81:c2:92:
c6:63:94:5f:49:cf:7b:27:85:0d:ce:a0:49:bd:71:af:63:07:
7e:15:fd:fb:17:e6:f6:c9:86:58:98:aa:82:e0:2a:1f:d4:ae:
99:f3:5b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:22:16 2025 by rpki-client