Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/8m8U4K0W_rUHL4R2d0VVBSznapc.roa
File: 8m8U4K0W_rUHL4R2d0VVBSznapc.roa (raw, json)
Hash identifier: AQg2VHJ45YmUDstpe4Daaan6oEcj8TVEvvc6+ZM1boA=
Subject key identifier: F2:6F:14:E0:AD:16:FE:B5:07:2F:84:76:77:45:55:05:2C:E7:6A:97
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0639
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8m8U4K0W_rUHL4R2d0VVBSznapc.roa
Signing time: Thu 15 May 2025 09:08:06 +0000
ROA not before: Thu 15 May 2025 09:08:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1593 (0x639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 09:08:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F26F14E0AD16FEB5072F8476774555052CE76A97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:15:17:f1:ab:7b:22:e8:47:bf:f7:89:55:
0c:1d:f9:cd:2c:f8:54:67:08:a9:00:ea:96:5c:e0:
1a:6e:16:2a:a5:f2:68:2a:0a:e4:bd:c6:22:b2:4b:
3a:43:24:ae:cc:b2:23:a8:a6:84:dc:df:fa:50:5f:
a1:aa:c8:ec:03:cd:eb:03:30:e8:fc:d7:2c:87:99:
27:00:db:95:80:1c:ad:73:91:64:41:db:f4:16:3f:
6c:01:24:9c:11:7a:71:87:68:82:c3:20:73:8f:c4:
74:b4:1c:9b:95:97:25:ce:09:2e:75:2e:08:af:5b:
9f:9e:66:32:0a:55:62:59:1e:73:36:c7:da:6c:0b:
ca:08:53:82:b6:8d:68:05:1e:e3:86:95:14:cb:7a:
d0:3b:87:1e:65:78:2c:1e:55:d3:53:90:38:34:cf:
da:f2:51:d6:b1:82:3e:6a:60:6a:d9:60:31:64:e5:
de:e0:1a:bb:21:b1:c8:83:50:f6:44:75:bf:33:ae:
fe:5a:1c:1e:33:09:dd:c6:10:81:f5:f1:95:e4:bc:
90:a3:dd:67:88:0a:04:c9:ab:36:f2:83:f2:64:83:
fd:52:3d:4b:97:4c:6b:00:9f:e5:32:46:ac:8b:99:
87:c1:34:92:0f:a1:53:15:64:11:af:c5:65:09:55:
d4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6F:14:E0:AD:16:FE:B5:07:2F:84:76:77:45:55:05:2C:E7:6A:97
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8m8U4K0W_rUHL4R2d0VVBSznapc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:20:a6:51:6a:78:9a:90:51:ef:dd:1c:67:af:53:6e:d1:75:
f7:ff:63:49:1b:de:dc:b6:10:29:01:fb:d6:54:bb:64:12:38:
d7:15:99:49:43:d3:cd:6d:4d:cd:0e:a6:c3:d1:9f:0a:ef:e8:
3a:cb:e2:41:e1:9a:23:47:07:4e:b7:44:f6:b6:b6:9d:3a:cf:
32:e4:66:25:cf:34:fe:92:18:a8:c6:3d:a6:a2:21:88:4f:78:
53:79:b5:d2:ec:16:ba:22:24:16:25:9d:26:95:a4:2a:28:b3:
8e:c6:e3:8d:ba:03:5d:3d:72:7b:39:ca:f3:bd:3e:b7:21:93:
d7:be:7d:ac:1c:94:70:01:c3:9a:1c:d0:e2:df:17:93:96:94:
8f:df:40:1e:72:00:92:88:80:14:be:8c:e8:10:3e:6f:9b:fb:
04:b5:d0:77:ab:11:fe:6b:3c:de:5f:a0:28:46:67:b9:49:20:
17:f6:c2:aa:9a:4c:9c:38:6b:f9:dc:0c:7e:88:a5:28:ac:9e:
fd:ca:9f:5e:da:bf:db:4e:fb:b3:6e:8a:1e:e4:8f:a5:9f:4a:
cf:f9:3a:e4:f2:ed:19:65:d6:a7:35:27:1b:a6:78:24:7d:dd:
ac:78:ff:6b:b3:ef:36:d6:c4:56:fd:87:08:6c:cb:a8:04:a0:
47:67:2d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:51:24 2025 by rpki-client