Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/9Snrxw65z0IByCZVMS_PE8SgXU4.roa
File: 9Snrxw65z0IByCZVMS_PE8SgXU4.roa (raw, json)
Hash identifier: 2DwMaF1cGPg4V3OXJog4awH9Da0q1cLD+3e5VfQ45kA=
Subject key identifier: F5:29:EB:C7:0E:B9:CF:42:01:C8:26:55:31:2F:CF:13:C4:A0:5D:4E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0519
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9Snrxw65z0IByCZVMS_PE8SgXU4.roa
Signing time: Tue 13 May 2025 21:08:01 +0000
ROA not before: Tue 13 May 2025 21:08:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1305 (0x519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 21:08:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F529EBC70EB9CF4201C82655312FCF13C4A05D4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:0e:51:c2:ce:0b:9b:49:31:a7:e1:5e:cc:
44:ab:ba:44:f5:cc:67:eb:d7:dd:3a:a9:fd:a1:0d:
47:7c:5f:6d:02:ff:9f:fd:33:2e:a6:b7:56:fa:d3:
2f:38:cc:0e:26:b2:84:40:98:a2:0f:5f:38:4a:77:
70:ff:a0:c8:19:65:f1:d7:f8:ea:d6:12:b3:e9:45:
74:ad:a1:a9:a8:7a:7b:77:84:41:18:d2:9d:c1:62:
69:1c:62:be:86:53:0d:af:2f:96:5c:e9:43:22:9f:
c5:70:20:c5:27:fd:fc:68:ca:49:4f:d7:b0:80:b3:
c6:3c:a8:a9:b8:81:9e:f7:07:1e:17:19:68:f2:e4:
ab:4a:86:1f:5a:4c:70:a8:32:89:56:95:82:ba:7a:
3d:f1:dc:ff:a5:9a:e4:f6:9f:86:40:da:26:ed:c4:
5f:49:e2:d6:4d:34:8b:5c:f8:93:39:d5:f5:f4:a6:
0f:c0:bd:70:e8:fc:ba:56:8f:c7:dc:5e:2c:e7:25:
a7:54:58:cd:14:a8:b7:54:e0:ec:da:cf:a3:4d:9d:
48:70:f8:80:27:8e:8a:70:45:06:ae:a9:74:8f:4b:
c8:3c:81:c8:ce:52:55:49:7c:2b:03:fc:77:82:99:
75:97:66:49:08:9c:79:ac:2a:af:14:31:a7:77:c5:
c1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:29:EB:C7:0E:B9:CF:42:01:C8:26:55:31:2F:CF:13:C4:A0:5D:4E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9Snrxw65z0IByCZVMS_PE8SgXU4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:1a:9b:a5:70:31:72:ce:c8:8a:67:10:93:50:81:66:85:7e:
24:cc:28:40:ef:79:39:39:ee:fd:e1:5f:86:04:c7:90:a2:11:
8e:c7:a8:5c:2c:88:7d:f3:21:4b:e7:54:09:3a:0c:95:ef:07:
9b:aa:36:59:6d:12:ed:2d:f3:27:50:90:df:2b:c9:c8:7a:97:
e6:7c:90:d1:72:80:dc:1a:7d:6d:86:a7:fe:2a:0c:30:08:a3:
41:7e:b5:1c:cc:83:b6:8d:18:f6:3b:69:ba:8a:d0:9d:55:7b:
2c:85:87:c9:5e:6c:9d:02:47:d4:50:d8:b4:e0:e6:2d:2d:42:
99:f0:38:50:8c:10:ea:c9:4b:12:db:fa:b4:51:0d:3d:cf:a4:
f4:31:8a:ae:89:b0:fd:e8:c3:74:05:ea:c7:7d:1a:c9:71:88:
04:ea:39:77:35:5e:40:b9:4d:d9:b1:8c:3d:e8:d2:38:3d:ac:
92:98:89:2d:f6:1c:ba:62:e4:c4:cd:72:12:55:2f:8b:d8:3c:
45:8b:d8:da:38:c1:63:d4:ee:82:96:05:fb:2c:f7:cb:86:fb:
16:e2:64:ef:fa:9a:a1:a8:cb:d4:5f:e1:c7:5a:17:3a:a8:cd:
16:31:72:76:37:14:b8:08:d3:f3:00:28:c1:9b:10:15:85:1e:
d3:38:13:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:38:15 2025 by rpki-client