Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ACynuVlu8dBF0rMkSxiNpijgAo0.roa
File: ACynuVlu8dBF0rMkSxiNpijgAo0.roa (raw, json)
Hash identifier: 4ztNlz7iHg2qI4PKoYOtqT2c18QcDutCZRteSWMijFQ=
Subject key identifier: 00:2C:A7:B9:59:6E:F1:D0:45:D2:B3:24:4B:18:8D:A6:28:E0:02:8D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0655
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ACynuVlu8dBF0rMkSxiNpijgAo0.roa
Signing time: Thu 15 May 2025 12:38:02 +0000
ROA not before: Thu 15 May 2025 12:38:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1621 (0x655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 12:38:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=002CA7B9596EF1D045D2B3244B188DA628E0028D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:3f:b3:4d:4c:53:60:23:1a:a5:43:0d:1e:
ad:8f:ed:d0:aa:c7:3c:9d:2b:fd:db:01:12:b3:47:
c4:2f:f3:f9:4c:93:66:58:4f:00:dd:df:a4:e3:95:
d6:89:85:1f:1a:66:a1:51:f9:89:a9:3e:be:6b:7d:
f2:fb:62:81:0c:b4:6f:4a:0e:a2:79:9f:e7:60:ad:
e5:9b:74:6d:b8:db:c2:74:ce:ff:2d:2f:59:ee:c6:
d9:1e:10:cc:b1:db:bc:a4:ac:8d:77:bc:bd:9a:fc:
07:f5:19:8d:3e:41:cc:2a:3a:9a:3d:1d:81:4e:1e:
d9:4d:0c:16:89:87:88:a1:fd:3b:62:49:44:db:4f:
06:4d:31:16:0b:c6:a5:06:c6:70:ee:fb:69:76:9e:
67:f2:e6:1e:1b:be:dc:b5:af:cd:d9:aa:0a:44:08:
af:3b:3b:cc:d9:f9:11:61:e2:77:07:5c:e0:7f:f0:
ba:d0:09:8d:29:05:fb:e4:24:49:6d:c4:08:9e:8a:
9a:72:82:a0:2d:6d:a5:85:83:4a:26:5a:b0:94:9b:
73:f9:9c:c8:fa:10:f7:30:6d:f7:d8:8d:5e:9c:db:
6a:7e:00:49:c2:70:90:4e:0f:da:79:19:bd:c0:67:
17:62:48:99:30:1d:76:93:b2:16:c7:64:ce:d2:2e:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2C:A7:B9:59:6E:F1:D0:45:D2:B3:24:4B:18:8D:A6:28:E0:02:8D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ACynuVlu8dBF0rMkSxiNpijgAo0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:ea:cb:0c:1c:c4:6a:4c:51:9b:43:fa:39:36:5f:7e:45:bc:
cb:74:a8:9c:d8:12:10:55:c9:ce:f8:d6:04:98:5c:be:50:e0:
90:b2:aa:39:fd:e3:11:cd:a6:cb:c6:21:74:68:e5:ee:36:2e:
20:00:d0:7b:34:8f:a0:48:90:c6:0b:01:9c:ed:cb:d8:4c:a1:
46:20:2d:35:bc:59:0c:ab:9d:69:34:76:47:e7:8e:bd:9e:e5:
26:17:20:fb:35:9e:e6:e9:7d:8f:96:b9:45:9d:97:4b:c8:6d:
73:fd:f9:32:6a:fe:5b:9f:d8:4e:5f:c1:b6:d2:ff:49:45:b6:
b4:07:94:9c:a5:5e:89:b9:e4:7a:45:21:2d:b8:42:90:fb:b5:
f0:74:d1:ba:11:0a:d5:4d:93:90:30:37:29:53:eb:78:9c:10:
bd:ed:87:77:2d:ab:38:0f:a6:90:1a:bf:ed:74:cb:15:81:1f:
3a:6b:a0:41:f0:77:d8:46:3c:7c:2d:29:ce:76:eb:77:e6:04:
ae:d4:90:f4:7a:c9:eb:a8:39:df:05:f6:a2:06:50:f5:76:16:
29:8d:e2:f5:a6:38:a1:a8:1a:45:a9:07:ac:84:2c:72:73:f1:
4a:8d:22:6d:f4:69:4b:71:7d:85:9a:1c:7f:df:e2:30:7f:ae:
23:97:4f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:36:48 2025 by rpki-client