Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/B6cun43ozPWqai2Lbkhpyuc8e5U.roa
File: B6cun43ozPWqai2Lbkhpyuc8e5U.roa (raw, json)
Hash identifier: XHS91VRNampHl/IAWiVPeNCqxcX4dgqO38IZEZostuE=
Subject key identifier: 07:A7:2E:9F:8D:E8:CC:F5:AA:6A:2D:8B:6E:48:69:CA:E7:3C:7B:95
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03D5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/B6cun43ozPWqai2Lbkhpyuc8e5U.roa
Signing time: Mon 12 May 2025 04:37:54 +0000
ROA not before: Mon 12 May 2025 04:37:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981 (0x3d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 04:37:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=07A72E9F8DE8CCF5AA6A2D8B6E4869CAE73C7B95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:83:f3:13:53:24:85:6a:db:8c:46:5b:8b:7d:
f1:41:c8:08:70:6a:f8:c4:a0:e7:f8:99:25:46:bb:
b6:dc:aa:76:83:45:9a:c0:c0:46:01:27:ca:6b:40:
5b:54:72:14:e2:d5:be:ee:4f:df:e0:8a:34:9a:8c:
6c:b6:ac:f3:dd:c8:bd:c9:ad:87:5c:df:06:c8:5c:
30:61:54:3d:a5:ed:00:76:f2:ba:37:7d:65:4f:ec:
ef:3c:82:69:3e:22:18:e2:08:11:66:34:81:28:d6:
55:a0:67:72:2c:0b:fc:93:ae:2f:9a:0d:af:7b:39:
75:64:5a:6a:e3:c7:3e:57:d7:c7:66:8f:01:1b:21:
f7:2d:29:6f:58:78:fa:17:af:c4:c8:05:e9:29:d4:
55:5a:f9:69:59:cb:06:62:26:61:a3:0a:13:1c:37:
9d:2c:3a:e3:bb:63:d6:b4:07:f0:8a:bd:3d:7f:f1:
fd:32:0d:1c:07:f9:29:d7:0d:f3:1d:e4:6b:fd:a0:
a9:b3:a5:27:02:77:93:09:6d:4f:5d:c1:6b:cb:a9:
cf:40:7f:12:fe:66:ef:17:3a:14:1d:57:ef:81:c4:
3d:39:b5:11:19:2e:4a:f1:e4:24:34:e8:62:3b:1e:
8a:94:61:75:f5:d2:8b:e9:46:87:97:ea:e1:47:c6:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A7:2E:9F:8D:E8:CC:F5:AA:6A:2D:8B:6E:48:69:CA:E7:3C:7B:95
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/B6cun43ozPWqai2Lbkhpyuc8e5U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:b9:a4:9b:15:9b:bb:44:6c:0f:d4:5c:1c:a9:b4:e1:b9:31:
02:35:12:ca:bb:59:08:94:54:bf:34:e6:01:47:6d:af:09:ba:
f7:09:f9:51:65:70:44:0a:d4:32:57:de:7c:d3:45:30:83:64:
a5:40:18:61:77:30:3a:8d:fe:5c:7d:e3:87:17:e1:62:86:dc:
25:69:f1:b1:e7:af:be:3d:e9:84:db:d1:b6:64:e4:93:83:5d:
68:af:74:cd:47:4d:ac:a7:e8:7d:b2:22:9b:d0:1d:70:4d:64:
72:f3:28:47:a9:8e:24:2f:fd:16:31:46:b8:52:42:69:b3:7c:
5a:a6:b3:5f:99:ca:40:4b:17:08:cd:22:7f:a7:86:33:70:ee:
dc:a1:34:95:6d:eb:c8:06:43:56:6b:24:3a:e3:a6:f9:bf:45:
5f:76:fb:27:b3:7a:28:a2:72:2f:d7:b1:0d:2f:25:12:4a:b9:
7d:0f:b3:92:ec:f7:20:cb:67:4d:02:67:8d:9f:c1:a5:75:2d:
ee:1b:77:61:d2:37:8a:c7:2a:b3:15:20:b2:1c:d3:2e:f3:78:
18:28:c5:0c:b3:a6:cd:49:d4:40:3d:b8:90:26:68:e9:91:f1:
ad:79:22:1d:8c:81:40:b0:73:56:32:45:46:e4:86:0a:3f:76:
0f:ff:d7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 12:21:31 2025 by rpki-client