Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/BBJdWqT-22f10hOI3H5v8jP0kak.roa
File: BBJdWqT-22f10hOI3H5v8jP0kak.roa (raw, json)
Hash identifier: V2q6E2q8BAjxTvrw3Z0Qqd/5FcWKHeQcB9WJcCtD2CA=
Subject key identifier: 04:12:5D:5A:A4:FE:DB:67:F5:D2:13:88:DC:7E:6F:F2:33:F4:91:A9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0145
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/BBJdWqT-22f10hOI3H5v8jP0kak.roa
Signing time: Thu 08 May 2025 18:37:44 +0000
ROA not before: Thu 08 May 2025 18:37:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 18:37:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=04125D5AA4FEDB67F5D21388DC7E6FF233F491A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:68:26:9a:20:bf:87:e2:d5:d4:47:5f:36:15:
e9:3d:ea:ff:f8:b7:4a:31:28:b8:9a:63:fe:89:69:
d2:f0:e2:f2:ea:81:dc:d1:03:75:70:25:c9:56:24:
92:de:a3:35:98:46:87:4b:5e:bc:42:b8:58:c9:3e:
d7:e9:61:1d:14:fb:44:29:58:d4:4a:26:30:66:e7:
06:d2:ec:14:a3:51:59:9c:f3:f8:39:82:23:05:4f:
58:bc:aa:0c:7e:eb:15:4a:2f:ff:ef:db:a6:c8:7e:
86:ba:b6:85:9d:79:3f:2c:3b:b8:7a:e3:cb:8d:2c:
3a:b5:a8:e8:49:e4:81:72:ed:44:06:14:24:3d:e0:
92:68:3b:8b:5c:fc:af:d5:00:ba:b9:df:8f:76:73:
f4:1a:6d:95:6e:05:8c:07:5e:b6:07:c1:65:c9:08:
82:2a:6d:ab:cb:df:d2:c3:83:50:72:28:f1:c3:a6:
24:c7:09:de:ae:2f:0c:3b:a3:c1:03:41:ec:99:27:
9b:96:9a:12:61:27:63:ac:75:ca:74:be:8a:25:4d:
7e:d3:26:13:42:13:d7:04:b6:15:cd:39:66:6b:5c:
50:b0:e2:ea:de:99:a3:d3:11:e1:d1:55:ea:9e:84:
ac:7c:43:a0:00:bf:14:6e:69:1a:be:7e:38:52:19:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:12:5D:5A:A4:FE:DB:67:F5:D2:13:88:DC:7E:6F:F2:33:F4:91:A9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/BBJdWqT-22f10hOI3H5v8jP0kak.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:5f:8a:77:38:2a:e6:7b:d0:c1:18:e9:fd:ec:48:2d:97:5b:
32:98:4e:e1:31:e5:bf:9a:41:7b:15:e2:2d:5e:e7:e7:2f:66:
e7:34:86:5b:23:39:ca:5b:52:d5:7b:2d:c9:bb:aa:c6:a8:0c:
2f:7c:4b:8f:25:cf:8b:8b:c5:b9:67:0a:94:25:fa:b8:f7:62:
13:91:63:4e:20:c9:1b:8a:f9:62:85:4c:de:82:1e:ab:1d:52:
f1:d4:76:5e:66:a3:6b:27:ce:38:c2:36:6c:4e:4e:3f:0b:ab:
03:46:a5:85:45:77:66:d9:47:5a:a8:a1:3e:1a:58:56:5b:a5:
6c:f5:52:c4:8f:65:47:33:44:1e:5d:55:d7:46:d5:04:2c:a3:
d7:1b:b9:21:62:79:0b:60:bc:f2:a4:5d:34:32:85:12:0e:4c:
69:01:83:26:36:26:6e:d5:8d:11:f2:3a:3d:32:67:ad:9e:49:
9f:60:64:3c:6a:99:3a:d5:f0:82:08:d2:e5:01:d2:49:9a:b5:
c8:68:f3:b8:e9:c7:ee:ae:33:ca:44:a0:ef:16:52:e3:fb:c4:
9d:11:0b:13:14:b9:ba:1b:f7:23:ed:17:5b:73:6b:5e:5c:2d:
f7:f0:d5:0a:bc:59:13:86:00:48:f7:a7:ad:55:8b:f2:7b:b3:
9b:5e:49:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:55:11 2025 by rpki-client