Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/DZ-wms0v_hFvEn9NBP7WLnLUrNo.roa
File: DZ-wms0v_hFvEn9NBP7WLnLUrNo.roa (raw, json)
Hash identifier: 3pOOrKW+cWjjTW5KKB70s1qKIM8y6Niv84cvQmIJWoo=
Subject key identifier: 0D:9F:B0:9A:CD:2F:FE:11:6F:12:7F:4D:04:FE:D6:2E:72:D4:AC:DA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0295
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DZ-wms0v_hFvEn9NBP7WLnLUrNo.roa
Signing time: Sat 10 May 2025 12:37:52 +0000
ROA not before: Sat 10 May 2025 12:37:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661 (0x295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 12:37:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0D9FB09ACD2FFE116F127F4D04FED62E72D4ACDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:76:84:f8:d8:19:6f:9c:eb:51:31:c3:b1:21:
36:84:14:c5:21:9d:80:81:78:0d:b6:30:61:07:87:
b2:24:77:e4:a6:63:13:d2:4d:60:c1:47:f7:ed:d2:
fe:cf:eb:b9:cf:d9:8a:8d:17:3d:da:30:bc:1e:0b:
0d:85:b1:d3:52:da:e7:dc:ed:27:8d:c8:22:1b:e3:
05:6f:86:84:50:25:e7:3b:2e:d9:45:fb:bf:be:f4:
fc:c3:8b:fc:c1:fe:4a:36:ff:a4:b4:c6:48:11:60:
12:ad:85:73:d5:55:98:8a:c9:89:9b:9f:67:b7:26:
7a:ef:a7:f6:9d:0d:79:ca:bf:fc:b5:43:e2:63:e7:
52:17:94:08:88:1a:a7:83:2e:86:f4:46:6e:a6:68:
f5:2f:8b:51:30:12:ad:1e:d9:e9:61:67:17:19:02:
4a:9a:1f:b5:29:29:98:b5:a5:f0:2e:33:f3:17:3b:
f6:ce:88:2c:cc:a9:e0:6e:c3:5d:1d:0d:b2:2c:68:
85:cb:5d:4e:3f:6d:68:16:e4:d2:06:53:7d:63:4d:
30:ce:91:6d:e9:21:41:a7:66:87:8b:fa:80:ca:ff:
4e:c5:57:b3:49:96:4c:4e:dd:65:a3:c8:97:56:e0:
cc:61:bf:ed:5e:8f:ac:18:58:f4:b3:3d:a2:2d:e5:
36:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9F:B0:9A:CD:2F:FE:11:6F:12:7F:4D:04:FE:D6:2E:72:D4:AC:DA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DZ-wms0v_hFvEn9NBP7WLnLUrNo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:14:82:f6:c6:68:da:60:68:50:57:30:a1:c6:8a:78:78:95:
d4:72:3f:bc:da:a6:62:ed:58:3d:33:a1:fd:26:ca:3a:8c:d6:
e2:47:85:ea:a0:1a:b7:ad:57:89:9d:cb:5c:73:68:e2:96:25:
66:c1:c1:09:0b:d1:0c:7f:80:bd:da:3b:5b:d2:75:a5:18:a9:
29:4e:da:1a:ef:0d:e5:54:d3:92:7b:b8:ad:60:ec:f8:c8:09:
1b:cc:a2:e3:c7:61:53:33:96:8a:c8:7a:e9:6b:e4:fa:d8:03:
34:53:ca:f5:86:a8:44:21:2c:75:3e:0a:62:fc:27:7b:1d:5c:
d6:e8:52:2a:80:2f:c1:b7:cf:21:bf:b9:ca:a8:c5:91:86:f2:
d9:99:e7:52:89:60:cb:25:09:38:b8:62:77:11:58:99:fb:48:
ca:81:c1:a1:12:12:41:41:e6:d1:f3:e3:ac:2f:65:9d:1e:92:
0e:81:29:2e:a1:50:a1:c7:49:2f:71:2f:10:93:f5:51:74:d0:
59:dd:e6:b8:52:f2:da:48:11:45:2f:3a:19:f5:e7:a8:ef:b5:
9b:b0:24:12:6d:98:91:3c:3b:10:62:59:87:5f:d9:95:49:77:
a0:65:bd:88:23:45:15:ae:99:c6:a7:37:08:ea:50:bb:4a:94:
ff:5e:68:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:39:17 2025 by rpki-client