Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Dw9bJ6MXCGpNaLA3qRkrYJj2RM8.roa
File: Dw9bJ6MXCGpNaLA3qRkrYJj2RM8.roa (raw, json)
Hash identifier: LZdTgbmrE/72WPXc2ven3uRk+5EIOoXmTX/togeYbN8=
Subject key identifier: 0F:0F:5B:27:A3:17:08:6A:4D:68:B0:37:A9:19:2B:60:98:F6:44:CF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 011D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Dw9bJ6MXCGpNaLA3qRkrYJj2RM8.roa
Signing time: Thu 08 May 2025 13:37:43 +0000
ROA not before: Thu 08 May 2025 13:37:43 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 13:37:43 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0F0F5B27A317086A4D68B037A9192B6098F644CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a2:fd:57:96:f6:c1:fa:ea:34:17:08:37:35:
13:2d:e0:2b:63:87:54:8b:8b:fb:41:06:44:4e:90:
d7:e5:0e:a4:96:55:40:2b:ea:d8:03:dc:99:ca:04:
4b:43:8d:a9:60:7d:3c:6e:78:00:0a:3f:a3:be:9e:
ce:98:fc:f8:22:16:8b:c9:fd:ac:df:9b:1d:cc:f6:
52:56:de:ef:12:8a:10:5a:e5:19:5a:d3:95:ce:6c:
69:6c:c1:59:21:a4:cc:74:18:f7:b3:c3:63:c5:70:
5e:c8:68:37:d2:a0:a6:2e:9c:6f:fe:f2:11:8e:0e:
0c:42:22:ee:29:08:55:48:8b:55:4c:8f:dc:ed:38:
ea:ac:f2:3e:32:ad:c0:6e:ad:d5:82:f7:c3:22:8f:
0b:e5:19:42:5d:79:c8:26:1c:d1:58:a9:bd:c1:a7:
63:cd:25:3f:30:d7:c2:8b:c4:5d:60:09:3a:67:f9:
b2:be:e2:17:00:41:ec:4f:5e:7d:06:98:bc:29:3e:
53:82:02:85:f8:ed:e3:4d:e2:4e:f7:c2:d0:3e:d9:
4f:15:94:a4:c6:7b:4f:61:38:8c:82:a7:5d:0f:90:
70:17:63:ad:07:2e:b6:09:83:ed:c0:4a:09:fb:57:
2a:57:51:77:63:9f:71:fc:76:79:2d:ac:fe:88:1f:
41:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0F:5B:27:A3:17:08:6A:4D:68:B0:37:A9:19:2B:60:98:F6:44:CF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Dw9bJ6MXCGpNaLA3qRkrYJj2RM8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:c4:99:ab:09:17:3d:16:6e:84:ac:03:71:35:06:79:f9:8c:
08:fd:95:34:0b:37:a9:1d:cf:55:f9:ef:f7:a5:4c:54:0f:c4:
89:72:5d:60:30:78:78:8b:b4:b3:df:22:d8:27:96:8d:67:32:
e6:7b:dd:51:8e:4e:69:0e:50:5f:e3:2d:d0:a6:85:c4:da:c0:
75:9d:3b:f7:38:56:4f:8c:97:c0:66:98:b3:0d:ed:f1:64:e1:
94:ad:33:18:54:b1:fd:9d:d3:ca:91:99:0f:38:dd:0f:3f:f9:
9f:42:0f:bf:48:33:a6:7d:c4:f0:12:03:f3:d9:10:2e:04:57:
6c:db:68:6a:1c:50:45:00:95:84:eb:e2:ab:0a:77:aa:a5:28:
d4:19:12:45:ac:c6:df:45:69:0f:19:ed:64:b3:3c:16:a0:79:
d4:55:97:67:98:a8:2e:3c:78:83:01:31:dd:53:63:69:2b:84:
c7:8c:fc:f5:78:c2:f2:1c:11:f2:dd:af:a0:a3:35:b8:b8:15:
39:2c:e4:a9:bc:bb:87:81:ea:3e:dc:9d:cc:66:44:ac:1e:19:
29:26:71:8b:30:cb:19:ec:21:5b:dc:d8:82:c1:68:5d:7b:38:
51:2c:c5:e3:7a:a5:a7:0a:dd:80:94:a3:46:95:80:9b:67:0a:
38:ec:bf:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:51:17 2025 by rpki-client