Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/E1xRWs91pXwmKkHS0DuoI6Bdqm8.roa
File: E1xRWs91pXwmKkHS0DuoI6Bdqm8.roa (raw, json)
Hash identifier: VbousAL1nNBQx4sK+1lnojim55GbWV+BvnCi3jMZpks=
Subject key identifier: 13:5C:51:5A:CF:75:A5:7C:26:2A:41:D2:D0:3B:A8:23:A0:5D:AA:6F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0439
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/E1xRWs91pXwmKkHS0DuoI6Bdqm8.roa
Signing time: Mon 12 May 2025 17:07:57 +0000
ROA not before: Mon 12 May 2025 17:07:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1081 (0x439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 17:07:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=135C515ACF75A57C262A41D2D03BA823A05DAA6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:5e:f3:b5:42:80:a0:e2:52:9b:1a:d8:5a:
48:8d:01:25:70:96:7b:04:93:4a:c2:28:21:b4:b1:
30:54:91:76:7a:a9:1c:6f:ea:e3:3a:1b:88:dc:79:
bb:6b:59:cd:9d:15:87:89:69:9e:aa:22:b2:83:96:
fd:d1:15:b5:56:64:98:c1:70:7c:e6:c4:3b:ab:da:
66:64:0d:61:a1:c7:23:e1:dc:6e:c8:a6:bf:35:06:
83:84:c3:29:23:08:bd:c7:52:56:7e:b0:55:db:11:
da:85:a3:95:2e:39:1f:2e:89:a5:d1:1c:3f:0b:91:
cd:06:4f:41:22:49:fc:7b:8f:63:92:a5:78:ca:07:
46:70:1e:b5:66:1b:d3:c7:66:de:b3:92:4d:13:d1:
74:4e:de:c8:03:a0:4c:42:38:07:da:80:7e:a9:a9:
0a:af:06:68:d1:c1:34:8a:74:6f:c7:70:b8:d7:76:
24:d2:dd:29:80:3e:aa:56:98:88:81:0e:f0:25:af:
92:6e:d2:4d:5b:e1:f9:a1:d9:80:80:0b:5f:2d:c5:
3b:bc:ec:34:4d:bf:6a:ae:2e:1a:28:5b:4c:bb:fc:
38:65:4d:b5:00:8e:05:ad:1d:7d:14:ad:fd:95:75:
cd:b4:b5:8d:72:1d:e2:57:9a:9b:f3:95:52:58:98:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5C:51:5A:CF:75:A5:7C:26:2A:41:D2:D0:3B:A8:23:A0:5D:AA:6F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/E1xRWs91pXwmKkHS0DuoI6Bdqm8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:1a:61:79:83:0f:9f:ee:fd:75:f6:4c:02:cd:c6:f0:f1:5e:
78:f7:a9:ac:f9:c5:c1:64:ec:1c:45:3c:3e:fd:1e:1d:85:18:
24:72:06:48:88:af:9e:75:e0:4f:f2:82:00:1c:23:4a:f8:3e:
25:cc:8a:1e:98:22:e7:98:e0:3c:4e:7c:4d:50:60:cc:e7:58:
4f:ac:44:e6:c2:56:9b:be:4f:c4:47:d0:0a:42:35:d2:ae:19:
4e:e2:c2:6a:9c:1d:2e:e1:a6:b1:0a:f6:a5:c2:4b:b7:88:d6:
57:fc:cb:3c:94:e6:ed:c4:6f:bc:12:91:d6:21:dc:b1:43:01:
15:9a:c5:44:fa:fe:98:86:5f:5e:ac:4c:51:9c:f2:58:c1:4b:
17:cf:4a:a5:ca:8d:f4:e5:71:1e:aa:5c:7c:aa:6b:a5:f8:a4:
d2:70:ed:05:fa:af:e0:b9:20:27:35:33:d3:36:48:2d:c7:33:
1b:43:9c:ac:ac:2e:22:b9:56:a4:03:82:f3:95:3a:d0:a0:f8:
4c:af:0d:41:8a:62:11:09:f6:3d:32:cd:f1:58:31:70:ec:f0:
7d:98:62:c1:bd:5d:68:cc:49:08:90:46:f0:dd:3e:6a:e0:6c:
98:7a:0c:5f:bc:2f:15:11:4d:39:01:e7:d0:5c:35:d6:ca:f3:
18:a3:5d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:19:06 2025 by rpki-client