Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/FGmNasapIpjDI21vRXqwxXbByVk.roa
File: FGmNasapIpjDI21vRXqwxXbByVk.roa (raw, json)
Hash identifier: bbrd80pkrWcL549KnkcropNPxX8XMUcaVJoVicFOUz8=
Subject key identifier: 14:69:8D:6A:C6:A9:22:98:C3:23:6D:6F:45:7A:B0:C5:76:C1:C9:59
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0405
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FGmNasapIpjDI21vRXqwxXbByVk.roa
Signing time: Mon 12 May 2025 10:38:09 +0000
ROA not before: Mon 12 May 2025 10:38:09 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1029 (0x405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 10:38:09 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=14698D6AC6A92298C3236D6F457AB0C576C1C959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:65:45:00:3c:c5:9d:bf:96:f5:0b:c1:e2:68:
61:d4:26:b4:42:91:d8:90:39:56:25:c7:7e:fc:e5:
e8:8d:09:08:d0:1a:06:12:b5:d4:87:09:0a:9b:bb:
50:aa:46:f0:6c:9c:39:a3:84:74:5e:d4:fd:37:99:
f9:88:75:e9:48:8a:ec:ac:13:25:bc:55:b2:3f:03:
da:4d:a1:14:c2:65:91:0b:07:f0:0c:68:fb:c2:28:
0e:b5:05:e2:76:7a:89:6c:a4:dd:11:0c:73:48:cc:
2c:0c:44:2e:d2:56:5e:c1:76:71:50:1c:5a:d5:37:
b3:66:fd:28:3c:8c:0b:f7:87:2d:8e:af:21:b8:77:
e9:48:ef:d9:4c:c5:df:57:26:20:90:65:30:98:54:
19:4e:78:0e:fa:f4:4c:ae:4c:ab:82:ae:95:3b:62:
23:d6:51:16:68:bc:f3:92:49:7f:1a:5e:59:32:00:
ce:fd:75:3e:19:16:f4:ff:dc:f5:e2:25:2a:90:ba:
26:1c:d1:b4:a5:47:78:82:11:f8:18:45:f4:dd:0e:
98:a6:46:6c:80:aa:80:51:19:31:df:ef:8c:1f:5a:
8e:48:c1:94:41:19:64:32:55:a3:53:97:90:60:e1:
91:d9:80:cf:2e:ff:d2:54:62:cc:a9:29:39:83:d5:
14:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:69:8D:6A:C6:A9:22:98:C3:23:6D:6F:45:7A:B0:C5:76:C1:C9:59
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FGmNasapIpjDI21vRXqwxXbByVk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:44:ca:bf:05:1e:ec:42:26:99:66:6b:ae:77:08:8e:11:33:
c0:55:b9:d7:f1:1b:89:16:3b:d2:92:93:56:f9:df:bd:a2:d8:
16:7b:a5:44:12:38:c5:a5:d5:82:fe:79:e0:ef:e8:20:b2:f5:
cc:b0:ae:e9:72:6f:77:47:c0:dd:49:f6:f0:65:78:de:94:94:
fa:fb:b1:3e:e2:54:c9:a2:42:51:43:70:bf:e4:75:59:7d:8b:
be:b1:14:e7:f3:ee:81:da:d4:e6:c2:36:1d:91:76:46:e8:de:
89:7d:3a:d2:ff:39:43:fb:d5:10:3d:ed:87:81:d9:3e:b7:76:
88:fb:06:2a:7f:2b:5e:02:ab:4a:00:cf:16:2f:e4:04:b7:39:
58:a5:e8:db:0d:6c:7a:7f:02:95:62:e2:44:07:2a:30:65:82:
88:8f:12:90:d7:8f:26:3e:95:c3:47:d2:76:1c:fe:87:7d:9f:
35:c5:d5:72:23:f2:40:7e:1b:f2:f9:55:46:7d:1f:be:91:8c:
fa:b6:c0:ca:a8:98:db:e3:65:c7:73:69:fe:aa:c3:02:f9:cf:
7a:10:70:65:3b:6c:67:45:5d:39:a9:d1:47:a1:35:57:04:14:
b9:93:9b:f9:32:a9:ca:86:e4:9d:9f:25:21:5d:69:08:02:87:
21:95:0a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:07:31 2025 by rpki-client