Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/FREMXa9r5dO3nNqogCz8FmRwCi8.roa
File: FREMXa9r5dO3nNqogCz8FmRwCi8.roa (raw, json)
Hash identifier: wkNMzWkPmDmZb4VXM0tsQ6sxm1DMOGzPoBBXlXf8gjU=
Subject key identifier: 15:11:0C:5D:AF:6B:E5:D3:B7:9C:DA:A8:80:2C:FC:16:64:70:0A:2F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0429
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FREMXa9r5dO3nNqogCz8FmRwCi8.roa
Signing time: Mon 12 May 2025 15:08:41 +0000
ROA not before: Mon 12 May 2025 15:08:41 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1065 (0x429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 15:08:41 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=15110C5DAF6BE5D3B79CDAA8802CFC1664700A2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:b4:52:6c:c2:4a:3c:8d:03:f9:1e:11:ef:
39:a4:2d:41:34:53:a3:34:31:85:e9:2e:08:51:c6:
9b:19:2f:eb:e1:f2:b5:31:b0:7b:0d:8e:8c:ba:54:
b9:1a:dd:99:c5:43:bb:71:50:10:a8:db:da:c0:e3:
b4:c4:2d:74:5e:d4:d7:24:5a:a6:54:62:7f:02:4f:
6b:a8:6a:24:f0:d1:0d:e8:6a:43:de:cf:96:9a:0e:
89:5d:b3:a2:1d:e5:5d:39:df:a2:3b:fc:83:08:a0:
d6:1b:0b:3f:00:77:5c:ef:d6:74:08:93:c0:e9:be:
8f:3b:90:31:30:95:37:65:d8:36:78:cd:b3:bb:89:
a8:c0:f7:80:ab:9a:7b:78:c7:1f:52:fd:c7:73:af:
62:45:72:f0:9e:89:16:09:2c:b3:ed:17:a5:ab:bc:
45:42:59:05:8e:ad:37:6d:2f:7c:ca:36:71:b1:13:
51:ec:57:7d:7c:f6:47:b9:11:5c:c8:c3:04:b1:58:
98:56:15:67:4e:d7:50:ab:30:74:dc:23:9c:ab:b9:
e0:24:fb:c2:0f:82:0b:f3:29:cb:15:ee:44:fa:e4:
52:55:02:c1:00:db:a8:33:cb:36:96:e1:7d:52:c1:
50:e5:7d:20:a9:a6:50:b3:2c:86:56:fc:5c:a0:d8:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:11:0C:5D:AF:6B:E5:D3:B7:9C:DA:A8:80:2C:FC:16:64:70:0A:2F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FREMXa9r5dO3nNqogCz8FmRwCi8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:79:cd:f2:27:7c:f4:de:ea:3e:7b:02:55:d5:ca:b7:96:61:
89:1a:8d:d0:ee:62:cb:8a:a5:20:91:cc:e6:27:52:48:b2:67:
88:97:41:7a:b7:c3:35:29:86:6e:6f:ce:17:28:c8:3c:25:3f:
95:d9:21:22:e7:22:bd:6e:39:25:77:d2:ca:98:4f:41:6b:aa:
62:1b:b3:26:37:ad:12:e4:22:4c:3f:e9:bf:45:c0:d4:79:3c:
77:ff:a3:16:f3:0e:8f:c7:91:a6:e7:f6:79:9a:ab:4b:8b:37:
18:fd:a0:5f:8f:26:32:05:1d:d6:72:42:d3:29:16:57:05:97:
7e:d0:e8:32:0f:1c:a7:54:64:e3:d3:fe:98:38:b3:8a:64:9e:
cf:9e:90:dd:2f:8a:52:fc:da:7e:3d:2b:53:15:20:0a:f9:d6:
23:8f:66:d9:7a:0b:f3:3a:51:2d:c6:61:de:72:5c:58:08:e7:
80:67:32:e6:8a:02:d7:1d:d3:1b:0e:ae:28:4c:c1:d1:79:7e:
90:46:3f:bd:35:c8:5f:6c:0b:1e:e7:0d:21:f1:6a:80:0d:bb:
95:73:89:5f:d7:d3:1c:46:67:3d:bd:85:6c:90:c2:50:a2:06:
cb:a7:bd:a7:55:34:27:da:66:28:7b:2b:9c:61:02:02:e8:42:
bb:e8:2f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 00:48:46 2025 by rpki-client