Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/FWvPqeLc6Eptg3ODYsNHh5CzLXs.roa
File: FWvPqeLc6Eptg3ODYsNHh5CzLXs.roa (raw, json)
Hash identifier: ZwBb0opCbV2EofN+SfKGsaSIbp2aRI+ATv7WC9tFV80=
Subject key identifier: 15:6B:CF:A9:E2:DC:E8:4A:6D:83:73:83:62:C3:47:87:90:B3:2D:7B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0391
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FWvPqeLc6Eptg3ODYsNHh5CzLXs.roa
Signing time: Sun 11 May 2025 20:08:27 +0000
ROA not before: Sun 11 May 2025 20:08:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 913 (0x391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 20:08:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=156BCFA9E2DCE84A6D83738362C3478790B32D7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:c7:3e:6b:11:b0:99:69:60:09:92:66:fa:
84:cf:a9:10:e5:a6:5d:21:17:27:52:36:5a:b8:ec:
3a:68:56:fc:4f:2c:ae:dd:34:fd:0d:78:86:8f:05:
f7:69:58:df:70:9f:e8:3f:7e:20:01:c8:00:a0:58:
54:51:20:42:89:9f:f7:41:ac:25:07:e1:fb:04:6e:
39:a3:6c:11:9e:03:15:2c:93:35:b7:a8:49:4e:a7:
b6:3e:41:7f:06:7c:13:e7:34:98:da:aa:6c:f7:2e:
38:aa:2f:4a:49:b5:a2:49:ec:b1:5b:ea:79:d6:c7:
b7:4f:6c:7b:ea:36:ea:00:1c:b4:84:7d:e4:3a:a1:
ac:d0:b6:6f:2a:f4:e1:ab:d8:8e:de:ad:a1:75:a7:
1a:b0:6b:8e:a7:ba:ca:c5:09:6c:34:b2:12:46:fb:
81:9d:68:a0:04:f6:52:91:e9:aa:01:eb:f5:38:91:
d3:4f:fb:0d:10:99:5f:72:80:43:6f:a7:2f:db:ea:
dc:70:37:d2:5a:44:7a:1f:20:8c:ae:11:e0:b4:33:
d0:ce:f8:6c:83:2a:bd:44:dd:da:5f:59:22:78:af:
c7:2d:06:f6:73:57:a5:02:2c:33:01:63:b0:51:05:
d9:b0:48:c9:b0:d5:80:3a:de:a4:29:b0:36:23:7c:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6B:CF:A9:E2:DC:E8:4A:6D:83:73:83:62:C3:47:87:90:B3:2D:7B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FWvPqeLc6Eptg3ODYsNHh5CzLXs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:c3:25:12:68:cb:14:ec:24:67:04:aa:88:58:fd:45:58:29:
60:c5:9f:ed:80:cf:aa:ae:e0:34:8d:2e:02:3f:a2:f6:8a:a5:
ce:38:74:80:54:c7:91:88:ae:dd:0d:8d:06:f0:0b:f5:dc:92:
9e:5b:2c:cf:68:c7:11:f1:69:c7:ad:06:ff:1c:05:00:23:19:
d8:60:97:6a:e4:fa:5b:c4:dd:1e:c2:d7:2b:91:2b:53:eb:5b:
16:5d:63:89:92:4a:eb:da:59:03:8f:23:da:e8:6a:03:95:91:
b2:8b:f7:b0:99:1c:69:e6:c9:27:9e:09:a6:83:9e:cb:b3:d8:
63:9f:f1:ae:3f:75:7e:ed:94:2a:80:5c:ef:0f:c1:ad:d0:aa:
8d:4e:cf:d6:35:b9:b2:e9:2b:7e:33:bf:e6:5f:8a:4d:50:02:
93:5e:b0:3c:35:8b:1a:17:0b:8c:89:0c:dc:10:48:56:f1:56:
83:63:33:e2:39:27:a4:2e:a1:05:76:e5:9f:be:6a:64:05:dd:
29:57:8d:02:b3:57:19:13:f9:bf:48:b1:97:85:ec:90:8f:2a:
da:7a:5a:f8:00:9e:7d:00:04:49:1f:ce:09:1a:8c:c8:ee:63:
f3:c7:55:96:f6:18:25:80:90:bd:61:f9:eb:86:5e:69:93:a4:
a1:9b:5e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:09:28 2025 by rpki-client