Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/K7vFPTukTQ3Elkr6PFxue6wMh3A.roa
File: K7vFPTukTQ3Elkr6PFxue6wMh3A.roa (raw, json)
Hash identifier: WxOOOpaMGmbZklRRrwQmR5aekB3nNOlmhDYByQGLR1Y=
Subject key identifier: 2B:BB:C5:3D:3B:A4:4D:0D:C4:96:4A:FA:3C:5C:6E:7B:AC:0C:87:70
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0221
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/K7vFPTukTQ3Elkr6PFxue6wMh3A.roa
Signing time: Fri 09 May 2025 22:07:51 +0000
ROA not before: Fri 09 May 2025 22:07:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 22:07:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2BBBC53D3BA44D0DC4964AFA3C5C6E7BAC0C8770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:e5:ff:3f:98:6a:9d:50:34:2b:e4:b0:48:
e0:ab:87:7a:2a:f8:ff:1f:4f:ba:15:ea:5d:25:50:
55:53:51:69:9c:03:ec:47:32:da:9d:79:ed:69:c0:
04:e4:73:ec:56:a7:22:b6:87:f2:72:b9:c7:14:41:
51:6e:ec:4d:19:ce:90:c5:a2:8b:1e:fb:3b:bf:1d:
04:f9:0c:ee:d1:10:15:5e:c9:e7:6c:83:8a:cf:d0:
35:82:d3:01:c9:b3:16:50:c1:c8:8d:bf:28:1e:74:
31:5f:c6:b4:01:1c:0f:e6:49:00:96:98:17:98:c4:
f6:be:29:06:ea:23:77:81:de:df:50:d3:31:69:76:
58:4a:6c:b1:22:5b:18:65:94:16:b4:0c:93:b7:b6:
48:3b:14:20:aa:ca:12:0f:6b:b6:ba:a0:e1:3e:bc:
10:38:e0:59:26:a2:73:47:b5:61:15:6d:15:e3:04:
21:e5:40:34:ac:b3:41:b1:b8:77:63:29:de:73:3f:
b7:ab:44:d1:b9:0c:e9:b9:a5:93:34:c5:34:36:a0:
66:2d:3b:13:b5:bf:13:4c:51:fc:40:73:fd:af:d9:
01:dd:c8:54:ff:e6:9e:6f:48:0d:2b:b6:72:df:1f:
38:b7:d4:2f:e4:ef:f9:92:f5:d7:4c:94:eb:a4:d5:
d4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BB:C5:3D:3B:A4:4D:0D:C4:96:4A:FA:3C:5C:6E:7B:AC:0C:87:70
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/K7vFPTukTQ3Elkr6PFxue6wMh3A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:df:21:54:86:32:da:18:35:a8:c7:55:f8:9b:fd:84:6d:17:
5f:39:37:fb:74:ba:ad:6c:b1:15:27:ed:40:b5:4b:61:33:62:
df:1b:32:1e:61:aa:6d:fa:9c:2b:45:38:9b:98:f4:ed:2a:f8:
7e:53:15:24:76:c5:65:f9:ff:66:66:56:28:67:f4:bb:b0:8f:
96:4e:92:e5:20:db:d8:7a:96:65:86:e3:bc:8d:83:c6:2e:6f:
bc:83:4e:86:1b:1a:c8:4d:73:17:e1:f4:1d:b2:ec:b9:93:92:
35:f1:fb:1d:28:1e:92:43:15:01:34:42:30:83:ae:17:b3:21:
ea:e9:38:ce:bf:34:2c:5e:3d:25:6e:29:30:df:42:e0:c1:f0:
28:9c:dc:4f:24:b9:33:27:7d:0a:6b:ee:db:d9:94:1c:2c:85:
5f:da:2f:a2:e0:c5:34:50:27:5c:6e:11:06:ff:21:70:e2:40:
4b:cb:1c:32:b3:87:14:b0:93:cb:f7:4a:3e:1c:02:79:ab:4e:
70:e7:f7:b3:34:d9:cf:38:9f:95:69:1d:c5:9b:c7:7f:51:d3:
6d:1f:45:9c:a8:2d:0f:ae:37:d4:7a:90:5f:81:3f:dc:1d:d4:
0b:e0:c6:9e:16:4f:af:ec:b8:1c:f1:c7:a7:92:cd:ea:06:09:
54:da:a9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:21:46 2025 by rpki-client