Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/KAvZn2uw25HwuQtTNXijq3kgRVk.roa
File: KAvZn2uw25HwuQtTNXijq3kgRVk.roa (raw, json)
Hash identifier: X7vJlEe04Hbv6Nqxo1CIpq2wQVy8DZKyXYUhlcFHMkM=
Subject key identifier: 28:0B:D9:9F:6B:B0:DB:91:F0:B9:0B:53:35:78:A3:AB:79:20:45:59
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0171
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KAvZn2uw25HwuQtTNXijq3kgRVk.roa
Signing time: Fri 09 May 2025 00:07:44 +0000
ROA not before: Fri 09 May 2025 00:07:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 00:07:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=280BD99F6BB0DB91F0B90B533578A3AB79204559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ea:a4:51:87:87:3f:ef:3f:37:8a:4a:cf:b1:
a1:06:7c:1d:1b:a6:79:47:18:8f:44:ab:3c:29:a5:
3f:5a:10:0d:3f:ce:0d:26:db:3f:c7:d3:cf:c7:54:
b3:bb:8e:14:99:d0:74:db:25:e6:e1:14:9d:2d:4a:
aa:ad:5a:f4:f9:66:5a:8b:ad:43:9e:96:62:2f:39:
71:1f:e6:c2:c6:a9:6b:91:68:17:ac:e2:92:f1:6e:
ab:ef:e6:2a:7f:8b:b3:a0:ad:71:91:10:e2:10:5c:
95:60:7c:22:98:8d:c9:d3:b2:ae:3e:c7:a3:f9:0d:
a2:68:46:30:b7:05:c9:4b:4d:a5:72:a4:39:79:08:
a3:b1:b2:ed:b0:25:6b:db:f5:0b:26:b1:92:52:c5:
6e:6c:b6:84:6a:cf:9f:5d:a0:be:f6:b6:2a:37:0b:
7f:05:fb:70:49:76:a3:4a:1d:c3:2c:a7:2b:89:69:
ff:09:fc:d7:ea:8c:e5:99:db:55:30:57:f1:e5:a7:
0c:ab:75:61:7b:ae:55:70:49:97:ae:aa:49:60:00:
66:21:35:36:6b:10:64:12:6f:ee:a5:eb:69:95:97:
72:ab:20:70:af:ac:95:92:a1:0c:29:4c:2a:2e:23:
4d:c3:e0:1c:ce:d4:17:93:5b:d8:0f:09:83:9c:b4:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0B:D9:9F:6B:B0:DB:91:F0:B9:0B:53:35:78:A3:AB:79:20:45:59
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KAvZn2uw25HwuQtTNXijq3kgRVk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:9b:6c:d2:df:90:6a:06:d7:1d:85:e0:27:7f:d4:c6:b2:d3:
99:a9:74:6a:4c:be:65:e4:ac:99:5f:93:19:c6:7b:45:c8:8e:
4d:2e:28:2c:19:34:0c:a0:f0:e9:d5:ee:01:7e:b1:f1:3f:ed:
4c:7d:14:c7:b1:87:eb:66:fe:a8:98:6a:a4:0f:0b:c0:17:4e:
d0:41:f7:8c:b4:ab:2d:5f:b9:81:6c:42:0d:99:b4:f3:7c:47:
a1:1a:6c:4a:36:3a:36:61:bd:e1:25:4d:0c:1b:61:0e:d2:1e:
a1:73:f3:c4:d8:69:ad:cc:94:ed:0f:8d:f3:5a:b1:f1:37:0e:
fc:6c:97:a7:df:a7:0a:a7:69:8f:c2:02:87:51:76:47:3f:42:
32:d3:8a:41:d0:91:0a:f4:ab:0d:51:d7:f6:a9:66:ba:58:7e:
ca:11:48:a4:ef:54:db:1a:1a:61:82:d9:d7:5b:43:d7:a1:a0:
d1:55:6e:b2:8f:96:2b:8c:cf:90:9e:f6:04:78:1b:e4:63:d5:
f6:68:31:5e:42:7d:d5:94:d4:0a:21:8d:4c:64:50:9f:40:0c:
dc:cd:22:47:6e:0b:bb:29:1d:08:fc:2e:1d:d9:87:2d:08:3a:
a3:63:3c:30:5c:d7:95:a8:f1:ba:9f:4b:9b:55:07:16:ec:78:
01:a1:08:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:04:08 2025 by rpki-client