Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/KSp2I9CIUeBOd7iyTeli8Z88q8s.roa
File: KSp2I9CIUeBOd7iyTeli8Z88q8s.roa (raw, json)
Hash identifier: QNKDj3EjvsfYh0N+8ZbdWPIC/4MTbXBWECmcfE/SDow=
Subject key identifier: 29:2A:76:23:D0:88:51:E0:4E:77:B8:B2:4D:E9:62:F1:9F:3C:AB:CB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0709
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KSp2I9CIUeBOd7iyTeli8Z88q8s.roa
Signing time: Fri 16 May 2025 11:08:06 +0000
ROA not before: Fri 16 May 2025 11:08:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1801 (0x709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 11:08:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=292A7623D08851E04E77B8B24DE962F19F3CABCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:0f:92:90:04:d6:19:00:66:99:ab:92:08:
f0:1d:90:37:a4:0e:09:38:ad:31:87:e4:80:e3:19:
e2:f6:0f:97:2e:32:df:e1:66:91:66:5f:20:7e:1a:
3b:0b:f6:7f:43:a6:f6:bc:42:55:9f:25:66:b8:b0:
99:da:b1:0d:5a:d3:0d:77:29:8e:ea:6a:2e:be:84:
d6:18:a7:f4:71:1c:a5:2a:fc:e1:91:cc:d2:65:af:
07:df:0b:c3:84:ee:af:87:78:c4:be:f3:01:56:8c:
8d:bf:91:47:e9:8a:2a:70:00:a6:d6:fe:f8:c0:f8:
80:7b:d0:5a:07:b8:6b:3d:5c:b3:7c:02:b0:9d:84:
6b:27:93:32:79:db:13:6b:24:4c:50:b6:2f:c4:90:
bf:5d:66:53:bc:9c:66:9e:0b:75:59:05:3c:36:5a:
bc:15:16:a4:3c:bb:6d:93:5d:df:75:2d:be:64:10:
d6:de:b4:59:cf:cb:cd:da:66:05:c8:63:f2:3b:5b:
36:7d:4c:f5:03:b9:ec:8e:6a:b8:9d:56:2b:fc:2c:
a5:25:62:c9:c6:d9:05:9d:17:ba:d8:07:71:20:7e:
aa:8b:e2:3e:df:fb:b5:ac:ce:46:0b:85:0e:e7:f4:
4e:ef:d0:10:8b:97:ac:81:74:16:92:29:83:87:4a:
9c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2A:76:23:D0:88:51:E0:4E:77:B8:B2:4D:E9:62:F1:9F:3C:AB:CB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KSp2I9CIUeBOd7iyTeli8Z88q8s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:cc:8d:c8:93:99:01:ef:a0:7c:af:e9:58:89:61:b7:40:95:
fa:4d:6f:d0:ad:92:ff:15:7e:9e:04:06:30:fe:72:f9:3b:ec:
14:39:60:b9:f2:10:d9:56:00:35:09:fa:8c:4e:39:e8:db:ad:
a3:a0:42:a6:7f:37:77:93:75:01:eb:2b:11:75:46:74:d5:e8:
71:9c:ec:29:e1:36:63:7c:37:7e:0a:bd:54:5c:dd:ff:2a:45:
d3:c9:e9:ce:c1:23:d4:7b:98:18:ea:b6:02:e3:aa:00:34:2c:
ae:94:c3:c7:2b:d8:33:b2:99:66:3c:17:e6:75:01:fb:49:4f:
d0:5c:e1:d1:4d:66:47:fa:5f:0e:27:6f:6f:1f:80:a3:69:f1:
f6:f6:7b:d7:af:0a:6d:ea:22:6b:f6:4d:db:9a:b0:f6:3d:59:
69:0a:26:58:e4:93:ee:c7:b1:63:0b:11:2a:81:20:e0:35:47:
81:b6:f2:2d:76:d5:13:d5:9f:87:f2:ca:03:ae:52:c9:95:72:
5f:03:67:ab:8a:88:21:aa:00:65:a7:1d:43:31:42:f7:d6:dd:
ea:48:f7:4a:95:f2:a3:09:43:75:86:c0:f1:5f:a3:80:8a:ea:
e0:62:1c:09:a3:15:ab:f3:bc:d0:35:a0:bf:7f:a8:84:09:8c:
89:b5:bd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:58:39 2025 by rpki-client