Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LJFJx6C5ahSifGib_z3OKPLf070.roa
File: LJFJx6C5ahSifGib_z3OKPLf070.roa (raw, json)
Hash identifier: vLi3g/tFwvNDYxaulJqAT07uBnppwNoKkKZTcdf4jGc=
Subject key identifier: 2C:91:49:C7:A0:B9:6A:14:A2:7C:68:9B:FF:3D:CE:28:F2:DF:D3:BD
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 02A5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LJFJx6C5ahSifGib_z3OKPLf070.roa
Signing time: Sat 10 May 2025 14:37:53 +0000
ROA not before: Sat 10 May 2025 14:37:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677 (0x2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 14:37:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2C9149C7A0B96A14A27C689BFF3DCE28F2DFD3BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fa:9c:a8:56:f9:3a:df:97:ef:23:db:1b:3f:
38:29:25:63:ee:ab:bc:29:2d:1e:05:db:a4:0d:da:
1c:11:08:da:1f:bf:09:ce:14:e9:a7:6e:86:48:43:
8d:8a:98:00:3a:14:6c:d4:9f:16:a1:36:b6:7e:da:
3e:c3:31:b7:f6:89:3e:38:58:fb:7e:af:01:d7:ae:
d4:cf:21:1b:07:5b:af:d5:13:f7:59:74:c3:67:19:
bd:0b:3b:3c:20:d5:c0:c8:be:0e:9a:b5:6c:c4:a8:
28:bf:b6:20:6d:8a:81:5f:35:02:a6:04:2c:53:b4:
c2:ff:3a:0e:9a:f8:bb:09:a4:50:c4:ef:ff:d1:62:
98:cc:96:8a:7a:fc:55:6a:ba:bb:b8:69:c9:c1:b6:
49:9f:03:58:a7:2f:95:a5:39:48:02:15:e7:d3:37:
a1:92:5d:fb:82:81:79:6a:67:99:e8:40:1e:c9:d8:
0f:97:80:bc:14:3b:f7:7c:e9:0d:df:80:4a:5c:ef:
0d:9d:4f:e2:fd:9c:34:14:ce:bc:34:77:12:1c:bb:
80:bc:3d:dd:d1:48:1e:80:c9:71:7f:5e:76:2d:20:
03:3d:af:88:72:c8:2d:5b:66:6b:59:3c:fc:d9:c9:
1b:82:fa:19:9b:8e:ce:31:bf:64:0d:d5:81:35:5e:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:91:49:C7:A0:B9:6A:14:A2:7C:68:9B:FF:3D:CE:28:F2:DF:D3:BD
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LJFJx6C5ahSifGib_z3OKPLf070.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:2c:0d:35:14:59:ca:3a:f1:71:b9:a9:da:8f:92:8c:6a:97:
aa:ab:e8:49:08:8b:9c:06:d6:3c:55:48:b6:72:e1:4d:76:94:
32:c7:0d:37:bf:3d:75:bb:31:59:62:2d:4b:db:f8:ae:23:e8:
fb:d9:20:ca:94:0a:ff:ba:8c:0b:16:7a:ca:c7:d7:68:a5:8c:
ca:b1:be:6c:f8:91:56:6d:e3:5d:f8:15:5b:98:35:2e:4f:66:
a9:32:5a:6b:67:6f:03:0e:91:5b:0d:4c:c6:aa:2b:df:da:8e:
7f:86:79:f6:fe:b0:60:cf:f4:19:9b:f4:db:2a:ff:10:ac:91:
fe:22:a8:ef:5d:2e:fb:6e:74:05:b5:27:13:15:eb:3d:ef:22:
46:81:bf:57:6b:20:10:e4:e3:6f:3e:5a:d9:3d:7f:28:4f:7d:
34:f8:43:60:00:c3:af:b2:70:41:0c:79:0f:30:a7:3b:f4:b8:
6c:bd:24:67:0c:d8:ff:98:0a:05:65:4c:84:b9:92:81:66:16:
e0:a0:5c:52:99:a8:63:13:67:01:f9:04:93:fb:27:00:b8:e4:
c7:6b:1e:3e:7d:6b:66:8f:2a:fb:ad:9c:b6:59:64:f4:67:c1:
a1:d7:04:8d:46:01:ee:fd:86:74:0b:5a:5c:52:23:5d:7f:bf:
19:c9:be:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:58:50 2025 by rpki-client