Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/MiB9eLBilclO6WTyq1rT8yozmeA.roa
File: MiB9eLBilclO6WTyq1rT8yozmeA.roa (raw, json)
Hash identifier: mQOc1220Y1xb/mWa6GUXR9lniWHti+g7nX1ZYmtfTSU=
Subject key identifier: 32:20:7D:78:B0:62:95:C9:4E:E9:64:F2:AB:5A:D3:F3:2A:33:99:E0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0219
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/MiB9eLBilclO6WTyq1rT8yozmeA.roa
Signing time: Fri 09 May 2025 21:07:48 +0000
ROA not before: Fri 09 May 2025 21:07:48 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 21:07:48 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=32207D78B06295C94EE964F2AB5AD3F32A3399E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:b8:d5:2f:ca:39:60:bb:6d:30:5b:1a:48:
90:1c:12:26:61:45:4b:95:d7:ef:d6:8e:ff:de:d2:
44:65:96:60:88:82:a9:20:45:31:40:2c:58:97:2b:
9f:ba:92:58:f4:84:4d:7f:97:44:7e:cd:d4:90:44:
60:c8:c8:90:0f:a0:58:3d:22:fa:09:fe:6c:9a:ed:
a4:38:ec:f4:7c:fb:0a:f1:37:50:08:82:f8:90:c4:
87:70:50:e8:d9:d5:f0:a5:b3:4b:90:e1:45:e1:2e:
ca:59:12:e7:0f:a2:65:2b:e2:da:02:ad:86:84:42:
fb:e6:00:4b:dc:79:e1:1b:9a:df:c5:01:7c:d5:40:
e5:52:88:31:16:ec:35:a7:50:6c:b7:c9:c5:fd:ba:
f1:96:f9:d3:be:d5:e0:59:9a:0a:d5:20:f7:d7:aa:
0a:00:6a:23:b1:9c:fd:94:bc:9c:90:8b:52:a2:12:
d5:fe:9d:25:b8:62:ef:a8:56:1e:e7:65:46:1b:da:
fb:3d:fb:f7:14:49:58:dc:e5:a6:9e:87:6e:9c:cc:
b1:d6:90:d1:31:cf:ef:04:cf:76:72:e5:91:7c:02:
9f:0f:60:25:12:bd:13:df:0f:a1:99:01:41:5a:9c:
d7:2a:80:08:91:40:75:e4:c4:9c:96:4e:77:bd:42:
64:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:20:7D:78:B0:62:95:C9:4E:E9:64:F2:AB:5A:D3:F3:2A:33:99:E0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/MiB9eLBilclO6WTyq1rT8yozmeA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:cd:45:2e:3f:1a:af:72:a3:5f:39:fd:29:5d:ae:3d:c8:31:
2c:1c:02:04:c8:89:c7:cf:c5:82:d0:93:84:64:85:a1:b7:97:
69:e5:b0:34:e0:6c:53:5d:9c:8c:de:5a:10:cb:54:46:40:4b:
34:da:c7:eb:9e:f6:0c:57:54:73:16:61:12:93:27:ee:2b:f2:
d3:48:4b:4f:b9:55:56:16:32:fb:00:27:1e:5e:a6:ee:4f:76:
5b:d6:3f:64:89:8b:33:1c:81:26:1d:bd:ee:d1:f0:89:2d:74:
64:e6:67:c9:c0:64:10:8e:79:d1:8b:26:37:7f:be:87:5b:cd:
2b:dc:b1:e4:4e:e9:b9:42:c9:77:84:e9:63:81:d0:ba:0c:b9:
00:2d:a3:27:65:d0:ad:39:03:56:a4:a9:db:23:c0:77:e9:63:
40:6e:cd:f1:23:3b:5c:3f:bd:7e:f6:c8:75:dd:49:2d:ce:f1:
1a:aa:ca:d2:a6:09:16:ee:03:e4:3f:0c:43:de:ed:27:9d:3c:
15:6e:92:99:a7:18:0c:6c:89:ed:7a:75:8b:d5:3c:cc:d2:1e:
8c:a8:8c:da:94:04:84:d8:88:fb:78:7c:13:3e:fa:45:ef:f3:
d2:11:3e:45:95:8a:1e:eb:21:35:14:30:b7:16:d6:39:d2:e0:
e3:07:05:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:10:49 2025 by rpki-client