Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PPMOXSRGvbSJ_i5pHJHw-DilXXo.roa
File: PPMOXSRGvbSJ_i5pHJHw-DilXXo.roa (raw, json)
Hash identifier: yYKCoeU5WBJM4AsWJNa9C+V0Hg8Q1s+RGRdGxdL63xo=
Subject key identifier: 3C:F3:0E:5D:24:46:BD:B4:89:FE:2E:69:1C:91:F0:F8:38:A5:5D:7A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 05FD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PPMOXSRGvbSJ_i5pHJHw-DilXXo.roa
Signing time: Thu 15 May 2025 01:38:56 +0000
ROA not before: Thu 15 May 2025 01:38:56 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1533 (0x5fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 01:38:56 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3CF30E5D2446BDB489FE2E691C91F0F838A55D7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:9e:e1:34:de:47:06:a5:90:d3:73:73:c7:
78:4b:9f:ec:b3:a1:0c:a6:0f:91:a3:b1:6d:e0:28:
21:0c:40:36:de:78:9c:f1:d7:1e:b5:56:63:5e:e1:
c4:d2:a0:ae:67:50:42:ae:90:90:01:cc:74:da:21:
89:d2:99:7b:45:b9:64:e2:fe:41:0c:a9:64:38:36:
ad:f9:f9:aa:b4:35:b0:47:92:91:e0:c4:4b:36:51:
11:b3:1b:f3:ea:09:83:c2:ed:4e:be:21:29:b2:1a:
1f:d4:1b:4a:c9:e2:c7:a0:01:36:53:9d:e1:7b:11:
f2:ed:6f:ce:85:1e:95:f5:bd:f1:1b:4a:43:b2:05:
b2:39:15:f6:8f:f4:cb:1c:80:65:25:7f:e4:d9:74:
0d:32:7a:84:55:ea:d0:a6:87:85:c3:45:42:2f:46:
09:ca:6b:88:14:12:a4:73:ec:1c:2e:36:bc:9f:09:
8f:4b:ca:7c:a8:7a:16:aa:ce:5e:ae:61:dc:02:73:
33:5d:73:11:89:ab:b0:ea:b4:d2:76:3e:cc:05:db:
7a:b7:c4:36:81:da:1f:be:2a:ba:a9:d2:4c:8e:d9:
f5:bc:fe:50:90:f4:5e:ae:10:73:4f:30:46:aa:9e:
80:ef:71:11:53:53:10:da:3f:2d:9a:d1:48:b7:63:
7f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F3:0E:5D:24:46:BD:B4:89:FE:2E:69:1C:91:F0:F8:38:A5:5D:7A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PPMOXSRGvbSJ_i5pHJHw-DilXXo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:a7:7e:6b:86:92:6a:83:b9:9f:89:ed:73:da:99:e7:bd:85:
91:01:e4:e1:42:9d:f5:7a:28:90:b5:27:dc:88:ea:68:7c:ab:
42:bb:a5:36:96:f6:79:18:bb:9d:42:27:54:61:d6:d7:a5:f0:
9e:a3:76:39:7e:4d:d4:ea:2d:73:d9:19:23:c3:e4:9b:60:8f:
e5:de:af:a2:58:eb:a7:57:0b:c5:51:23:02:d8:9a:57:24:a5:
10:52:bb:18:7d:cb:68:be:37:2c:ed:b3:31:c5:27:62:7e:c7:
7e:4f:de:84:c6:13:3d:59:95:6d:d8:d9:93:bb:0f:90:5d:28:
1b:33:73:1f:a6:dc:13:2b:44:8d:8f:43:d4:91:49:95:91:e8:
57:5d:5c:00:b8:82:5a:1f:42:00:76:a9:be:95:41:10:eb:6d:
3e:5f:f8:3a:78:b2:93:dc:ec:39:fd:7a:0a:0b:ab:7b:23:87:
8f:fc:31:cd:8d:a5:a3:0f:0c:8b:17:d8:aa:df:55:19:a0:7e:
d5:eb:c7:57:10:2b:39:01:df:ec:6b:33:c6:7e:36:46:63:fd:
da:1d:52:c5:2e:ae:63:8b:44:e5:02:88:71:4a:80:6f:7e:56:
54:dd:13:d4:64:5f:47:23:df:2b:13:03:b4:1d:17:08:c3:a1:
4f:20:bf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:39:08 2025 by rpki-client