Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PZUYbfv7IBPK_7iMKTaPQ1Mq-Y0.roa
File: PZUYbfv7IBPK_7iMKTaPQ1Mq-Y0.roa (raw, json)
Hash identifier: g4Wk2F2Hkk8L6ZuKvStcnisRORGv3ADaFpRG0svzQC0=
Subject key identifier: 3D:95:18:6D:FB:FB:20:13:CA:FF:B8:8C:29:36:8F:43:53:2A:F9:8D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01F9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PZUYbfv7IBPK_7iMKTaPQ1Mq-Y0.roa
Signing time: Fri 09 May 2025 17:07:47 +0000
ROA not before: Fri 09 May 2025 17:07:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 17:07:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3D95186DFBFB2013CAFFB88C29368F43532AF98D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:a9:cc:0c:4e:e8:bc:7d:5b:55:7b:7f:2f:
61:38:29:50:c2:ba:ef:4f:cd:6b:f2:45:77:e3:60:
38:ee:e0:5c:14:6f:62:f5:13:28:f7:7a:cf:9e:0a:
66:82:fc:64:46:27:e2:9a:91:90:aa:1e:74:4b:5e:
97:72:07:b7:c6:7b:c2:2d:f4:be:54:ab:56:c4:d6:
f2:31:53:93:c9:aa:e8:e1:9b:ec:a7:f0:59:35:d9:
54:13:42:13:51:9e:f0:d4:94:37:45:71:87:d3:46:
f9:31:5a:4c:fe:97:d3:b0:0f:7e:00:8b:b0:23:e1:
ad:0e:5a:a5:cc:e0:cc:c5:51:50:d8:c0:64:ca:9a:
67:46:18:f6:41:a1:78:3e:77:de:e5:7c:d0:00:6f:
2f:1a:b6:46:ff:84:76:13:ac:7e:5d:70:17:46:09:
34:c6:70:ef:4a:cd:f7:b2:56:1d:d6:d4:a9:f5:e5:
76:d8:1e:8c:92:87:62:5f:89:df:c5:f3:a5:57:b0:
fb:b4:02:b2:9f:66:68:57:64:e7:32:36:32:70:4e:
01:e4:d0:86:54:0e:0e:f3:25:48:21:6c:16:92:5e:
c3:6c:27:91:b0:3f:57:01:4d:49:d8:67:c4:6c:31:
39:b9:5f:70:3f:8f:9a:73:cc:92:81:21:36:d1:bd:
03:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:95:18:6D:FB:FB:20:13:CA:FF:B8:8C:29:36:8F:43:53:2A:F9:8D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PZUYbfv7IBPK_7iMKTaPQ1Mq-Y0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:35:e1:19:70:95:ad:7d:3c:f6:b7:63:bc:e0:ea:41:36:aa:
7a:4f:2a:e0:bf:49:ac:89:0d:4d:d5:38:ea:83:40:9a:0e:3f:
42:97:2c:70:42:2d:69:30:67:20:a4:9e:66:2b:89:5c:fe:0c:
bf:57:de:34:04:95:7a:13:ab:56:8a:cc:6d:eb:14:ea:3f:55:
14:c4:69:74:19:a8:fc:93:03:7d:41:b9:6e:2b:31:e1:f5:66:
1d:bc:51:0e:cc:de:2f:75:eb:08:99:55:a6:d0:83:76:14:86:
5e:30:11:71:cd:15:65:22:d9:f0:9a:5d:9f:0e:a3:d5:b8:49:
64:a8:7f:a8:dc:80:e7:c2:56:92:30:a9:ab:d7:a4:da:f2:a6:
fe:fb:db:9c:7f:67:96:7c:a6:e0:95:2a:71:24:b1:83:e1:10:
f7:3f:9b:18:06:28:bd:ba:ef:3e:b3:aa:70:07:ac:18:99:7e:
61:ca:61:0f:74:3d:d3:ff:d9:84:9d:f0:07:ee:b9:86:87:3e:
2e:61:80:68:f9:4e:bd:f0:71:7e:3d:09:66:df:36:30:9b:ea:
11:7d:3e:0c:6f:14:5e:3b:65:42:6a:cd:96:be:3c:ee:0e:4c:
9b:7d:e3:f0:a3:12:66:6a:0b:da:d7:74:bf:a9:9e:91:75:31:
24:13:95:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:47:50 2025 by rpki-client