Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Pe1YyrNyp9S6RULQWc3ytG5Ta7I.roa
File: Pe1YyrNyp9S6RULQWc3ytG5Ta7I.roa (raw, json)
Hash identifier: kIrtKhRZTczbIx1zI4C1KzfJzwLu/c4bHkmbyyz18iI=
Subject key identifier: 3D:ED:58:CA:B3:72:A7:D4:BA:45:42:D0:59:CD:F2:B4:6E:53:6B:B2
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07D9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Pe1YyrNyp9S6RULQWc3ytG5Ta7I.roa
Signing time: Sat 17 May 2025 13:08:23 +0000
ROA not before: Sat 17 May 2025 13:08:23 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2009 (0x7d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 13:08:23 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3DED58CAB372A7D4BA4542D059CDF2B46E536BB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:db:ba:51:7c:90:c9:e1:73:e0:41:8d:10:
16:eb:08:a6:19:0f:fb:3e:7a:bc:c3:1e:65:04:18:
bd:fb:61:eb:5a:38:df:6b:f9:b7:c1:4f:e6:fa:47:
43:32:30:87:25:46:c2:d6:b7:fe:ac:17:8a:89:6f:
b2:10:3e:dd:78:fd:1c:36:4c:c5:fb:ec:75:2f:35:
2d:bd:97:47:7a:37:fd:8d:2c:36:d9:3b:b9:b4:e5:
11:90:0d:f4:c2:f8:12:5f:b2:c9:01:71:7b:51:80:
3f:47:71:e2:e1:67:fc:a5:1d:cb:33:a6:7f:c3:b2:
34:fa:05:c8:2e:93:7e:c1:8e:eb:57:78:07:95:be:
0b:73:e1:50:80:b3:3d:a9:43:fa:dd:01:9a:25:9e:
c6:7f:ca:65:ed:ef:55:a5:6e:45:6e:23:1b:6f:8c:
da:9d:67:7a:9a:b5:4e:4c:26:d6:c2:02:e0:c9:7b:
10:4b:4a:d6:3d:ea:8f:b5:50:3b:b0:c2:1b:b5:a7:
83:3e:40:3e:99:ac:c5:2b:bc:de:35:07:03:35:72:
d6:ec:62:35:c2:47:c4:89:e4:15:f6:30:bb:6f:d7:
bd:4e:04:66:29:5a:fd:2b:10:4a:a2:89:ad:9f:96:
3d:f5:8c:80:cf:67:db:30:95:7c:f9:5e:ae:df:04:
14:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:ED:58:CA:B3:72:A7:D4:BA:45:42:D0:59:CD:F2:B4:6E:53:6B:B2
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Pe1YyrNyp9S6RULQWc3ytG5Ta7I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:b1:5f:ff:4c:72:b8:ea:ca:5b:9f:14:5c:ed:f2:61:ed:5e:
b7:58:5d:ce:43:ab:ee:26:df:94:85:ab:4f:30:b6:51:12:6b:
c5:56:a4:a3:09:f3:c2:8b:42:3e:4a:75:06:94:7f:20:dc:a8:
47:7f:c1:d5:65:a4:f8:63:59:5c:4a:3d:76:3a:8b:b5:19:ba:
64:64:3a:d8:2c:a2:13:30:e5:8e:9d:c3:84:6b:6a:59:20:6e:
da:75:e9:e5:1b:05:d2:43:35:f1:ea:50:8e:9e:6f:0e:ba:f0:
86:b6:76:cd:07:ba:69:a4:ed:a1:b1:1c:3f:1f:01:26:e4:fa:
d7:c0:0a:60:04:26:12:d9:57:bc:ba:7f:2c:5e:00:2e:09:25:
53:36:0f:e1:8e:7e:7c:a9:dd:6f:f1:7f:fd:41:a9:3a:c8:8d:
1c:9e:f3:f1:38:23:4e:44:e6:d0:61:33:eb:12:19:96:d2:5b:
2e:c8:22:52:06:bd:32:62:e8:3a:a5:4f:ba:3a:b8:16:bf:8a:
ef:e2:3c:15:50:36:87:07:9f:d2:65:4b:af:aa:53:8f:60:bf:
16:4e:ae:68:05:01:9b:aa:62:cf:e3:38:c7:be:76:50:68:0b:
b3:f9:18:da:47:1e:75:b7:a1:47:ff:eb:d7:e4:ed:22:ea:f2:
9e:14:57:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 20:07:33 2025 by rpki-client