Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Ppxe0Mo60Vvh5m4TtYm1FUKs1Oo.roa
File: Ppxe0Mo60Vvh5m4TtYm1FUKs1Oo.roa (raw, json)
Hash identifier: UUa+ALlAigWV4l2INDqEjMEv+bOMP+GGzWsfALZicsU=
Subject key identifier: 3E:9C:5E:D0:CA:3A:D1:5B:E1:E6:6E:13:B5:89:B5:15:42:AC:D4:EA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 05E9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ppxe0Mo60Vvh5m4TtYm1FUKs1Oo.roa
Signing time: Wed 14 May 2025 23:08:03 +0000
ROA not before: Wed 14 May 2025 23:08:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1513 (0x5e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 23:08:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3E9C5ED0CA3AD15BE1E66E13B589B51542ACD4EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c2:ef:0f:bb:02:bf:c0:ca:33:cc:c5:1a:d1:
4d:3d:77:dd:54:e6:8b:8a:db:42:6e:7d:e5:8e:21:
49:65:69:28:9c:94:0e:a4:80:a6:61:b4:c5:be:90:
a0:57:07:57:5f:87:07:3e:30:5d:ed:ea:21:a0:c4:
1c:15:be:99:02:ba:94:9b:18:d7:c6:bf:2d:78:ba:
a6:72:bb:56:db:63:16:6e:94:32:ee:8a:e4:7f:d8:
b4:13:11:f8:d0:81:93:4c:58:60:69:46:1c:c3:b0:
6a:0c:ef:28:41:72:7a:3c:78:33:ea:1a:65:e1:cc:
1a:27:4e:98:14:c2:40:44:ae:95:4c:d5:3d:9c:00:
c4:ab:4c:3a:79:6a:36:cb:c3:43:eb:07:1f:57:31:
5d:33:eb:b5:ce:ae:04:d6:31:55:61:af:fc:4b:1c:
6c:2d:5b:c1:df:4e:b7:af:cf:69:6c:ef:9f:37:ff:
ba:55:27:56:fa:29:18:7a:05:53:91:b6:98:ee:54:
c1:6f:fb:73:13:3e:ec:43:a5:85:fc:c3:af:22:ce:
f1:48:25:32:37:c1:5c:23:e1:41:a8:d5:de:05:c0:
51:9c:02:da:f9:34:0a:2e:93:2e:43:ab:31:b5:3d:
f0:a0:de:e7:00:4b:a8:5a:a0:17:a4:56:31:69:ae:
3a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9C:5E:D0:CA:3A:D1:5B:E1:E6:6E:13:B5:89:B5:15:42:AC:D4:EA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ppxe0Mo60Vvh5m4TtYm1FUKs1Oo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:07:8c:ab:e2:c3:eb:0c:50:91:94:20:0f:d1:19:7b:c7:60:
19:3a:79:e3:a8:15:83:3a:c7:c1:56:e9:30:eb:80:62:1d:a9:
e3:9d:f8:d2:19:27:7f:60:63:0c:65:13:22:24:e4:11:7a:c3:
f8:ce:2e:49:5c:6f:26:21:6e:0f:fb:4e:ce:12:40:31:7b:cd:
22:94:14:fd:e0:e5:40:22:8f:60:9d:e4:eb:74:80:2c:e0:67:
32:a0:51:5c:ed:52:89:74:1d:89:fb:cf:91:ae:24:f1:bf:78:
49:28:13:5d:0d:e7:25:87:77:fe:12:e7:95:b4:84:c4:cb:9d:
e1:80:9d:3c:9c:11:e5:29:5b:e5:cc:42:f6:de:54:17:26:83:
d1:c6:f1:18:9a:bb:3f:b8:ec:9e:20:71:e2:49:db:df:59:2f:
5c:fc:4e:be:9e:79:36:9f:05:4e:6e:61:35:8e:bb:ae:7a:91:
29:b0:e9:a4:53:b7:2c:52:28:76:97:bf:9f:5d:c3:78:31:5a:
e0:3a:79:4c:13:77:e7:d4:72:50:9b:80:4c:51:be:b6:14:aa:
41:9e:2a:30:c6:e8:49:ff:57:da:50:a6:8b:79:55:91:ab:04:
35:05:00:be:4c:db:b0:af:79:1c:d7:b5:de:15:e4:eb:ec:08:
22:07:e6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:04:04 2025 by rpki-client