Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PxZblSFHbm4SPrE0mCA3RGRDzvA.roa
File: PxZblSFHbm4SPrE0mCA3RGRDzvA.roa (raw, json)
Hash identifier: OoBTQjwny9nsg+4xEoZzkWwCL8hP+jA8S8GwR9WvM6c=
Subject key identifier: 3F:16:5B:95:21:47:6E:6E:12:3E:B1:34:98:20:37:44:64:43:CE:F0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 06DD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PxZblSFHbm4SPrE0mCA3RGRDzvA.roa
Signing time: Fri 16 May 2025 05:38:03 +0000
ROA not before: Fri 16 May 2025 05:38:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1757 (0x6dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 05:38:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3F165B9521476E6E123EB134982037446443CEF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b4:20:8d:19:66:00:15:40:c8:4a:e8:a2:4d:
aa:aa:76:e4:b4:77:ce:f5:d2:42:ef:3c:64:25:a4:
07:81:dd:a3:84:97:b8:f2:31:07:92:1c:b6:86:ba:
ed:cf:e5:91:3f:08:82:07:48:15:93:2d:8a:e0:c0:
72:d9:d8:f9:32:00:be:db:e1:f9:b0:e7:6a:59:09:
98:09:2c:ea:d6:67:e3:f8:96:e7:40:bc:8f:53:6c:
4b:69:49:b7:8f:2e:8a:6e:7d:62:77:79:a2:e8:62:
43:16:01:8a:f4:2e:dd:90:7c:5a:b6:f2:44:15:6d:
0a:b3:89:af:14:d2:45:cb:35:99:e8:bd:fc:fc:58:
91:b1:78:3c:83:4b:e1:df:fc:20:46:31:53:a0:c2:
ec:ca:cf:0b:4e:b0:42:05:8f:e4:b6:9b:6f:48:3b:
e7:6a:e5:fd:91:b7:c6:24:21:28:da:6d:c1:fe:be:
38:01:77:6a:45:80:a1:78:2d:ee:05:cd:ab:ca:0e:
e7:10:df:af:33:03:1d:99:49:5a:36:05:7d:4a:3c:
3c:70:37:16:a0:9e:8a:39:df:d8:80:27:68:f8:ca:
b9:fa:0e:e7:40:52:d4:9e:bc:77:5f:e6:de:a0:38:
f6:3f:f4:00:71:76:b7:80:52:05:1f:5f:bd:bc:8e:
d5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:16:5B:95:21:47:6E:6E:12:3E:B1:34:98:20:37:44:64:43:CE:F0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PxZblSFHbm4SPrE0mCA3RGRDzvA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:85:9a:25:09:d9:2e:96:ba:cb:d5:aa:d7:bf:47:45:cb:e8:
02:7c:d5:23:b5:b3:ed:8a:d4:a1:4d:89:d7:8e:df:0c:6c:d6:
c9:77:44:86:99:57:ed:99:e3:89:4e:2f:ee:3c:89:44:a8:8e:
63:54:7a:02:99:2d:b6:b7:28:f4:f6:00:7a:64:48:21:ba:63:
e1:c4:37:16:62:65:11:95:4f:95:9c:b1:12:0f:19:c1:86:44:
9a:e0:15:8e:f4:0b:e9:a0:c6:ed:61:e5:50:d1:d9:e1:86:f8:
31:ff:8f:fa:4e:15:7d:56:e2:71:20:12:9a:72:d7:7f:0b:6b:
19:26:da:0f:98:96:a4:54:0a:77:ec:45:1d:f2:1f:4a:b2:9a:
ec:01:d5:58:e6:49:26:f3:81:e2:ce:3b:e5:c4:4e:98:d4:55:
2d:22:bc:33:27:8c:ea:31:cd:35:88:84:23:73:be:21:74:40:
1e:82:eb:4f:d8:4f:fa:62:2f:4b:c6:fc:c7:9c:6f:ce:ac:72:
40:b1:7c:a6:74:19:8d:27:02:a2:41:dc:7d:b0:96:1b:11:11:
ad:d2:e8:cd:58:c9:87:a4:e4:d4:3d:92:74:23:9c:5a:58:98:
5b:cb:54:39:ab:9f:fb:61:71:4c:bd:a6:5d:a5:ae:20:8c:fb:
b8:92:68:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 16:17:24 2025 by rpki-client