Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/QTC-WS_J5FI9i5H6nrWnBJD_EVE.roa
File: QTC-WS_J5FI9i5H6nrWnBJD_EVE.roa (raw, json)
Hash identifier: ldjRxyErYfKhnLBMOEYGC1aHRtyADD+VMUXr6eTUNJw=
Subject key identifier: 41:30:BE:59:2F:C9:E4:52:3D:8B:91:FA:9E:B5:A7:04:90:FF:11:51
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 02B9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QTC-WS_J5FI9i5H6nrWnBJD_EVE.roa
Signing time: Sat 10 May 2025 17:07:55 +0000
ROA not before: Sat 10 May 2025 17:07:55 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697 (0x2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 17:07:55 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4130BE592FC9E4523D8B91FA9EB5A70490FF1151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:a7:35:31:2b:5a:29:62:eb:1c:c6:95:33:
60:e0:59:3f:cf:68:ed:fe:1f:a3:dc:fd:70:2a:16:
8c:37:31:fa:55:bc:45:95:d1:5a:50:78:61:ad:7a:
1a:5d:2d:7c:f9:f5:79:32:48:32:10:b4:fd:3c:fc:
cf:94:a5:7c:15:1a:7f:3d:c1:d7:27:2a:89:57:bb:
fe:ec:ad:ed:14:89:6f:72:93:0c:7c:63:9b:34:a1:
67:98:29:05:b5:ee:a3:a6:d9:d4:4b:a5:23:77:0b:
34:c0:85:09:c9:3a:62:32:5c:6d:44:ba:98:41:a3:
27:9d:5b:f0:06:ee:29:36:7a:3e:13:af:71:a9:12:
6b:29:7b:8f:96:b7:4a:7a:be:ac:88:e1:f8:c5:63:
10:95:89:a4:03:a5:4c:9d:c6:e0:88:b1:f8:ba:46:
d1:5d:4b:3d:81:0f:6f:fc:64:be:51:91:8b:f8:d6:
08:d3:e3:d6:7a:76:0e:7e:42:f0:0c:2f:7d:19:96:
43:b8:81:b4:ec:b6:4d:fb:2d:c9:32:90:fe:d0:84:
69:81:6d:6e:6e:94:45:57:26:03:73:43:7b:45:da:
d8:ca:ef:89:f3:79:10:38:ea:eb:d5:54:d6:ff:3c:
b7:66:48:72:83:eb:54:1f:5e:70:60:f6:9a:8b:21:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:30:BE:59:2F:C9:E4:52:3D:8B:91:FA:9E:B5:A7:04:90:FF:11:51
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QTC-WS_J5FI9i5H6nrWnBJD_EVE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:65:a8:b9:82:f6:df:18:76:be:09:f3:ec:94:c5:7e:30:28:
bf:30:d1:4a:aa:fe:6f:7b:3d:09:d1:93:9f:56:13:1a:aa:b4:
e0:50:05:8d:bf:90:ac:f9:dd:6b:2b:08:7d:ef:6a:1f:7a:99:
43:88:eb:ca:75:0d:e6:81:2b:af:4b:0d:d5:a9:53:1e:4a:10:
81:1f:99:16:25:54:e3:0d:a2:d6:f7:1c:5b:a7:e3:3d:b9:fb:
5b:9b:10:b2:93:83:88:b4:60:bd:96:c8:0f:65:81:0b:5e:23:
dc:9c:16:d4:5a:ca:ff:5a:39:ad:dd:83:56:41:3d:8e:65:9b:
b3:16:d0:00:70:16:82:d4:69:b9:b4:d6:1d:2c:8f:68:72:b3:
76:6f:a3:d1:fe:78:b4:7e:0c:6f:e4:68:61:b0:5d:61:f0:b4:
0e:41:1c:70:78:94:4a:ad:93:c8:51:d1:71:11:87:56:6a:e0:
57:9c:91:09:f7:e7:31:79:e6:2b:84:53:f4:fe:f7:7c:cb:16:
08:d3:26:07:26:5e:51:6d:a4:6a:41:7f:20:db:a4:4e:43:f5:
ee:a7:ff:69:83:c3:d8:fc:84:a4:68:21:9c:a3:07:54:df:b7:
22:75:fe:fa:01:9e:91:a6:45:a8:fc:83:6a:92:a1:56:82:3e:
a0:c8:fb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:39:22 2025 by rpki-client