
Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/RMCayG9eBKb6uyO3lvl0cwPeQsI.roa
File: RMCayG9eBKb6uyO3lvl0cwPeQsI.roa (raw, json)
Hash identifier: jo9l+cKxhr3RwttnhI+bmdnOYrBBXCrfFLwFMAgtMcE=
Subject key identifier: 44:C0:9A:C8:6F:5E:04:A6:FA:BB:23:B7:96:F9:74:73:03:DE:42:C2
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: DD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RMCayG9eBKb6uyO3lvl0cwPeQsI.roa
Signing time: Thu 08 May 2025 05:37:40 +0000
ROA not before: Thu 08 May 2025 05:37:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 05:37:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=44C09AC86F5E04A6FABB23B796F9747303DE42C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:46:9e:3b:1b:f8:e7:33:02:da:7d:f0:b7:
01:fc:17:0d:20:83:cc:d2:0c:d4:d4:7d:e5:8b:ab:
e1:63:e1:9c:3b:f4:c8:4f:87:31:68:46:d9:9c:a8:
22:a5:b5:28:ad:71:79:78:27:b0:f2:79:3e:99:f0:
ec:ac:19:91:d1:10:5c:38:e3:ff:f7:28:ed:d9:9e:
ca:6f:5d:db:3b:85:ec:2e:bd:1e:47:95:f3:60:ba:
05:9c:0c:e3:6f:3b:b9:53:a2:1c:ec:62:b0:b1:d5:
e2:c4:d6:03:20:3d:2f:c4:82:9a:24:97:d5:19:bc:
8b:69:cd:cb:11:e4:0f:0f:5e:f6:f5:19:3b:2f:e7:
dc:87:d1:f0:d7:b9:b4:c7:14:e5:ff:79:29:48:ea:
ac:1a:be:8e:3e:7a:b0:9b:4f:46:88:5c:f7:9f:0d:
8a:36:cd:1a:27:24:38:62:26:91:d0:28:50:4e:e6:
e3:90:55:a0:a8:3b:3b:c8:e8:57:34:3b:5a:81:18:
e7:d6:97:71:ce:cf:1f:68:18:29:ba:97:89:12:8e:
ee:26:3e:5e:c2:ef:4c:f9:27:ab:37:2b:a4:7f:1b:
87:cd:02:0b:3b:67:e9:2b:8c:2a:cd:e4:d3:00:b5:
aa:1e:df:84:9d:fc:e7:c2:2c:3e:71:27:48:6d:e9:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C0:9A:C8:6F:5E:04:A6:FA:BB:23:B7:96:F9:74:73:03:DE:42:C2
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RMCayG9eBKb6uyO3lvl0cwPeQsI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:ff:41:1d:2e:6b:28:ae:44:b2:58:fb:2b:08:a3:72:7e:96:
54:6b:4f:72:c3:d1:b3:9a:56:2d:b7:a8:9d:88:fb:b1:6a:a3:
7d:e3:d8:7a:39:71:46:61:33:4e:e7:f1:c2:34:56:8e:4c:4f:
76:03:c3:54:5b:87:07:19:9a:00:76:e4:b5:67:a0:96:4f:ac:
8e:4d:7c:78:8b:1f:fd:d8:ff:0b:b3:9d:34:48:1e:8c:a9:e6:
90:cd:b6:4d:e6:31:cc:3d:65:a3:1e:71:62:65:dc:5a:cc:0e:
60:13:bc:7e:c6:1a:bd:83:78:ea:b8:27:7c:23:24:31:44:d0:
f4:d9:b0:1f:e1:ba:6b:72:dc:cc:c3:0a:8e:60:c3:a3:f2:13:
a3:83:00:84:23:ff:c8:75:9e:22:ba:25:f5:7e:bd:d7:6c:58:
ea:c4:f2:b7:1d:ce:18:90:91:49:ee:25:1d:63:5b:bc:a1:ba:
a0:87:48:85:01:fc:93:80:49:7a:7d:97:97:86:d5:ae:ca:b1:
e5:42:5a:6a:eb:89:b7:51:d6:eb:49:b1:91:49:6f:49:69:f6:
81:55:1f:21:1a:df:7a:89:8f:31:99:90:9f:34:62:68:95:87:
30:17:c8:66:40:f9:2a:66:a9:1b:39:70:7f:42:09:cc:16:9a:
8a:94:35:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:59:40 2025 by rpki-client