Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/T2funjigo_L_pDPjk4hhSBeXfZ8.roa
File: T2funjigo_L_pDPjk4hhSBeXfZ8.roa (raw, json)
Hash identifier: b0vJgem8QfPgTd4Q/+pcNA9EsUDluZ+I0PWKrxikiJM=
Subject key identifier: 4F:67:EE:9E:38:A0:A3:F2:FF:A4:33:E3:93:88:61:48:17:97:7D:9F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04D1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/T2funjigo_L_pDPjk4hhSBeXfZ8.roa
Signing time: Tue 13 May 2025 12:07:58 +0000
ROA not before: Tue 13 May 2025 12:07:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1233 (0x4d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 12:07:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4F67EE9E38A0A3F2FFA433E39388614817977D9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4b:61:7a:b2:e4:35:76:6a:35:07:82:fe:a9:
94:73:16:be:87:80:78:be:9c:8b:cb:38:55:48:8d:
06:fa:56:72:5a:31:07:5d:55:b7:3a:2a:2c:77:2a:
78:ab:bf:c3:6e:05:0f:50:bd:d1:d8:ca:9b:66:04:
f3:e3:69:15:3d:1a:8f:5f:ca:0a:78:9a:f6:49:8a:
93:22:e3:00:f5:39:c8:50:cf:64:59:b5:72:ed:d9:
5c:bc:e4:5a:36:0e:04:3d:9a:94:97:84:47:32:03:
b4:1b:2d:7c:7e:de:63:fe:bd:dd:13:19:4c:3d:d8:
f7:57:05:70:fd:38:a0:54:01:17:4d:f2:b1:11:10:
f4:66:61:32:a1:3b:35:84:3b:85:45:80:cf:62:70:
e6:f9:68:69:14:ad:db:4c:5f:4f:23:48:d7:20:60:
7f:54:09:46:58:06:eb:69:ba:44:62:63:bd:ee:22:
4f:f0:c3:ed:cc:0e:d6:73:00:9e:08:e0:e9:88:8f:
d2:17:e6:11:2c:b4:b9:95:04:46:f0:9d:02:1f:b6:
6d:bf:04:c9:49:bc:37:d7:27:a4:27:a4:4c:a2:80:
23:1b:2d:25:27:ea:35:a8:66:9f:c8:33:f8:b8:3c:
00:8e:71:fa:50:78:ef:b9:b7:11:13:51:6d:fc:dd:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:67:EE:9E:38:A0:A3:F2:FF:A4:33:E3:93:88:61:48:17:97:7D:9F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/T2funjigo_L_pDPjk4hhSBeXfZ8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:96:07:d5:c6:ea:2d:b5:f1:e0:0b:7c:14:9f:ae:f3:a1:85:
6a:a0:b9:da:4b:2b:c9:f5:a3:1c:ac:3e:df:d9:b7:80:6d:56:
b0:54:37:32:f8:4e:bf:11:43:57:58:e6:d3:e2:f3:3d:97:bc:
ed:cb:47:96:2b:be:af:3f:a2:58:99:5f:56:79:c9:64:b6:06:
3d:cc:5e:e4:f9:b4:b3:a5:5c:db:97:56:a0:e3:65:59:55:bb:
d2:5d:65:9f:bf:f7:c9:d4:52:95:4d:85:e7:aa:bd:e7:e2:5a:
38:63:59:d1:72:b3:1d:df:78:6e:ed:94:b6:62:e3:73:0b:fa:
78:2e:60:e8:25:f3:91:d9:3f:fa:e1:ba:53:b3:f1:b6:a1:bb:
38:28:93:24:82:5a:75:e3:93:1d:52:9d:47:6d:fe:d7:47:4a:
6c:21:84:80:43:12:99:79:91:e8:fa:9d:ad:b6:83:d3:b5:cc:
fe:0a:53:46:84:f4:3b:bd:db:67:e9:5b:27:4d:32:c5:e3:ba:
9d:41:24:f5:f5:87:90:a4:5b:19:3b:2b:6c:16:c1:20:14:ff:
26:b2:6e:bc:4c:39:f1:60:b1:fc:dd:72:f1:f5:d0:1b:e8:78:
c0:9e:59:8c:de:12:d3:98:ca:6b:d1:3a:98:b5:1c:6d:f0:c2:
12:cc:51:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:49:46 2025 by rpki-client