Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/WXNVNWo_hcirM5Z3_Cpvas275IU.roa
File: WXNVNWo_hcirM5Z3_Cpvas275IU.roa (raw, json)
Hash identifier: Aw6M7rl4QBmAvYZ66PtLBq9F7h1YgdXtEgJvNaIRs8g=
Subject key identifier: 59:73:55:35:6A:3F:85:C8:AB:33:96:77:FC:2A:6F:6A:CD:BB:E4:85
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 05F5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WXNVNWo_hcirM5Z3_Cpvas275IU.roa
Signing time: Thu 15 May 2025 00:38:29 +0000
ROA not before: Thu 15 May 2025 00:38:29 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1525 (0x5f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 00:38:29 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=597355356A3F85C8AB339677FC2A6F6ACDBBE485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:7b:87:f3:d5:de:af:4e:0c:ed:94:53:39:
cb:38:0e:46:3d:e8:95:72:4e:7e:12:71:8a:c2:37:
28:b9:1f:cb:1a:69:bb:35:9d:8e:70:0a:ef:e3:7e:
de:db:6b:db:32:b8:c0:0e:eb:9e:a7:87:1c:b6:48:
32:9c:80:d8:0f:4a:d7:2b:de:36:53:25:71:92:dc:
e0:5d:df:47:22:30:b0:f5:94:89:6b:db:76:1a:b3:
ff:a5:50:c4:51:b6:ca:2d:c4:ab:e2:d4:d3:61:b2:
94:f4:71:98:6e:63:c3:91:8c:93:e3:71:f5:f8:1e:
90:c2:91:84:fe:05:af:0e:83:28:df:fd:5c:7d:5c:
ec:48:6f:36:19:7a:12:d2:02:1f:e9:16:61:dd:54:
ee:7a:f9:0f:89:1f:0e:2e:05:b9:72:5f:a0:bd:14:
f4:23:3e:b3:01:2f:6f:17:53:64:de:e4:d3:a7:7b:
05:66:cd:7b:93:db:b2:ba:78:72:8c:d7:36:7b:56:
d9:91:d9:8a:39:b2:03:48:54:90:61:fa:8d:d8:5d:
25:90:47:3a:ec:71:01:c2:84:e3:c7:ce:0a:69:da:
76:e6:d2:c2:34:13:d2:4c:49:95:55:d2:a4:bf:21:
65:65:6f:98:a1:35:27:75:9b:ad:dc:ba:a1:c9:3a:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:73:55:35:6A:3F:85:C8:AB:33:96:77:FC:2A:6F:6A:CD:BB:E4:85
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WXNVNWo_hcirM5Z3_Cpvas275IU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:28:7a:63:99:d7:cb:06:fc:98:62:f4:83:82:75:8f:ad:b2:
cd:cf:0f:f8:77:74:ba:cd:80:4d:bf:7e:d2:02:b2:4b:1e:19:
01:f1:82:b1:14:77:9a:33:17:43:c1:93:35:ce:49:10:17:bb:
e5:9c:58:b3:cc:df:3e:78:f7:d2:cd:18:fa:05:b4:8e:65:69:
73:09:a4:b4:9b:83:40:ba:7f:33:e5:55:66:ce:95:59:c4:53:
28:2e:a0:2a:39:70:f6:aa:13:6c:71:20:f3:40:8f:c8:4c:62:
d5:23:30:0e:04:e9:eb:91:f0:71:b0:d6:9d:bc:e5:86:8c:df:
dd:6d:d6:87:40:24:04:ad:cb:40:87:cb:8a:2f:bb:40:ab:d0:
80:87:fe:f9:e8:55:dd:2c:88:4a:6b:9b:75:d5:77:f6:4d:15:
6f:dc:60:b6:2d:d6:fe:f5:2d:06:f2:07:37:4a:69:07:f6:e8:
b7:a3:ec:de:96:35:2d:c7:ee:5f:8b:53:96:0d:d8:e2:44:7d:
26:a5:8d:70:f0:26:53:65:fa:9c:9f:62:e5:c3:d4:3a:23:b3:
ee:b1:6d:2b:af:4a:25:a1:b8:e8:07:a3:af:b0:87:83:a6:fb:
86:cf:0f:a3:80:20:1e:ed:4b:68:3d:cb:13:d8:d4:43:23:4c:
c7:30:04:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:58:49 2025 by rpki-client