Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/WZap1Lhj49V9f8Sh81F8CdF2kIE.roa
File: WZap1Lhj49V9f8Sh81F8CdF2kIE.roa (raw, json)
Hash identifier: mkxW/9c4Bc5nTT0d1U59D1vHl9eEDH8WBzC2N0e+FUM=
Subject key identifier: 59:96:A9:D4:B8:63:E3:D5:7D:7F:C4:A1:F3:51:7C:09:D1:76:90:81
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0445
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WZap1Lhj49V9f8Sh81F8CdF2kIE.roa
Signing time: Mon 12 May 2025 18:38:06 +0000
ROA not before: Mon 12 May 2025 18:38:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1093 (0x445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 18:38:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5996A9D4B863E3D57D7FC4A1F3517C09D1769081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d2:d7:c4:ac:b0:2c:be:e9:d6:4a:7c:98:94:
4f:a6:67:92:c6:e9:da:f8:72:9e:ff:31:74:19:d7:
a0:d4:3d:e0:b7:18:fe:8c:11:15:bb:e3:50:1e:f2:
86:3b:39:96:85:b4:ad:85:51:85:47:54:8a:75:64:
75:5b:b9:76:c2:dc:bf:38:1a:fb:a9:39:74:c5:c4:
14:0b:67:bc:1d:57:f6:16:5f:93:4c:98:5f:a2:5f:
09:91:63:6c:b2:e3:8c:b9:95:02:9e:f3:eb:2c:05:
46:41:0d:46:3a:36:63:51:ed:d0:f5:cd:93:3a:dc:
a0:c7:2c:e4:8d:d0:16:b0:89:7d:a5:83:7e:cd:a0:
3a:56:cd:a2:bc:55:ba:30:8e:eb:0d:2b:d8:08:17:
55:bc:4e:d3:30:1f:42:8c:99:5b:f9:08:5c:54:09:
2e:a9:55:1f:e6:78:87:f4:a3:46:94:fe:df:62:9f:
6d:19:70:cd:f0:6a:4e:3a:23:41:30:85:ad:09:81:
08:47:ac:9f:67:7b:69:51:80:b3:76:5f:69:8f:56:
1a:8e:71:c0:57:86:96:6f:08:d3:76:13:01:c4:5e:
fe:86:c1:bd:bd:68:ce:a6:c0:9c:b4:92:63:05:bc:
2b:c6:28:bf:3c:db:75:27:f7:46:a3:98:d8:35:81:
eb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:96:A9:D4:B8:63:E3:D5:7D:7F:C4:A1:F3:51:7C:09:D1:76:90:81
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WZap1Lhj49V9f8Sh81F8CdF2kIE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
79:9f:c1:35:eb:fc:95:a4:36:ea:08:60:65:cb:1b:10:53:9c:
ce:bb:76:2b:c6:35:9d:c9:07:39:1e:af:ce:95:a4:1f:0f:21:
be:22:26:75:fe:d5:f3:bf:a0:3e:e4:77:07:8e:5a:44:a5:05:
18:1a:d6:8c:55:0b:b5:48:db:50:46:ad:5d:b1:fe:f4:46:bb:
b5:50:ff:76:e5:84:1a:ec:4e:79:6a:a3:99:a5:16:c2:98:7b:
8c:b9:41:84:5b:16:dc:b7:13:46:3b:cc:39:1b:17:69:8e:73:
d4:76:e7:7c:1f:f5:ad:19:be:6f:ec:73:25:e8:7a:9c:5e:fc:
c0:be:c3:ab:4f:6c:1d:e2:c0:cd:83:64:70:14:2f:28:b9:83:
78:f9:79:81:16:e9:52:95:49:9b:f7:1a:f3:fb:b8:eb:6b:50:
41:76:8f:d6:da:3b:0b:c4:4d:0a:cc:b7:21:10:c1:05:eb:b2:
cc:68:c8:5e:89:8f:10:eb:57:a1:4f:0f:fe:10:0c:96:49:39:
60:2a:75:08:6a:34:99:12:76:38:07:1d:c6:bf:ed:85:3a:5e:
aa:a4:94:c3:15:11:f2:87:46:6f:4f:d4:cb:b6:0e:2d:4a:5e:
d7:b4:c2:12:21:ca:70:7d:d6:b8:bf:59:d3:ce:46:62:a9:44:
4e:65:cf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:37:56 2025 by rpki-client