Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/WktWL0PdyJaCVQbIJoc7bpe0_ew.roa
File: WktWL0PdyJaCVQbIJoc7bpe0_ew.roa (raw, json)
Hash identifier: R0jkTlH5Osp9Tmqd4vHk+iLtnVzAzdULaUVJadpCqC4=
Subject key identifier: 5A:4B:56:2F:43:DD:C8:96:82:55:06:C8:26:87:3B:6E:97:B4:FD:EC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 054D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WktWL0PdyJaCVQbIJoc7bpe0_ew.roa
Signing time: Wed 14 May 2025 03:38:01 +0000
ROA not before: Wed 14 May 2025 03:38:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357 (0x54d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 03:38:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5A4B562F43DDC896825506C826873B6E97B4FDEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:77:2e:b2:df:e4:2f:a6:95:0b:ba:56:62:
02:48:85:aa:82:69:60:c0:bc:62:61:67:66:e7:9a:
e3:0b:b7:da:4b:2f:ad:a4:7f:85:c9:7b:39:1d:27:
4e:15:6f:a7:32:59:57:b5:b4:19:b0:4c:1b:f6:94:
6b:87:4c:4b:07:06:b8:d3:21:3c:cf:c3:7f:27:e9:
a3:3b:93:f6:b9:c3:e8:cc:91:ea:80:06:13:2f:53:
70:ec:ac:1c:0c:de:ff:bc:c3:f7:6e:30:3a:6f:96:
38:c4:c5:25:f4:ec:00:fc:71:16:fe:8e:85:97:99:
e2:2c:67:cb:f2:11:4b:b1:48:56:5c:0a:41:a8:b1:
cd:4f:b6:ff:b7:80:40:6f:4d:d1:de:84:e7:1a:e4:
0a:12:9c:d7:c1:02:65:0b:92:86:35:30:74:38:13:
7a:d8:ae:d9:f1:fc:8d:b0:c9:29:f0:1c:3b:a5:ed:
5c:ec:ec:e4:5a:9b:4a:be:15:83:f5:5e:bd:f6:7a:
ce:95:f5:83:ed:36:c4:1c:1c:f2:11:3e:44:fd:73:
e5:1a:24:08:79:e7:f8:61:ef:56:c4:ce:2b:25:d4:
f1:94:5e:27:a1:b6:a2:f6:f4:0b:e5:06:32:e8:0d:
d0:fc:a3:a4:29:8e:16:7e:6c:ce:22:48:76:a7:ed:
05:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4B:56:2F:43:DD:C8:96:82:55:06:C8:26:87:3B:6E:97:B4:FD:EC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WktWL0PdyJaCVQbIJoc7bpe0_ew.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:09:62:83:00:98:97:ed:c7:89:1e:1f:b8:4e:8e:45:99:14:
d9:9b:54:af:10:5f:84:83:48:23:5a:97:e3:88:ed:45:9c:fa:
0b:e5:4d:a8:b3:90:c4:62:3a:5c:e6:ce:c7:b6:a1:b6:65:4e:
49:95:9d:df:b0:e6:44:fb:d2:fe:2e:1e:3c:9f:fe:2c:87:33:
45:4c:03:34:fb:dc:50:b0:d3:9e:c7:99:8c:55:c3:69:2f:bb:
14:eb:7d:c2:81:f2:84:4e:42:29:d4:c2:90:a7:61:b3:73:af:
8f:e1:62:11:56:63:f9:71:5b:5b:bc:59:b0:88:34:4d:97:6f:
54:81:24:ae:2d:45:6d:6f:f7:a6:0f:f9:4b:d7:6c:d4:26:cb:
9e:c4:fa:3d:3c:90:a2:fc:3f:dd:52:3f:4d:cd:f3:d5:a3:f5:
32:82:d1:67:7e:83:1a:f6:6f:d2:2e:53:e6:47:a2:c1:ae:3b:
45:ac:04:02:ec:ef:92:30:d7:29:b8:96:0e:f9:d2:34:91:1f:
09:1d:f4:39:8b:32:36:26:a7:af:68:f6:16:41:42:23:69:17:
ec:bc:41:2d:ba:9d:f1:8e:55:a4:3c:48:44:7e:a3:4d:65:19:
ae:60:f7:aa:a0:39:24:ef:1b:1d:d8:5a:73:55:b8:5a:8c:97:
ce:4e:7c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:07:42 2025 by rpki-client