Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ZjcizSghFb6QK0drCsN35ucxd2s.roa
File: ZjcizSghFb6QK0drCsN35ucxd2s.roa (raw, json)
Hash identifier: YgX1o/QwM09ua1cPod9HJwjUQA4w9CQymi4IupvLBbk=
Subject key identifier: 66:37:22:CD:28:21:15:BE:90:2B:47:6B:0A:C3:77:E6:E7:31:77:6B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: CD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZjcizSghFb6QK0drCsN35ucxd2s.roa
Signing time: Thu 08 May 2025 03:37:40 +0000
ROA not before: Thu 08 May 2025 03:37:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 03:37:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=663722CD282115BE902B476B0AC377E6E731776B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:75:c9:90:9d:4c:8d:8d:11:b5:f3:78:18:
e7:f4:74:e7:88:87:4c:a1:db:94:4b:ff:9f:9b:bb:
20:2b:b4:a4:9e:17:29:82:d5:78:95:d6:72:26:c2:
b6:ce:35:25:a8:6c:1f:cb:0c:3e:91:80:1b:db:da:
9a:0a:4c:df:4a:c1:e5:38:fb:aa:c4:a0:cc:92:62:
ca:f1:6c:11:10:55:a5:d4:e4:7b:0d:ba:6b:dc:46:
27:d8:20:3b:35:13:dc:38:7e:41:87:2f:2a:be:fb:
6a:11:16:91:0f:1b:c4:2e:af:cb:c5:21:26:1f:92:
44:28:5c:ef:89:d8:43:4f:80:ea:f8:75:e5:c4:14:
3f:e9:10:16:8b:5e:fa:9d:36:3d:b3:62:62:09:d2:
03:be:63:ae:12:13:66:c8:ba:b5:be:31:fa:8d:80:
1c:f7:c9:d8:65:a3:f4:96:90:f4:1a:ae:d4:08:9e:
a7:9b:f6:5f:a5:3d:2a:11:ce:6d:e3:98:a3:c5:f7:
46:98:b3:c8:4f:e3:df:d5:4d:25:fb:66:eb:0d:29:
64:8c:14:cd:20:52:23:d7:46:35:4b:87:12:70:d4:
ce:cf:ed:f8:2e:78:91:48:ce:4c:9d:71:76:5c:ac:
7a:da:fe:71:5c:09:57:56:9d:3e:a7:fa:e1:a3:3b:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:37:22:CD:28:21:15:BE:90:2B:47:6B:0A:C3:77:E6:E7:31:77:6B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZjcizSghFb6QK0drCsN35ucxd2s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:49:9a:ed:a0:38:ac:95:de:8a:6c:57:5e:39:4d:7c:da:e3:
62:b1:b8:3f:87:6b:85:01:3e:e5:14:fc:d7:d8:d1:81:35:6f:
cb:f8:f0:2e:e4:5b:a1:1b:70:88:dd:8f:02:43:b5:78:9a:d4:
e2:ff:e4:c4:84:12:a0:d7:6f:14:b3:67:75:69:b7:46:25:a9:
92:0b:92:3e:4b:30:94:7b:84:ff:e0:0f:c5:10:72:9f:3f:ad:
ac:ed:25:92:93:0a:3b:0d:15:f8:6a:2e:cb:8d:46:7f:2c:c2:
47:ac:b2:73:24:7f:7f:61:27:68:46:e5:cb:0d:b4:b0:d7:ed:
b6:89:dd:c7:f5:b7:7d:e4:50:68:7f:7e:53:a4:8e:36:74:fa:
90:53:c8:94:f0:bc:97:3a:7e:bd:15:3e:d2:50:e6:78:60:f1:
ec:2f:a3:5f:f2:c0:2e:3f:03:50:6a:f1:e8:40:c4:29:3a:fc:
75:6a:c2:db:0b:5b:2b:3d:28:91:d9:8f:d7:42:e2:cc:b3:4a:
3a:47:7b:1a:c3:90:ab:53:fd:69:30:7b:4b:63:01:82:78:cf:
95:65:9d:97:ae:a1:61:f5:49:3e:59:e1:84:72:ad:05:11:48:
cf:fc:80:43:27:db:de:fd:e6:d2:64:23:51:e0:f1:4c:17:5c:
fe:8e:b2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:48:47 2025 by rpki-client