Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Zvb5MJzHgaGWs_9b9VOoc8QSzDY.roa
File: Zvb5MJzHgaGWs_9b9VOoc8QSzDY.roa (raw, json)
Hash identifier: ACurL2QQhnRPPAJMfeFwdkEDfHS4BuUmfxIXjH4Td60=
Subject key identifier: 66:F6:F9:30:9C:C7:81:A1:96:B3:FF:5B:F5:53:A8:73:C4:12:CC:36
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 041D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Zvb5MJzHgaGWs_9b9VOoc8QSzDY.roa
Signing time: Mon 12 May 2025 13:38:04 +0000
ROA not before: Mon 12 May 2025 13:38:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1053 (0x41d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 13:38:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=66F6F9309CC781A196B3FF5BF553A873C412CC36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a0:79:4c:a4:3c:33:8c:df:80:e0:eb:63:1c:
79:95:65:5d:58:c4:28:e8:6b:54:8b:72:1f:f2:5a:
d6:41:96:bd:39:21:94:54:2f:fe:78:2a:14:43:dd:
a8:21:7c:a0:53:fd:40:ce:5c:5d:b7:d2:93:c4:e1:
56:f7:41:e2:f0:5f:0f:11:5a:e7:1f:b7:d3:e8:b7:
70:b6:4c:a2:9d:05:01:6c:51:ad:fb:99:34:8f:c9:
aa:f4:74:cb:34:84:f6:b5:4e:6f:df:97:01:5e:f6:
fb:2b:4a:c8:b8:2e:0f:c3:79:af:d7:cb:28:80:0e:
2e:79:7c:75:15:ba:ef:73:69:46:3e:88:ae:0c:14:
d6:80:78:88:c3:77:0b:f8:60:e4:66:e8:9c:bf:07:
21:50:bc:ad:09:dd:bd:0c:40:0e:65:c6:03:69:52:
9d:ab:1b:38:f1:10:ad:54:cc:27:2c:3f:d0:ec:d0:
df:74:aa:4d:6a:fd:58:28:5d:ef:cd:aa:6f:fd:22:
77:e5:7f:e0:15:f8:12:d6:fa:94:7d:ee:14:67:35:
ec:91:6c:da:b0:60:a3:69:c6:d1:3b:83:1c:45:a2:
96:ec:1b:0e:d5:f2:b8:06:48:16:e8:bc:a7:e9:ff:
4e:fd:6d:7f:4c:dc:51:2a:68:5e:0e:35:f4:c5:d1:
8b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F6:F9:30:9C:C7:81:A1:96:B3:FF:5B:F5:53:A8:73:C4:12:CC:36
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Zvb5MJzHgaGWs_9b9VOoc8QSzDY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:d4:dc:56:48:6e:fe:41:0d:70:15:38:03:b0:51:13:36:d4:
15:94:c0:39:19:49:01:df:c9:01:0d:00:e2:17:da:db:d7:16:
5c:30:8a:13:3a:8b:ca:a6:ec:38:eb:22:91:41:0f:64:a0:c3:
04:2b:b5:33:69:15:26:5d:af:c8:01:4c:2d:a1:c1:7c:c0:5c:
b5:35:b2:fb:65:71:6a:9c:2a:63:d0:3b:78:58:bf:4b:66:dc:
f0:e3:80:0e:69:00:38:5c:2c:74:e2:e7:10:73:a6:ff:2c:ed:
d7:5c:d6:d3:56:9a:93:0d:c8:91:bd:a8:6e:db:8b:c9:ef:1e:
91:96:0e:a0:3c:44:95:1f:54:ba:d0:1e:31:b0:69:91:bc:64:
f3:ea:2c:da:7d:c5:1b:5a:cd:47:2c:e2:be:12:a4:e2:c6:e5:
05:0a:7a:49:a4:77:cf:f2:e4:2b:7a:96:d8:d8:dd:e5:64:ff:
17:f1:d2:bb:6c:0e:e3:bb:a6:48:35:c4:61:ca:b8:e1:0b:dd:
93:28:04:6b:c4:ed:45:7a:88:2d:d2:b7:7b:11:b5:1d:dc:87:
9c:12:6d:2b:3e:1c:89:52:da:82:00:09:9f:c4:d2:c1:35:d9:
39:6a:5d:94:7d:71:92:dd:6b:ea:0d:6f:80:d9:22:f5:71:a4:
bd:70:33:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:32:32 2025 by rpki-client