Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/d7Vs1uZZZJ9-JeoWND5hjIqeg7Y.roa
File: d7Vs1uZZZJ9-JeoWND5hjIqeg7Y.roa (raw, json)
Hash identifier: F/xdY3vI5IJY72lwEERuyjl59Mxved2X4xqhOgSdfTY=
Subject key identifier: 77:B5:6C:D6:E6:59:64:9F:7E:25:EA:16:34:3E:61:8C:8A:9E:83:B6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03E5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/d7Vs1uZZZJ9-JeoWND5hjIqeg7Y.roa
Signing time: Mon 12 May 2025 06:37:55 +0000
ROA not before: Mon 12 May 2025 06:37:55 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 997 (0x3e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 06:37:55 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=77B56CD6E659649F7E25EA16343E618C8A9E83B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:4d:ca:4b:a4:e1:b6:c0:5c:81:b2:0f:ad:
a7:04:c9:3e:aa:d0:33:bf:10:c9:00:af:0b:34:92:
4f:05:07:33:28:18:be:50:d6:4d:c3:58:51:f6:d1:
7c:a4:cb:86:7c:94:c3:0e:06:f2:28:35:af:04:a9:
db:5b:f4:cc:7b:63:1c:ae:31:ed:d3:29:92:e8:61:
5d:ee:f0:98:47:96:80:a2:c7:51:0a:1d:1e:a0:dd:
c1:02:ad:5b:ab:bd:3a:58:3d:6e:4e:63:ac:f4:7e:
41:f4:60:2b:20:b5:9f:d4:92:76:fa:ff:eb:48:fc:
6e:8b:73:35:a7:db:7c:c6:6d:5a:46:22:29:3d:da:
c2:49:db:d2:f9:86:e6:09:e2:b7:63:81:18:77:a9:
43:84:2e:02:3c:ab:5b:bc:d0:8e:65:8b:fa:35:c2:
0a:9d:3f:54:06:31:95:d2:ad:fa:6c:3b:2c:81:ee:
f3:50:77:bc:b9:6b:5e:6f:80:ff:fb:a2:0f:b8:82:
9e:55:3d:c0:2c:08:92:a7:e7:15:32:59:2a:e1:a6:
ab:30:8d:37:4b:38:e0:78:71:00:37:c1:4e:21:89:
f3:53:97:c4:7d:d3:af:06:74:2c:09:3e:c6:78:a1:
87:a3:0b:9a:f1:59:94:b9:01:ae:97:e8:9b:7d:d8:
b1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B5:6C:D6:E6:59:64:9F:7E:25:EA:16:34:3E:61:8C:8A:9E:83:B6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/d7Vs1uZZZJ9-JeoWND5hjIqeg7Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:7d:89:5c:66:2c:18:ab:b4:bc:25:73:a3:72:e9:78:a0:59:
05:cb:7f:13:8f:51:48:b7:a5:34:bd:2f:38:88:02:5a:2e:a4:
12:e9:88:f7:79:53:81:fd:b1:05:de:a3:61:27:33:73:d5:32:
ab:6d:a7:4b:a1:c7:64:83:36:5c:63:5f:03:6e:e5:b9:c3:68:
80:44:2f:a4:6a:b9:de:e0:48:64:97:ee:21:0d:61:3c:d5:9f:
ae:a9:54:77:95:97:f0:88:cd:45:70:de:7a:2a:5b:38:84:14:
2d:28:79:83:e6:fd:4e:c3:d8:c9:d0:d6:bd:43:f0:97:05:a3:
2e:ce:8c:7a:7c:ff:17:6c:0b:eb:36:4d:d5:66:f9:41:48:12:
8d:73:4e:65:08:f9:c2:fc:a8:17:3d:b3:b2:8d:1e:d0:75:5e:
e5:fb:74:30:c1:9d:7e:71:8f:45:67:7a:6d:f1:8e:e6:99:02:
61:bf:0f:be:c4:fb:ce:d8:49:5e:1f:a6:a1:55:e0:75:95:ce:
aa:e5:6e:04:a5:fa:2c:fb:73:28:71:93:d4:4c:0e:d0:ae:80:
58:89:2a:4f:db:2a:57:5d:65:cd:76:aa:af:5b:e8:2f:ef:e1:
24:7c:10:3d:28:18:1e:55:b5:58:7a:9e:24:ce:38:17:b1:51:
e7:1b:4b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 20:32:37 2025 by rpki-client