Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/dIQX0-NirjiQ3NGgLlZXb6zz-gI.roa
File: dIQX0-NirjiQ3NGgLlZXb6zz-gI.roa (raw, json)
Hash identifier: nFX/SuUNkyCvn8N7riXj9Nim3WOSwsDyLXX1HCPdJfc=
Subject key identifier: 74:84:17:D3:E3:62:AE:38:90:DC:D1:A0:2E:56:57:6F:AC:F3:FA:02
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03A9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dIQX0-NirjiQ3NGgLlZXb6zz-gI.roa
Signing time: Sun 11 May 2025 23:07:54 +0000
ROA not before: Sun 11 May 2025 23:07:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937 (0x3a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 23:07:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=748417D3E362AE3890DCD1A02E56576FACF3FA02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:f2:8b:40:e7:2c:21:12:af:6d:86:ff:4c:
c1:8a:31:2a:5d:11:11:3a:d5:56:0e:f4:8f:3c:ba:
60:25:92:2d:0b:a9:e0:14:cd:8e:c9:72:a2:e0:0d:
7a:9f:a7:92:19:19:29:0e:2c:40:02:15:ee:83:aa:
75:12:88:73:84:23:92:c6:f7:b5:1e:d9:ab:bc:cb:
fe:ea:b0:73:c4:f5:46:ee:12:fe:ba:d1:97:4b:46:
f7:b0:a7:ef:f2:c0:91:06:14:77:ef:56:99:de:4a:
49:a0:dc:63:d0:da:88:35:f2:d6:b9:e3:6c:02:17:
7a:9f:28:a5:45:1d:f7:0c:2d:7c:ce:35:62:a4:a5:
12:08:12:0a:3d:23:62:29:0f:18:08:42:d2:cf:2d:
d8:d3:4b:1b:ae:b9:72:13:8f:40:2f:c1:69:a2:d3:
3b:71:28:56:7b:e2:ea:ea:0c:e4:31:14:97:04:07:
f3:04:68:6a:98:8d:69:f2:3b:f8:38:23:56:fd:e1:
69:c9:fb:e0:ca:59:8c:97:89:7c:41:2a:54:f8:d2:
21:5e:d6:24:7d:ca:85:b4:da:08:8f:0a:1b:48:52:
e4:0d:76:d7:34:56:36:27:e6:48:5b:af:83:8e:a2:
a5:8f:c0:19:7e:9d:ac:55:ff:02:f9:56:13:43:03:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:84:17:D3:E3:62:AE:38:90:DC:D1:A0:2E:56:57:6F:AC:F3:FA:02
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dIQX0-NirjiQ3NGgLlZXb6zz-gI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:98:dc:66:e3:99:6a:f0:0d:d0:71:c5:b2:eb:a3:63:a3:6a:
7f:99:7d:fd:35:13:bd:5a:bc:2e:dc:85:eb:1a:ef:92:d9:f0:
d8:ee:0d:83:a5:3a:91:8d:b7:cf:89:19:7f:37:da:d6:8a:9e:
68:6d:e4:d8:1e:b9:a3:56:02:67:b0:6a:65:76:25:39:d9:e2:
ce:20:6a:5b:e7:49:df:e8:3d:2a:e8:6d:dc:ee:58:16:84:a6:
d2:10:cf:89:42:a2:06:33:ce:32:9d:65:5d:2e:ab:3f:b6:67:
6f:9c:a9:3d:ce:5c:05:30:f1:76:5b:df:39:f8:18:b3:5a:f9:
23:6a:91:45:71:f5:d6:38:cd:19:75:d3:a7:ab:0e:a2:0a:bc:
c4:19:9d:02:42:08:de:24:de:16:ea:16:36:b4:f5:ef:b4:6e:
05:f9:25:d9:d5:c4:74:05:7f:0c:4f:3d:6e:99:be:92:68:80:
71:52:1a:8d:97:5c:64:09:d8:0a:92:eb:51:7d:1e:33:88:92:
14:f9:3b:ef:73:69:43:61:0e:7a:3c:59:66:e8:42:a1:1f:ac:
36:eb:00:bb:de:2c:83:b8:d2:b9:42:d9:af:df:8d:dd:5b:a9:
95:0f:e2:5f:7c:f6:5e:3b:a4:ae:0b:1f:6c:33:1b:28:68:ae:
46:a2:83:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:09:39 2025 by rpki-client