Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/f4tOothas3uL3oxFd04wyLvwW5E.roa
File: f4tOothas3uL3oxFd04wyLvwW5E.roa (raw, json)
Hash identifier: dtJOTT6b1r+BJHIZXQQDME6z/B/JPORH4LeHR9pRpd4=
Subject key identifier: 7F:8B:4E:A2:D8:5A:B3:7B:8B:DE:8C:45:77:4E:30:C8:BB:F0:5B:91
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 071D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/f4tOothas3uL3oxFd04wyLvwW5E.roa
Signing time: Fri 16 May 2025 13:38:05 +0000
ROA not before: Fri 16 May 2025 13:38:05 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1821 (0x71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 13:38:05 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7F8B4EA2D85AB37B8BDE8C45774E30C8BBF05B91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:24:df:7f:fe:77:d9:7b:25:f3:39:75:a4:92:
cc:41:f3:0e:c4:73:f1:03:81:9a:c1:86:46:80:fb:
ad:89:4c:0a:54:24:71:59:fb:74:16:f4:a0:a7:fe:
ce:b0:77:1f:f2:fd:6a:b7:b6:ff:37:5a:62:6e:b2:
b4:94:82:cd:b6:47:88:89:db:0e:65:07:80:60:08:
c0:79:d4:fb:18:d5:74:86:27:aa:82:a3:66:2a:84:
6c:f3:cc:ec:23:4e:39:50:53:eb:b7:86:68:fd:7b:
15:c5:bf:1a:e8:d7:e5:ce:da:eb:05:9d:a4:11:e2:
35:01:e6:7a:6d:6c:33:f4:fc:76:96:29:03:5f:07:
a6:52:9e:b2:d8:0f:4f:c2:4e:da:20:20:cf:20:28:
f9:74:15:d7:89:34:24:d5:85:7c:9c:72:7f:5c:4c:
e6:9f:c3:b8:a0:57:d9:8d:a9:c4:0f:bc:c1:86:ee:
21:16:7c:d7:f9:c3:b8:99:0f:2a:f8:15:e1:2a:68:
67:24:d9:04:05:8a:a6:f8:31:ad:7f:a6:05:bf:fd:
18:e1:16:d1:b4:19:ce:f9:82:fb:c7:90:68:b3:5c:
00:7f:20:ec:f5:55:2d:dd:b0:2a:e4:1b:95:18:e5:
73:98:42:14:df:62:16:da:f2:36:33:51:c7:53:0b:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8B:4E:A2:D8:5A:B3:7B:8B:DE:8C:45:77:4E:30:C8:BB:F0:5B:91
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/f4tOothas3uL3oxFd04wyLvwW5E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:54:c5:33:01:4a:ff:fc:cd:c1:e1:0c:47:f5:d8:36:62:20:
81:48:26:03:c2:dc:6d:f4:64:50:eb:92:73:c9:df:72:9c:21:
b1:17:13:9d:e8:3c:54:5e:9c:cc:c3:e3:b9:d3:77:2b:b3:f1:
82:8b:6b:3e:e5:1f:56:7b:95:a9:7e:db:a5:e0:77:e5:57:c1:
e5:fa:31:7b:cc:7a:bd:66:0f:4b:10:7c:91:3d:18:cb:91:5c:
c4:f1:af:1a:c5:b9:3d:d2:5f:1d:c2:eb:bd:7d:d4:75:0d:95:
4f:8b:59:64:29:bd:33:1e:51:5f:f8:e3:2c:9d:2b:37:c7:53:
f5:21:32:f9:58:77:12:c0:27:dd:40:7b:81:91:d6:28:cb:f7:
d9:b6:89:87:a3:71:97:29:75:ff:2e:0b:7c:05:39:42:a6:cc:
48:cc:9d:7f:d9:a3:a6:13:96:71:80:5e:13:7f:3b:aa:37:83:
78:d5:e2:a0:a1:ca:c5:02:6e:21:8f:ad:2d:1f:1a:f5:65:9c:
d0:79:b5:24:3f:6a:2f:5b:83:c7:d5:54:c1:2b:e1:78:b4:46:
1b:5f:44:4e:54:96:ae:1e:5d:23:38:1e:5c:1b:7f:af:a6:18:
c6:66:cf:05:b1:76:6a:5a:0d:92:5e:b5:8f:32:f0:77:f0:4d:
e8:94:41:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:35:26 2025 by rpki-client