Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/hoom0881J2kumPXI-zwn1gF79F0.roa
File: hoom0881J2kumPXI-zwn1gF79F0.roa (raw, json)
Hash identifier: LyiM9gJ0hnkOBlkZwgem2HAQTt9GaobwYrDUfBtZQZw=
Subject key identifier: 86:8A:26:D3:CF:35:27:69:2E:98:F5:C8:FB:3C:27:D6:01:7B:F4:5D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: ED
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/hoom0881J2kumPXI-zwn1gF79F0.roa
Signing time: Thu 08 May 2025 07:37:41 +0000
ROA not before: Thu 08 May 2025 07:37:41 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 07:37:41 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=868A26D3CF3527692E98F5C8FB3C27D6017BF45D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a5:ab:73:09:34:04:fd:f8:29:55:96:7a:d2:
4d:15:e8:90:ef:c2:d2:dd:f4:6c:66:8f:66:ee:6c:
e2:04:85:47:5f:e8:1d:65:6f:98:60:94:ee:fb:80:
4b:9a:e9:01:fa:72:f5:8f:4c:10:17:54:d1:15:d4:
3e:e2:78:b4:b5:d5:0f:fd:b1:0c:42:3f:0e:f4:75:
8d:c6:dc:ef:94:f1:98:d4:3d:d0:40:4c:5b:90:71:
83:4d:f0:2b:fb:58:a8:02:49:fe:0b:4d:b3:48:94:
13:8b:57:2f:6a:9c:04:d3:bf:f9:da:65:9d:f4:ba:
11:5f:58:96:a3:02:16:b1:53:d3:b6:2b:13:db:cb:
86:08:52:ff:5e:ed:79:4a:ea:ca:16:ff:12:9f:1a:
a8:32:e0:c3:6a:05:d7:ca:53:dd:11:0f:79:be:ea:
90:dd:c1:ec:c9:2b:9c:14:b9:ef:75:29:20:2d:80:
bd:99:37:d3:e0:d0:b7:03:a7:f3:e8:c7:64:a6:5b:
be:1f:3c:d3:cf:7f:eb:4c:01:32:9f:75:b5:d4:33:
4d:ca:a6:8a:f6:f8:43:92:7c:ea:56:0f:79:9c:99:
37:5d:1c:55:eb:4b:6d:c5:28:82:24:c6:db:f3:b0:
1e:ff:93:26:90:24:9a:86:90:e0:b0:03:31:67:06:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8A:26:D3:CF:35:27:69:2E:98:F5:C8:FB:3C:27:D6:01:7B:F4:5D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/hoom0881J2kumPXI-zwn1gF79F0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:71:d8:39:98:ad:3f:e4:09:f7:d5:13:ab:f4:f7:79:b6:b8:
4e:d7:09:c3:a3:7f:85:07:ad:ff:3b:b2:83:43:81:9b:34:c1:
d8:01:88:f9:c6:4c:43:18:8d:8b:4a:75:2e:74:d3:31:88:4e:
40:a3:03:7c:00:c4:37:e5:b5:1b:c1:a8:84:7b:5c:b7:9a:b4:
f0:e8:d3:3c:6b:f8:f3:ef:99:f4:d1:5a:d3:f9:a5:3b:f1:93:
a8:02:04:33:57:9f:7d:8d:ef:c0:fd:2f:85:2a:ad:30:e8:9a:
e8:b0:52:23:24:b3:98:2b:91:e0:dd:b6:a2:51:10:51:41:c0:
f6:1e:75:78:e3:08:cf:65:b6:f7:48:01:db:ee:77:2a:5c:a3:
10:de:47:d1:f7:58:29:46:fb:7c:33:eb:59:dc:20:74:cc:40:
6d:20:e2:10:69:32:2c:d5:b2:ce:f6:0f:ae:dd:83:a3:2b:a9:
5c:4b:6c:13:aa:34:8d:11:a2:d3:1f:28:02:3d:27:ad:5c:f8:
8f:ca:9f:8b:a0:74:db:66:fb:62:57:79:7d:6d:f6:17:ca:c8:
38:61:63:68:0a:bd:83:94:b8:dc:d4:55:54:31:7e:03:4c:48:
2c:a6:83:b4:fb:9c:9c:82:3b:e9:3c:0a:66:ce:59:ba:a5:9a:
29:44:af:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:49:23 2025 by rpki-client