Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/k_lCOiPVVieeDIvmojvDG9N3fac.roa
File: k_lCOiPVVieeDIvmojvDG9N3fac.roa (raw, json)
Hash identifier: Mb96SZoWFGipgyxLv/z5v/EN88C1RMaPbQWqd84jvik=
Subject key identifier: 93:F9:42:3A:23:D5:56:27:9E:0C:8B:E6:A2:3B:C3:1B:D3:77:7D:A7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0779
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/k_lCOiPVVieeDIvmojvDG9N3fac.roa
Signing time: Sat 17 May 2025 01:08:08 +0000
ROA not before: Sat 17 May 2025 01:08:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1913 (0x779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 01:08:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=93F9423A23D556279E0C8BE6A23BC31BD3777DA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9c:27:bb:3b:fe:25:7f:b7:f1:1a:2e:a4:5e:
3b:81:42:09:42:2b:9a:7e:19:fb:bb:a5:58:b0:9a:
62:d2:4e:f6:91:be:18:80:7f:f1:66:e8:4a:73:a4:
62:3c:51:3b:4b:60:c3:37:b7:32:60:19:44:14:a8:
0b:f1:58:75:a8:67:1c:cb:0d:9b:ca:d1:c1:c0:a8:
76:53:0a:ea:3e:16:a8:3b:87:98:b2:22:bc:9f:f0:
48:63:07:9e:7f:00:44:71:76:1b:de:e8:1f:cf:c3:
d0:f0:1b:c4:03:a1:b4:f0:6f:e9:22:63:49:e2:b1:
f8:0f:cc:58:d2:0c:e6:30:c4:91:51:ab:1b:de:4e:
ad:f2:e5:e1:9c:fd:46:3d:fe:df:3c:c3:c7:5c:27:
42:8a:e7:af:3d:b3:0f:6e:0d:88:cd:55:9e:15:a0:
23:f2:9c:8b:50:bc:86:30:8b:ce:3a:40:50:c3:29:
ee:7e:75:ae:4a:a9:c4:4f:76:dc:ba:6b:8c:5b:0e:
cc:19:be:a7:b4:52:3c:d6:35:6d:2f:d6:60:e6:21:
78:8e:af:ab:4f:18:14:fe:b7:94:69:09:6b:0c:b8:
28:db:42:46:01:09:16:64:71:f9:4e:70:1e:a5:ce:
9e:86:20:de:03:79:cd:c2:96:36:3f:d1:03:04:17:
f6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F9:42:3A:23:D5:56:27:9E:0C:8B:E6:A2:3B:C3:1B:D3:77:7D:A7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/k_lCOiPVVieeDIvmojvDG9N3fac.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:5b:f7:15:9c:e9:67:c3:f6:ba:d0:e7:7b:28:7a:3c:95:9d:
f0:c8:51:d4:d3:20:ef:ab:95:36:df:cc:02:fd:f2:3c:1e:78:
71:89:a3:d5:21:a0:2b:e1:2b:d6:dc:a7:5d:f2:24:94:46:b7:
e3:6a:a7:dc:b1:62:7b:11:54:ab:1f:3b:ab:b5:a3:96:48:77:
aa:16:00:c4:11:9b:fd:29:f9:84:34:98:b0:ae:ef:6b:29:14:
54:23:03:96:a5:24:0f:0d:04:62:0c:28:f9:8d:71:50:cf:ee:
f6:17:11:7a:bf:b0:96:9f:ed:3b:aa:6f:77:f5:98:da:9f:9f:
f4:c2:e5:89:09:3c:c1:6f:b0:d6:bd:7a:29:fb:14:e7:d9:09:
01:9d:b3:96:03:8e:cd:aa:9a:f0:11:2c:35:f7:9d:75:08:8b:
31:5e:b5:11:16:d3:76:80:b7:62:e4:8f:2e:d0:ea:66:f2:53:
19:53:e0:69:95:b2:7f:b7:21:4c:df:23:08:27:aa:c6:74:13:
a7:77:f9:97:bd:b5:b3:a4:64:c8:22:2d:72:af:b0:ee:47:33:
da:f3:02:1c:9d:ab:87:2f:20:87:ee:04:3e:3c:d3:33:4a:d2:
b6:d9:32:35:4b:f0:8f:18:b6:3b:92:32:78:32:b4:8c:72:c7:
8b:04:cb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:34:04 2025 by rpki-client