Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/l0Aa9F4FwM7I3SKlCWTG_vYD9yo.roa
File: l0Aa9F4FwM7I3SKlCWTG_vYD9yo.roa (raw, json)
Hash identifier: NCfk+Lh/6v72gNyYNXvVjmmIJMDYYQodPG0Hs+ilN/A=
Subject key identifier: 97:40:1A:F4:5E:05:C0:CE:C8:DD:22:A5:09:64:C6:FE:F6:03:F7:2A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0499
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/l0Aa9F4FwM7I3SKlCWTG_vYD9yo.roa
Signing time: Tue 13 May 2025 05:08:47 +0000
ROA not before: Tue 13 May 2025 05:08:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1177 (0x499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 05:08:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=97401AF45E05C0CEC8DD22A50964C6FEF603F72A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:25:24:f9:18:92:23:62:9f:87:7e:1a:fa:9f:
d0:70:f6:f4:3c:f8:43:03:c6:e0:bf:08:d9:af:dc:
5a:c1:c8:21:0f:df:e1:db:0f:b1:a5:85:a5:3e:c3:
db:34:a9:7d:0a:3d:56:10:f0:81:db:23:eb:93:5c:
f7:f5:3b:e4:f9:e3:95:97:d7:b6:26:f3:b4:7a:10:
f1:88:04:ca:84:23:f0:d0:19:c9:06:9e:07:60:1f:
35:dc:10:08:2a:b3:62:0d:90:6e:cb:53:9e:48:1e:
09:fb:8f:e2:a3:c3:92:c3:0e:21:ab:e2:99:13:48:
44:77:49:10:2c:97:00:c6:2c:53:5a:df:24:55:77:
82:75:8c:f5:9f:96:40:7c:f9:f3:37:64:22:37:bd:
67:63:91:fd:83:9a:02:2b:f3:c1:32:42:26:4d:95:
ad:f7:77:69:9e:9a:54:00:23:1e:3a:68:84:63:d7:
ab:02:e2:bd:40:26:4b:13:da:af:97:78:75:c4:e8:
5f:a3:ab:0a:15:17:9d:9a:b1:f5:7b:e2:7c:95:e8:
57:fc:82:37:d3:24:07:5b:45:63:f7:3e:9d:7f:c3:
00:b2:e7:3c:4b:26:d7:c8:f7:f9:78:bc:32:d1:9d:
93:b6:a6:34:a9:78:34:13:f8:72:4f:cf:89:06:c0:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:40:1A:F4:5E:05:C0:CE:C8:DD:22:A5:09:64:C6:FE:F6:03:F7:2A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/l0Aa9F4FwM7I3SKlCWTG_vYD9yo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:d1:3c:c5:a8:40:9f:b5:86:aa:78:e6:32:9c:b5:1a:63:e4:
da:0d:0b:f3:07:f4:fa:80:54:53:ab:8b:d3:69:41:77:00:df:
bb:8c:b4:ed:57:1d:58:ea:dc:9a:de:cf:ed:2d:29:e5:bd:fb:
16:64:e4:54:8b:dd:78:3f:c5:cd:1f:98:51:bd:99:64:9f:5f:
c1:3a:23:df:62:ee:f6:10:c6:a7:85:c3:ec:c2:32:a7:1d:3d:
c9:f2:e7:ce:76:13:90:f6:24:f3:80:a7:ca:41:a2:45:69:1f:
d6:f3:ca:aa:32:4a:13:df:f8:67:82:84:ef:b1:62:14:77:1e:
da:e6:bb:07:c4:cc:35:30:7a:4f:8d:06:b4:8a:04:18:a5:be:
c2:cd:04:3e:e3:cf:ce:fd:a3:ed:68:b0:e2:8b:0d:46:ae:a4:
80:e7:d8:20:90:df:2a:6d:98:fc:34:24:bb:fc:18:6d:6b:5b:
48:42:42:c0:fa:19:ab:e3:48:70:e8:6c:12:52:7e:c7:9b:6f:
82:0a:ea:f7:65:56:d3:64:39:bf:8d:a5:e8:f8:13:97:a0:9c:
44:f6:10:55:85:a9:fe:fc:3b:8b:a9:8e:18:f4:04:32:c1:a2:
4a:09:0c:5f:b0:22:6a:f8:ac:02:7e:9e:9e:f2:89:fe:0c:8f:
11:0d:9e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:44:15 2025 by rpki-client