Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mS5zfkz_4P5mlCWOvn1ZflcN65M.roa
File: mS5zfkz_4P5mlCWOvn1ZflcN65M.roa (raw, json)
Hash identifier: tJpRoLEJxguRO1AjSDv/4AHyI5R6pKSb8RTGZWxnPTU=
Subject key identifier: 99:2E:73:7E:4C:FF:E0:FE:66:94:25:8E:BE:7D:59:7E:57:0D:EB:93
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 06A5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mS5zfkz_4P5mlCWOvn1ZflcN65M.roa
Signing time: Thu 15 May 2025 22:38:02 +0000
ROA not before: Thu 15 May 2025 22:38:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1701 (0x6a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 22:38:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=992E737E4CFFE0FE6694258EBE7D597E570DEB93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:9c:8a:15:51:a2:ac:48:8c:cf:bd:42:39:
ac:d9:b6:93:5d:d1:7d:5d:46:f8:53:eb:75:f0:3a:
22:ad:d6:80:db:90:e0:9b:b0:be:0a:c0:37:34:cc:
5d:7e:03:55:90:cf:bd:d5:1c:04:f2:52:74:44:4d:
6d:e7:61:8f:c2:d5:40:9e:4f:d8:d1:63:89:15:d3:
42:c1:43:6d:20:0f:1e:74:52:ff:d7:d6:31:e1:d6:
c7:f7:8f:ec:dc:82:98:47:0d:e8:bc:b5:ff:52:95:
de:56:3d:74:a5:0c:f9:94:46:d6:9c:8c:78:e9:9d:
c0:54:3d:ce:3a:ce:cf:a4:87:8d:0f:50:b9:60:99:
c5:50:90:24:59:94:fe:d9:f2:d4:1a:ab:e0:f4:70:
11:f0:41:86:d9:38:74:bb:71:09:79:26:61:44:89:
68:43:5e:88:79:5c:3b:2f:1e:8e:e7:a8:8a:7d:71:
10:de:57:4a:6d:6e:52:a5:b9:49:8c:56:ba:57:c4:
ae:ae:fb:47:62:c3:ac:35:5d:41:65:75:d4:0d:b5:
fd:e4:55:54:61:af:fd:d8:a0:7a:14:f6:50:c9:b3:
7e:33:ca:f0:4d:ab:c1:d2:f1:9d:95:98:52:8b:f5:
14:4d:d2:c7:63:67:57:e1:2d:70:ee:b2:b4:8d:37:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2E:73:7E:4C:FF:E0:FE:66:94:25:8E:BE:7D:59:7E:57:0D:EB:93
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mS5zfkz_4P5mlCWOvn1ZflcN65M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:9a:63:73:4e:19:25:82:5e:13:89:73:9c:7f:c1:a9:be:e7:
5e:b6:1f:73:ea:57:d9:fe:81:27:24:9e:e0:5b:dc:91:81:7b:
c5:5e:36:45:eb:93:92:96:42:d4:3b:5b:da:6f:13:55:84:e5:
e0:5f:3e:0d:c4:e4:1b:1f:20:44:32:05:7e:8b:2c:31:b0:7d:
e7:1f:14:ec:10:60:0e:6b:5b:82:cf:0a:56:1a:cc:2d:d4:7a:
81:69:70:a1:42:8d:be:4e:74:ba:8e:f2:8f:4d:23:6c:1d:71:
0a:33:3e:03:74:a8:a3:53:d8:61:dd:a1:fe:d9:e9:55:f3:19:
44:f3:c1:93:02:02:75:ef:b1:bd:82:82:11:e9:95:fe:c7:0c:
d6:73:87:7d:e4:aa:ff:dc:f7:34:7a:21:7a:07:82:cb:c4:e6:
b0:9b:64:6f:0c:95:9c:76:b1:0e:ab:ed:d3:83:ce:8f:97:a6:
5c:36:5e:cc:1c:57:e8:8b:49:87:16:b2:af:fe:68:08:d6:e5:
d4:19:04:94:85:f8:58:b5:38:e0:76:c1:1c:6f:b1:db:41:0b:
ac:33:fd:f4:1b:1d:69:63:15:a9:fa:e1:a3:b9:d4:a0:12:cc:
87:60:98:48:fd:f7:2e:b9:8d:d1:db:dd:d0:26:20:a9:9b:86:
ae:3c:1b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:58:52 2025 by rpki-client