Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mb6ZSMkcpNeNi02KC8JWSa264tI.roa
File: mb6ZSMkcpNeNi02KC8JWSa264tI.roa (raw, json)
Hash identifier: bIfFqlsYu+zVuj9bzgVd+Fs0rMkNObz8fffKbs7GpH8=
Subject key identifier: 99:BE:99:48:C9:1C:A4:D7:8D:8B:4D:8A:0B:C2:56:49:AD:BA:E2:D2
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0135
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mb6ZSMkcpNeNi02KC8JWSa264tI.roa
Signing time: Thu 08 May 2025 16:37:44 +0000
ROA not before: Thu 08 May 2025 16:37:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309 (0x135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 16:37:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=99BE9948C91CA4D78D8B4D8A0BC25649ADBAE2D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fe:f8:e4:ec:5d:01:85:1f:f8:7c:5c:e8:d3:
8a:09:2e:45:aa:04:94:fd:24:43:4d:a8:fc:e9:48:
33:bd:26:25:4b:00:1a:4e:5b:01:db:3c:cc:90:dd:
a4:7c:47:9d:0f:e0:eb:a5:ae:32:2e:50:05:70:72:
c9:73:d9:d3:22:65:2b:32:bb:4e:b5:60:e2:d1:a4:
c9:d9:b8:a4:d7:94:ef:51:bc:54:73:53:0e:2d:96:
69:1b:21:36:12:85:94:8b:3f:5b:7b:59:94:64:8c:
d5:9e:0b:f5:85:a9:ae:87:f9:cb:bb:0d:5c:c0:ef:
45:75:1e:ec:1b:f3:46:c9:d2:b2:89:21:f9:54:65:
6d:52:e7:a3:ef:e0:cc:9f:d3:15:1d:1e:79:91:05:
0d:91:2b:9a:bd:a1:28:f9:ed:69:85:ee:34:df:97:
4f:a2:a5:7b:bf:1c:af:09:20:20:22:ee:1b:21:1d:
1b:ce:a8:f2:4b:68:fa:f8:7a:c3:c1:dd:a6:74:c4:
91:87:de:b0:af:90:33:27:f2:8e:9b:2e:0e:40:08:
7c:3f:39:71:12:bc:87:31:bd:cc:34:34:7d:92:2c:
34:8a:c8:e8:cb:f9:ba:7a:58:4b:c6:3e:a1:cc:ed:
0f:6c:3b:ef:2d:ae:0a:74:dd:7c:47:d0:c7:0b:0a:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BE:99:48:C9:1C:A4:D7:8D:8B:4D:8A:0B:C2:56:49:AD:BA:E2:D2
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mb6ZSMkcpNeNi02KC8JWSa264tI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:25:c3:10:b4:c2:a1:6f:66:5e:9c:21:61:09:ce:41:be:92:
a7:f0:7a:36:d5:f6:7d:da:d4:9b:6e:07:1d:b0:46:37:3d:18:
28:1e:aa:39:39:e4:16:94:3e:b9:d7:59:89:c2:47:38:a0:8a:
a4:79:46:39:30:8e:5a:1b:3c:6b:8f:ef:3d:3a:71:5f:ba:51:
cf:94:50:73:42:e1:03:e2:f8:51:b9:3b:60:a8:b5:f6:43:62:
6c:49:13:64:b1:7c:ba:d9:e0:68:50:71:76:5a:3e:99:a9:e4:
31:7f:66:0a:f7:fd:07:77:7c:a2:c7:bd:25:8c:b0:2e:b8:af:
a3:e0:cf:93:a0:ca:f6:41:fd:0f:e3:f4:88:12:ca:d6:d6:9c:
74:63:84:64:8b:32:f6:af:e9:27:6d:1a:6f:5b:ea:bf:a7:42:
12:98:29:81:e5:68:65:99:96:c9:d5:db:3b:f4:58:f5:c5:25:
e5:e0:bd:b7:6e:e2:8f:73:2d:8d:02:42:76:80:c9:c8:11:e0:
60:0c:27:71:88:2e:5e:84:40:00:1e:e3:05:b5:25:61:77:9f:
11:07:a5:8a:3c:69:f2:2a:1a:4e:a3:24:08:a8:f8:7f:ad:1b:
8f:50:81:5d:ca:21:0a:bf:26:5c:16:14:9e:8b:e4:32:11:c2:
4e:e2:52:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:24:36 2025 by rpki-client