Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/t0FWFYej-xJy-KVsmlv7NhQ1hUY.roa
File: t0FWFYej-xJy-KVsmlv7NhQ1hUY.roa (raw, json)
Hash identifier: WLoqN4+rqPjlCKQNRGhudRP9wDq/qadMQzSmZTjTe6s=
Subject key identifier: B7:41:56:15:87:A3:FB:12:72:F8:A5:6C:9A:5B:FB:36:14:35:85:46
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0585
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/t0FWFYej-xJy-KVsmlv7NhQ1hUY.roa
Signing time: Wed 14 May 2025 10:38:01 +0000
ROA not before: Wed 14 May 2025 10:38:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1413 (0x585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 10:38:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B741561587A3FB1272F8A56C9A5BFB3614358546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:0d:23:75:75:5c:5c:18:03:73:91:ae:fc:
01:8f:db:72:bc:bb:19:f1:39:82:d8:a9:5e:9d:b5:
5a:ac:af:41:60:30:bc:a3:44:e1:ef:73:b5:97:c4:
03:66:2e:cd:dc:80:cf:77:06:ce:46:5e:8d:ae:ce:
f2:db:38:7e:64:9e:8f:61:4b:71:e5:de:d2:fc:84:
e2:ee:f2:fc:79:aa:e2:d8:c9:12:89:7a:80:b6:9d:
26:f6:f0:d0:11:28:11:00:be:1f:26:17:d2:5f:bf:
8e:09:ba:cd:85:21:37:6c:cb:b7:be:07:a2:b9:49:
0f:e4:6a:5b:79:69:7a:43:b6:7b:b3:83:8a:75:9a:
ec:0c:f4:c0:6a:6d:66:96:03:de:c7:34:3b:69:80:
e8:28:03:29:91:f1:52:be:0e:b7:51:8d:99:a0:db:
c7:1f:02:4d:47:35:2a:81:b6:20:97:a1:de:cf:8e:
a1:ae:8c:02:31:a2:b3:d1:0b:60:13:6b:9b:17:dd:
b6:56:ca:ea:59:77:c6:87:4c:75:5a:5b:a1:f1:58:
36:90:a0:99:c0:39:d1:f1:1b:f6:76:9f:1e:aa:dc:
00:f7:d1:f4:62:c8:01:3d:09:a2:c1:5c:67:12:ca:
32:33:d4:55:06:e2:55:2a:15:1b:00:66:e2:11:40:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:41:56:15:87:A3:FB:12:72:F8:A5:6C:9A:5B:FB:36:14:35:85:46
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/t0FWFYej-xJy-KVsmlv7NhQ1hUY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:f7:f5:c3:4d:85:43:cd:26:62:49:99:f0:ad:9c:0b:8f:03:
16:72:52:86:f9:5e:de:63:52:14:48:16:ab:9e:0f:56:3e:4e:
4b:1f:5c:06:02:17:52:1e:65:06:f6:05:66:a2:0e:7f:15:9a:
01:31:1d:ab:12:f7:bb:e0:ac:8f:c1:3e:85:b4:1e:44:0a:da:
fb:ee:75:46:fa:f3:38:6a:fc:c5:41:32:23:76:44:7e:35:f6:
0b:b8:0c:a7:10:49:38:a1:dc:90:a0:b5:4f:94:9f:98:d4:0e:
d3:55:e1:cd:7a:2c:fd:5b:0c:ee:61:a1:45:13:49:b2:b2:85:
0b:1b:8d:be:ed:f8:e5:cd:00:e4:5d:71:45:1d:50:1b:ea:c6:
38:b9:52:64:ab:16:fd:60:0e:2d:56:0d:00:23:4c:9d:55:71:
90:27:39:c7:e8:c9:d8:1b:df:d1:ac:65:65:11:33:1d:b7:f4:
5f:17:d7:5a:eb:03:2a:e5:c2:d2:14:9c:97:a8:ce:e7:a0:fa:
06:22:bc:4d:9f:92:29:09:99:99:f5:90:df:db:38:64:cd:41:
74:74:8c:3b:bb:18:53:d0:6f:1f:af:f6:62:b5:af:2d:90:f3:
fe:42:d5:09:f2:ca:86:95:b2:6e:46:dd:81:51:ae:ef:88:e6:
2e:2d:49:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:28:13 2025 by rpki-client