Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/teRYchc76quHhpQwZ7noIJ89uRk.roa
File: teRYchc76quHhpQwZ7noIJ89uRk.roa (raw, json)
Hash identifier: h3fZC+qKYR2kG2faSL3QZygaWC4iETvZ1J38TLkGYN8=
Subject key identifier: B5:E4:58:72:17:3B:EA:AB:87:86:94:30:67:B9:E8:20:9F:3D:B9:19
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0155
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/teRYchc76quHhpQwZ7noIJ89uRk.roa
Signing time: Thu 08 May 2025 20:37:43 +0000
ROA not before: Thu 08 May 2025 20:37:43 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 20:37:43 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B5E45872173BEAAB8786943067B9E8209F3DB919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:e2:a3:0d:6b:d1:6a:2a:35:89:38:fc:d8:
4a:83:00:5c:e4:ad:d2:a8:76:ec:60:62:f1:bf:11:
cc:7c:f9:af:60:5d:d9:62:b2:91:1e:fb:b2:97:73:
bd:d9:fa:1d:40:e4:0a:19:5a:ed:ac:b4:f1:c6:bd:
93:c7:f4:12:94:36:de:f1:b4:0a:9b:d3:90:fd:fa:
60:e0:2d:9f:a2:b6:aa:ce:d6:6c:98:9f:0b:6b:14:
65:b8:9f:21:55:07:bd:be:48:d0:fd:95:ac:a6:17:
3b:a9:bf:65:6d:ba:42:b3:cf:dc:4b:b5:2e:25:3e:
b0:3d:14:e4:b9:e0:05:9f:d1:17:b5:b9:38:5c:75:
be:67:4b:e5:60:bc:18:8f:87:d0:84:99:89:ff:e2:
d7:07:24:10:ec:ce:8d:f2:df:45:6e:43:d5:0f:8a:
81:86:cb:94:56:14:08:c7:20:85:a9:e0:d3:9f:2d:
fe:49:49:f6:fa:9a:b5:7b:c6:70:01:5c:f4:18:c2:
d6:5d:e2:1a:4d:81:92:26:cc:fd:01:9f:fa:e3:5b:
c3:83:b3:52:3e:ed:81:d6:d5:4e:87:fe:5c:41:12:
69:89:38:22:e0:55:30:3f:7d:19:3d:47:52:ff:bb:
38:24:f3:fb:91:97:10:65:03:5e:ba:f3:7c:71:01:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E4:58:72:17:3B:EA:AB:87:86:94:30:67:B9:E8:20:9F:3D:B9:19
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/teRYchc76quHhpQwZ7noIJ89uRk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:d4:da:00:e7:90:40:fd:1b:8d:29:6a:c4:e7:2f:41:25:07:
fe:29:81:d3:c1:30:9a:5b:b0:d8:eb:70:a5:46:d4:92:04:e6:
b4:5e:4a:4e:32:4c:38:31:e0:8f:8a:0f:c7:d6:7a:c3:06:ee:
11:84:90:7c:28:91:37:a4:b9:01:ab:b8:5f:71:32:01:f4:e0:
0f:82:57:9c:91:e3:cc:83:de:b5:bb:17:6b:5c:d3:4e:8c:ac:
88:bd:08:ea:4e:02:43:44:ed:0d:b6:29:84:af:b0:9b:f8:eb:
0d:2a:9d:11:7e:39:48:7c:aa:5d:67:08:68:bb:82:da:81:25:
52:dc:85:f7:fb:a6:71:c1:a0:bf:9c:90:08:39:5a:a2:5c:52:
ea:38:62:d4:f9:27:23:e3:fb:1a:e3:4e:ab:40:c3:20:05:2a:
50:ac:95:c7:d0:5b:54:9c:ee:45:2f:34:43:a0:b2:be:0c:e7:
ff:a0:b0:d9:46:b2:88:3b:a3:65:b5:fa:98:b3:4b:22:1b:a6:
a5:4a:23:53:55:d0:52:a2:bf:15:45:6a:bf:1a:1a:be:6c:bf:
ff:a6:aa:c2:86:9e:e2:b9:ab:75:27:b8:f8:72:2f:cc:2e:e1:
40:e0:72:8c:c8:b2:b1:b4:85:92:6c:b7:cf:1a:ce:ce:e4:c1:
9d:9e:25:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 00:13:09 2025 by rpki-client