Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vE3WE6QtaB8AmiITPRoBOVpjrII.roa
File: vE3WE6QtaB8AmiITPRoBOVpjrII.roa (raw, json)
Hash identifier: xKF1COZuVI5ZNrvglhh6jkdH8Ph5AE0dR/Lmg8vNOdo=
Subject key identifier: BC:4D:D6:13:A4:2D:68:1F:00:9A:22:13:3D:1A:01:39:5A:63:AC:82
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0461
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vE3WE6QtaB8AmiITPRoBOVpjrII.roa
Signing time: Mon 12 May 2025 22:07:59 +0000
ROA not before: Mon 12 May 2025 22:07:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1121 (0x461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 22:07:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BC4DD613A42D681F009A22133D1A01395A63AC82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9e:9a:a2:b7:a8:56:39:9e:25:c2:4d:57:38:
4d:59:ce:a5:9a:57:c8:03:77:28:1b:b2:52:bb:b6:
d9:45:44:02:29:98:f7:b5:9b:b8:c1:37:37:4a:5d:
04:86:d3:5c:0e:c7:4f:d2:2a:cf:23:ff:76:1d:93:
46:44:ed:76:cc:79:7b:0f:dc:0f:e1:ba:7c:8e:95:
62:7a:52:2d:62:29:86:ac:a6:28:d3:c5:80:88:a8:
ee:4e:5b:6f:aa:9d:12:a2:0d:1f:36:ed:d1:39:7b:
ce:0e:65:e2:d7:4c:b2:a5:2a:8f:77:cd:80:26:8f:
c1:70:99:7f:e3:30:72:0d:c1:ee:6d:ec:75:69:f3:
36:3b:fb:dc:32:e6:6b:1e:0f:b2:6e:f9:a4:68:c1:
ea:2c:d2:19:39:92:25:58:42:8e:33:7a:2b:f9:c1:
cd:5f:ff:67:dd:fb:51:61:8b:c3:67:97:7c:b8:46:
3e:1c:2b:0b:e6:5b:9a:c2:5a:47:b7:cf:f3:ab:90:
62:5b:b5:81:2b:10:6f:f4:ec:92:0a:d1:df:d6:ca:
87:f9:3b:7e:21:13:9d:62:bb:f0:73:ac:22:86:64:
e1:40:a8:e6:52:b9:58:33:93:ec:f9:15:af:56:07:
29:d1:55:c2:43:53:bc:2f:2f:8c:b8:19:55:ff:a5:
a9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4D:D6:13:A4:2D:68:1F:00:9A:22:13:3D:1A:01:39:5A:63:AC:82
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vE3WE6QtaB8AmiITPRoBOVpjrII.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:74:d8:d1:5e:73:c6:d4:f0:0b:dd:f4:88:96:e7:59:9a:e8:
3c:92:70:cf:d4:19:54:5d:86:3a:83:87:af:dd:0b:af:8e:f7:
4f:c4:35:3c:c4:b8:16:09:f7:d6:a9:33:fc:e9:b1:3e:6b:ff:
61:8a:c1:90:df:c3:88:81:fa:80:ef:10:e5:ea:91:61:07:72:
f4:8e:da:97:8c:6a:5d:72:d2:50:68:de:da:4f:d7:1e:85:c2:
0b:b5:fd:eb:56:f6:72:4f:ca:df:17:29:21:a4:5c:ac:ea:4a:
f0:8f:16:3e:d3:4e:61:0a:0d:fe:df:a3:54:8f:61:d9:2c:d0:
4b:8e:a3:35:e9:8d:62:b4:6c:65:ea:e1:c0:9c:72:8e:bb:8c:
ef:52:48:94:72:74:e3:b4:7b:06:56:5e:c8:33:34:fd:2a:50:
71:27:d5:93:2a:13:6a:12:8c:d2:8a:09:1b:45:da:32:df:03:
90:f3:f1:23:72:ce:3c:ef:ba:98:2f:19:c2:7c:7f:e8:d1:a6:
e1:9f:37:c9:2c:8d:d9:78:d9:ef:4a:41:39:c1:bb:a8:ae:88:
f7:e9:51:3a:d8:b1:d3:4b:65:a3:c7:9d:a8:e0:20:b9:9b:9b:
4b:9d:4f:60:84:36:93:3c:5f:b3:1c:a3:01:9d:2b:ad:96:77:
07:ff:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:36:02 2025 by rpki-client