Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/y1m3R4WYJXw41bF0HJGkEHjiqtw.roa
File: y1m3R4WYJXw41bF0HJGkEHjiqtw.roa (raw, json)
Hash identifier: 9usTOIHE5jTjTbLKpLR2merQZqjdIy8QaYG776rz3h4=
Subject key identifier: CB:59:B7:47:85:98:25:7C:38:D5:B1:74:1C:91:A4:10:78:E2:AA:DC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0431
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/y1m3R4WYJXw41bF0HJGkEHjiqtw.roa
Signing time: Mon 12 May 2025 16:07:59 +0000
ROA not before: Mon 12 May 2025 16:07:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1073 (0x431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 16:07:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CB59B7478598257C38D5B1741C91A41078E2AADC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:12:b6:9e:05:53:a5:b4:9f:66:b5:d0:bb:
70:0e:1e:62:3c:85:44:7f:6e:a9:ad:10:2d:a9:aa:
f4:fb:ce:56:e0:7e:de:d8:8e:07:65:15:8f:0c:03:
23:b6:bf:0c:cc:56:45:bc:75:d2:29:6f:d6:5c:78:
a0:08:d1:e2:5d:0d:d8:17:d0:21:7a:29:b8:ee:7b:
dd:25:25:a6:41:99:88:62:55:a4:5f:95:1a:8c:f5:
f2:58:09:98:00:99:11:4f:24:dd:eb:2e:a1:96:ec:
a7:fc:51:0c:80:1c:36:f3:8c:07:ea:04:78:85:71:
b8:81:c6:7c:2b:37:d5:9e:2d:88:39:a0:0a:b9:9d:
50:90:dd:2c:d4:df:a5:67:56:97:af:8b:dc:72:d4:
e6:05:fe:a7:15:8a:fc:b1:cd:0c:04:88:77:9e:08:
71:60:ea:e0:55:1e:f7:8c:b2:b0:94:21:e9:d9:15:
98:14:68:39:e9:69:94:05:31:1e:0c:8e:3f:9c:25:
9e:65:8a:0c:38:da:85:db:42:3e:e9:8e:18:e6:12:
43:97:fa:ee:42:c4:28:d1:ba:42:5c:99:de:07:94:
87:06:99:e9:0e:3f:e3:16:97:45:2b:44:0b:37:ce:
0a:17:e2:02:79:c7:37:4e:73:70:f7:11:0e:f7:f3:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:59:B7:47:85:98:25:7C:38:D5:B1:74:1C:91:A4:10:78:E2:AA:DC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/y1m3R4WYJXw41bF0HJGkEHjiqtw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:4f:fd:1c:cd:02:90:af:27:3d:5a:72:b2:27:5c:b3:f1:ac:
fa:87:95:7b:6b:7b:c3:d6:dd:20:25:38:6f:e3:96:d4:89:27:
12:00:15:59:f4:9e:c4:29:17:e1:e6:55:78:31:d5:2c:c6:b8:
07:74:35:f2:92:8d:d7:86:d4:33:82:9f:10:5b:aa:6e:10:17:
62:b2:34:e6:bc:a4:51:2d:ba:17:05:11:80:ff:28:4b:61:e6:
2a:be:8f:24:5c:5d:8e:00:b6:b5:fe:77:f8:19:89:72:b0:81:
05:99:2a:4d:ae:e3:cc:6f:45:58:69:fe:e5:a7:33:68:d8:e8:
81:7d:22:c5:95:22:5f:c8:68:bb:10:51:4d:28:d0:fe:fa:24:
0a:c4:1a:83:89:dd:ce:82:41:24:58:a6:80:b1:a9:19:86:2c:
c8:32:73:fe:db:5a:64:05:87:ed:c4:86:e2:33:fb:13:e2:e4:
ef:2b:5b:9e:33:f1:71:cf:9d:74:a6:49:8b:ab:53:81:2d:5a:
40:9d:5c:85:27:8c:91:16:01:cc:af:cd:59:ae:ec:8a:40:b6:
5f:3a:50:aa:b8:30:1e:13:a0:e2:4b:d0:34:2f:23:88:b7:2d:
f7:06:9e:a0:41:6b:3c:9d:08:4e:d0:59:46:76:e8:91:4e:fd:
c1:92:7d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:39:18 2025 by rpki-client