Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/2_QP7HZVxecMmNr6wFfzftR9TRg.roa
File: 2_QP7HZVxecMmNr6wFfzftR9TRg.roa (raw, json)
Hash identifier: IxKlLz5scUO5gsG9u2jPsGjhE9KcdgpfzsQ5vOdSF84=
Subject key identifier: DB:F4:0F:EC:76:55:C5:E7:0C:98:DA:FA:C0:57:F3:7E:D4:7D:4D:18
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0649
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2_QP7HZVxecMmNr6wFfzftR9TRg.roa
Signing time: Thu 15 May 2025 11:08:04 +0000
ROA not before: Thu 15 May 2025 11:08:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1609 (0x649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 11:08:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DBF40FEC7655C5E70C98DAFAC057F37ED47D4D18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:a2:cc:aa:4c:0b:65:b8:e6:49:31:7e:bc:
25:ee:6f:43:30:5c:55:d8:c2:fd:26:0e:57:dd:8a:
ae:2d:c9:5d:09:ea:04:87:7a:52:5f:6a:3c:1e:b0:
7b:ae:fd:0f:f6:85:f7:b8:d0:cf:6c:75:d8:ca:5b:
fb:bd:e3:07:5f:4a:9a:28:b3:9d:51:84:e5:81:89:
18:7b:78:66:f2:05:e4:3f:7a:15:f5:28:86:41:54:
cd:9b:7c:95:6f:a1:2e:b7:79:15:9f:f6:dd:00:03:
93:a5:06:a3:a1:cd:65:25:6c:8f:4b:fc:d5:d2:1d:
3b:1d:82:91:69:d2:8a:01:ff:1d:f8:5d:62:71:9b:
b9:2b:e6:f7:5e:1a:b1:58:9c:9d:d4:10:08:87:8d:
33:3c:68:76:f2:46:e0:7b:e5:24:02:5c:33:70:2a:
7f:52:58:8c:7a:e7:6b:07:d5:eb:b4:e1:cf:47:6e:
bd:30:0e:34:2f:cc:c8:f2:92:4a:96:a3:b3:7a:a5:
db:f1:00:7f:47:7d:ab:92:05:8b:04:22:45:4b:54:
d8:e2:1c:91:e5:df:96:bb:34:51:c7:78:ed:af:ad:
6e:a8:b0:83:f2:9c:42:ee:f4:ef:33:c2:90:9d:1a:
a6:de:48:14:a8:5a:f2:e7:64:c2:94:3d:68:05:f3:
d1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F4:0F:EC:76:55:C5:E7:0C:98:DA:FA:C0:57:F3:7E:D4:7D:4D:18
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2_QP7HZVxecMmNr6wFfzftR9TRg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:47:49:cc:cb:66:7e:c0:60:ed:5f:85:b3:48:16:d5:1c:e3:
c4:a0:40:c1:4e:b2:5f:81:39:c6:89:e8:f9:d6:19:7c:5a:32:
af:8a:f4:d2:ea:92:95:66:a7:9a:f6:e3:5e:f5:79:a4:9d:6b:
aa:0f:a5:96:2e:63:cc:25:83:27:ef:6b:20:28:0d:14:8e:6d:
0a:df:4d:47:50:34:e0:2a:81:20:8b:ab:93:32:89:c1:34:9b:
ff:89:47:c2:fa:bf:4d:07:65:e7:55:dd:04:c3:40:08:31:70:
be:21:d9:8a:ee:12:ca:f2:dc:77:0c:66:bc:cc:ab:7b:85:46:
b7:67:e6:14:e1:ad:5d:39:c8:d8:2f:6f:67:d5:32:c8:e6:95:
b4:e5:e9:62:10:1a:01:6b:dc:b9:4c:bf:11:d1:67:c9:72:2e:
c0:ee:3d:49:11:8d:97:1c:58:8a:be:ab:a2:03:22:7b:72:fe:
dc:04:9f:96:f2:5e:b0:b6:34:29:87:8e:84:eb:0e:ab:b2:a1:
b2:f7:38:e7:a3:09:86:66:a4:30:2b:a4:d2:e0:b7:fa:18:10:
c5:3b:96:09:ba:10:3f:ba:8d:83:cc:f8:b2:00:b5:6d:22:ac:
10:f3:1c:91:a9:c5:3b:c6:7c:da:8c:01:96:ec:11:cf:f3:e2:
1f:12:69:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:54:10 2025 by rpki-client