Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/3l-nb75oKuA84RiIOLpur-XNxpY.roa
File: 3l-nb75oKuA84RiIOLpur-XNxpY.roa (raw, json)
Hash identifier: 5NZTjt4n4cI9QI6eGlTRdhjZpVjmacwyl80F0CK3Ctw=
Subject key identifier: DE:5F:A7:6F:BE:68:2A:E0:3C:E1:18:88:38:BA:6E:AF:E5:CD:C6:96
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0975
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3l-nb75oKuA84RiIOLpur-XNxpY.roa
Signing time: Mon 19 May 2025 16:38:11 +0000
ROA not before: Mon 19 May 2025 16:38:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2421 (0x975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 16:38:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DE5FA76FBE682AE03CE1188838BA6EAFE5CDC696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:95:02:b2:cf:56:b9:1d:a8:30:6a:2d:4c:
62:de:a8:67:7d:e2:94:0e:3f:f0:81:f9:33:5e:f0:
1a:df:1f:98:71:0a:54:52:63:d1:03:c5:01:85:c8:
93:9d:70:66:c2:76:5f:c2:d8:fb:e3:79:d7:bb:cc:
2f:6f:15:98:d0:0b:ce:50:af:5d:8c:11:d6:05:de:
51:5c:12:24:b9:18:72:11:fd:63:c0:76:93:e4:4c:
87:51:e7:9a:5b:2d:15:ea:cb:c2:ad:f7:87:28:e1:
e7:68:84:67:97:43:11:05:22:eb:c1:c8:3b:42:0c:
dc:9a:cf:d4:99:7c:6c:39:83:ff:bc:ea:fa:c4:15:
68:64:ff:50:8a:55:8d:9a:9a:e6:1f:87:cb:6e:bc:
5c:11:b2:57:b2:f0:4a:0f:36:5e:cd:e2:78:68:52:
a2:14:16:91:2b:19:fa:11:21:a3:f2:36:e2:6e:c9:
02:06:df:1a:27:2b:e8:12:64:f2:76:62:d5:5f:94:
29:d0:1f:ef:53:07:13:6d:0d:e4:5a:1d:1f:28:b9:
24:43:f7:c8:2b:15:a1:9f:31:e3:b3:cf:7a:15:97:
c1:54:0c:c0:e2:7f:3a:2b:1b:e7:85:e2:8c:3a:e1:
aa:16:78:62:8a:00:aa:06:ae:da:05:ca:78:46:67:
eb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5F:A7:6F:BE:68:2A:E0:3C:E1:18:88:38:BA:6E:AF:E5:CD:C6:96
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3l-nb75oKuA84RiIOLpur-XNxpY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:30:9b:fa:9e:f9:32:3f:3c:cf:1d:cf:68:35:c9:3f:46:3d:
d6:a0:cd:ce:36:6f:99:64:bb:40:09:46:a6:40:2c:68:fe:15:
31:36:d3:10:09:8f:2d:45:d3:4d:9d:ac:25:d4:73:66:ee:d6:
c9:13:50:ab:c0:1a:40:e0:3e:46:35:40:8b:df:9b:b9:53:96:
f7:51:7e:10:1e:b5:31:e5:ba:aa:53:1e:00:82:9e:dd:55:dc:
6f:16:1c:ff:ed:2c:d2:f8:63:ed:a1:67:63:7a:11:a7:49:a2:
56:f4:f0:29:8a:05:9d:15:55:d1:a2:3a:94:70:e3:89:23:6d:
2f:6d:56:fd:03:f8:38:fa:39:88:21:e9:d8:3b:cd:ee:ad:0a:
34:72:1e:28:09:8a:1d:a7:e6:66:f5:78:39:e7:76:63:b2:ae:
1c:7b:ad:a8:81:96:fe:bb:3a:ec:95:5c:0f:81:e7:1b:19:8a:
a1:84:1f:9c:54:86:2c:8c:b8:b1:87:fd:e4:af:5e:ab:55:4f:
6e:5b:70:ce:70:8b:28:af:d1:1a:d5:30:a2:53:ec:31:59:42:
26:22:a5:49:77:ca:4f:0c:3c:ff:6e:60:96:e5:69:72:8a:9b:
0b:f2:36:fa:be:b0:2f:1a:31:08:7a:b5:57:b4:74:ea:b6:07:
31:a5:15:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:03:03 2025 by rpki-client