Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/5uWiasa-bA1aIIOLBrjaTzIVZis.roa
File: 5uWiasa-bA1aIIOLBrjaTzIVZis.roa (raw, json)
Hash identifier: HG5qi1PrnO3HnEyB7y0q1bXT0yFR+QsytpvubgV5ECs=
Subject key identifier: E6:E5:A2:6A:C6:BE:6C:0D:5A:20:83:8B:06:B8:DA:4F:32:15:66:2B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E19
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5uWiasa-bA1aIIOLBrjaTzIVZis.roa
Signing time: Sun 25 May 2025 21:08:54 +0000
ROA not before: Sun 25 May 2025 21:08:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3609 (0xe19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 21:08:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E6E5A26AC6BE6C0D5A20838B06B8DA4F3215662B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:05:b4:e7:2c:27:02:d8:7b:5b:33:60:7b:54:
4e:f5:ff:c1:1a:f6:0b:a3:b1:9a:16:b5:24:d9:04:
e8:8c:e1:26:54:72:1d:b4:07:87:c4:80:fb:35:0a:
86:e1:18:98:b0:6e:00:3a:bb:bd:9c:50:12:dd:11:
91:96:bc:b5:f4:9c:ef:03:fd:c8:7c:66:3f:34:0d:
38:42:0d:c5:f0:af:ab:ae:5e:cf:b6:95:39:d7:eb:
87:aa:89:89:6a:97:a7:24:27:bc:a7:4d:37:27:79:
4d:bc:c3:e2:5e:ff:19:18:b6:36:91:66:2b:a6:0f:
79:65:77:2a:c3:47:eb:8d:70:75:31:ce:d8:68:54:
27:10:73:71:4d:ba:7f:03:ee:46:5d:78:8a:6c:35:
2c:19:c7:e6:cd:28:a1:7e:ce:dd:94:2d:fe:e0:e5:
37:59:25:88:64:36:2f:4f:d1:d0:05:67:d8:00:11:
af:f7:67:cb:42:51:b9:c7:7b:a7:2c:10:cd:12:48:
7d:15:ee:90:a8:37:90:b4:dd:88:7d:0c:81:93:ec:
58:ad:be:c5:36:15:26:dd:88:1c:78:a8:4b:75:a0:
c6:8e:1a:f0:66:1d:48:82:a1:61:41:e6:f7:34:98:
fe:ac:30:68:4a:20:71:51:ee:a9:1b:f1:6b:84:0c:
7a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E5:A2:6A:C6:BE:6C:0D:5A:20:83:8B:06:B8:DA:4F:32:15:66:2B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5uWiasa-bA1aIIOLBrjaTzIVZis.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:ec:f0:62:4b:65:e6:08:f3:70:13:b1:42:5b:be:7c:21:67:
9a:45:52:ea:8d:b0:41:9b:62:d0:bb:25:28:81:74:bf:81:4f:
ce:28:7a:e5:17:2f:05:03:da:6b:40:d3:37:45:11:12:db:8e:
37:41:1a:c6:01:ca:cf:9e:4c:73:f2:4d:f5:ee:96:4d:c1:88:
6d:2b:58:68:01:5f:0a:8e:0e:7e:4c:b6:e3:96:95:a0:ea:9d:
04:51:32:b2:6d:69:59:79:b5:ae:20:bd:ef:7e:16:0e:54:08:
b8:d1:82:56:54:a3:e7:5e:ee:88:a5:77:e6:af:88:27:8a:1a:
bb:31:85:54:c2:48:c4:ac:0c:b3:51:a5:b2:d9:87:25:dd:8e:
56:5d:34:7f:8b:c6:a6:68:7f:33:b3:68:df:39:48:d2:c2:aa:
c4:b1:4d:c0:bb:d9:b8:3f:53:fb:31:fd:89:f3:19:d7:7d:53:
6f:2f:c7:64:79:1c:29:14:d7:ac:75:34:c6:49:b6:42:60:f0:
6d:51:7b:e8:51:d7:df:58:af:b9:d2:04:f2:62:e1:5e:d0:fd:
ef:ec:bc:68:7c:03:2f:1e:0d:a3:f5:04:ed:21:47:a5:51:9e:
16:ca:e3:83:ea:9f:46:4d:46:2f:bd:20:25:1e:41:df:b8:32:
d7:c1:52:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:16:06 2025 by rpki-client