Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/9WIM8-I3DQcRilLXXY8rt2kOvI8.roa
File: 9WIM8-I3DQcRilLXXY8rt2kOvI8.roa (raw, json)
Hash identifier: pyGbUyp9ypzjSBI/u/hqvozBwMAkjEyfc8bOg7SaZd8=
Subject key identifier: F5:62:0C:F3:E2:37:0D:07:11:8A:52:D7:5D:8F:2B:B7:69:0E:BC:8F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 08D5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9WIM8-I3DQcRilLXXY8rt2kOvI8.roa
Signing time: Sun 18 May 2025 20:38:07 +0000
ROA not before: Sun 18 May 2025 20:38:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2261 (0x8d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 20:38:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F5620CF3E2370D07118A52D75D8F2BB7690EBC8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:99:bd:2b:a0:e0:ce:8b:79:a1:be:43:0c:c1:
f6:33:11:f5:86:f8:91:d6:f7:09:45:f1:dd:c8:c0:
9d:12:6c:0a:ae:56:9a:b3:33:fa:73:05:c5:67:65:
cb:34:68:90:b5:1a:7c:d3:29:db:8a:6b:dd:14:a1:
15:db:b8:99:fd:aa:6f:57:e7:24:0c:e5:f0:72:eb:
7c:05:55:9d:87:82:ca:c6:e2:af:f9:78:6b:bd:fe:
62:03:0e:35:3f:84:d0:eb:73:e6:72:ed:e0:04:96:
37:c3:0e:bc:65:2d:80:29:1e:5e:90:b0:70:8a:52:
27:84:eb:21:d0:a9:b9:6d:ec:b0:7c:75:d3:3b:29:
7e:b0:41:35:c2:fa:e5:cf:62:0f:8b:13:52:68:5e:
7a:7a:af:ff:0b:3a:20:2c:7a:61:26:55:4b:0c:ad:
7d:5d:6a:90:00:15:94:3a:13:93:41:7c:43:51:0b:
c9:95:48:e7:6e:46:8c:3f:ed:32:65:a2:73:8b:b4:
09:1a:f9:4c:a2:30:09:df:1e:98:f0:eb:4b:02:02:
c1:c9:20:f4:c9:46:64:86:7f:d0:62:60:54:e5:21:
b9:f0:12:13:64:29:8c:9a:3e:9a:e8:f7:72:ed:bf:
20:d6:be:c3:c4:56:e9:63:f6:d4:0a:23:86:58:40:
40:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:62:0C:F3:E2:37:0D:07:11:8A:52:D7:5D:8F:2B:B7:69:0E:BC:8F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9WIM8-I3DQcRilLXXY8rt2kOvI8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:66:bf:85:49:c8:fb:5f:fa:ce:9f:a1:cb:d0:c4:4b:96:58:
cb:2d:92:b0:9b:1c:9e:25:f1:33:af:75:24:e5:4c:e3:f1:8b:
5f:9c:13:7d:8a:76:2c:c1:4e:6f:9d:57:85:fe:1b:50:01:6c:
34:43:7d:e7:09:d4:c5:f1:c2:ec:36:ce:47:2a:e9:01:71:a2:
3d:cc:d3:c6:63:6d:52:09:9c:3b:d4:b4:d2:61:83:2a:f1:87:
97:e9:3e:23:85:81:92:09:0f:06:38:0e:7b:9e:5e:df:f8:6c:
c1:3c:d8:a9:55:4a:4b:f6:f4:cd:21:0e:31:38:97:e1:88:47:
66:84:61:89:b2:24:b9:e2:3f:9a:73:ee:c3:13:4d:b4:6a:f7:
4d:20:df:6c:d4:13:95:c5:92:f3:99:b6:d2:c9:d0:0d:a2:ea:
c3:51:5d:15:f5:15:68:08:cc:42:73:68:ba:ba:47:0a:64:ad:
a0:ff:8d:88:fb:52:c6:10:6e:52:8f:ed:02:87:1b:51:9c:6e:
67:d8:d4:b1:8b:d2:d7:0a:69:21:6e:f6:7b:88:da:0e:fd:8b:
e1:30:bd:f8:0f:03:59:37:cf:9c:fb:9f:06:d9:2a:d7:02:08:
67:7f:ff:4c:e4:8a:c5:12:73:da:06:12:c5:93:de:ec:4c:d8:
ad:e2:34:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:08:24 2025 by rpki-client