Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/9hdFuIHsspLO57-k_dXroAoR31M.roa
File: 9hdFuIHsspLO57-k_dXroAoR31M.roa (raw, json)
Hash identifier: EWpOAr0d7wV4yodetdeZtZFk0fxWCodu8+n4jx5bnLw=
Subject key identifier: F6:17:45:B8:81:EC:B2:92:CE:E7:BF:A4:FD:D5:EB:A0:0A:11:DF:53
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04C1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9hdFuIHsspLO57-k_dXroAoR31M.roa
Signing time: Tue 13 May 2025 10:10:59 +0000
ROA not before: Tue 13 May 2025 10:10:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1217 (0x4c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 10:10:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F61745B881ECB292CEE7BFA4FDD5EBA00A11DF53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:16:5e:75:df:05:87:74:9d:db:8c:1b:6e:
7e:10:11:39:3d:d7:13:0f:da:29:08:cb:62:ec:85:
d0:de:74:35:0c:5e:0c:b5:f7:0b:cc:6d:2e:d4:e3:
5f:d8:7c:e6:2d:7b:73:81:2a:9c:34:0a:f1:59:91:
0c:ae:2d:75:1a:e9:ff:a7:93:bf:11:c6:fd:55:3a:
91:e4:84:d6:a9:d9:f7:1a:ad:e2:47:bd:d6:54:30:
3c:41:74:d5:3c:de:b7:70:e4:63:0e:a1:e8:9d:35:
f4:71:09:67:81:1e:31:70:15:2b:aa:af:51:59:0f:
c3:ef:f7:9c:1f:6a:58:97:bc:76:4f:4c:2f:f1:aa:
b2:c2:92:6b:54:8f:07:a6:1c:53:ec:96:7a:f7:24:
94:c9:d6:5d:7d:82:25:30:ec:fe:60:96:08:65:1b:
eb:36:7f:b3:71:3c:53:7e:8f:bc:69:05:3b:a8:8b:
83:df:b2:4f:50:1d:8a:c9:4a:db:cd:06:31:f4:ba:
7c:43:74:b9:45:30:e5:43:53:ce:51:f5:da:62:ad:
cf:f1:86:02:11:63:1e:58:a9:db:98:2b:2f:f6:b2:
32:8d:b8:63:fc:bb:78:a1:bc:ea:df:fd:9f:75:e2:
f8:8b:bc:68:e1:c8:b0:9f:75:72:0f:8d:9a:79:28:
1e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:17:45:B8:81:EC:B2:92:CE:E7:BF:A4:FD:D5:EB:A0:0A:11:DF:53
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9hdFuIHsspLO57-k_dXroAoR31M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:7a:2e:e0:0b:2b:92:c0:a7:14:e9:38:2c:b0:72:a6:61:d4:
aa:9e:fc:c2:d9:98:1e:1a:31:a3:68:36:ed:d3:ce:c1:f4:fa:
e4:6d:40:12:f9:17:67:a1:5d:e2:21:26:58:e2:e4:e0:eb:a6:
49:de:63:5e:00:91:6f:ce:11:a3:be:db:a9:e3:8f:41:96:01:
ad:8d:42:a8:e5:c9:51:2e:f1:75:86:cf:ba:55:51:29:13:ef:
32:a8:e9:26:0c:f5:00:8f:87:2c:28:d1:fe:d6:da:e2:0e:9d:
35:0b:38:26:1c:09:fd:16:12:66:0a:69:95:16:f3:e6:20:57:
8a:54:4f:a7:ed:bf:bc:2c:9c:e0:ca:a1:b1:f1:f9:c8:ce:41:
d9:06:e1:eb:af:ee:ac:81:30:38:81:77:c0:08:fb:31:ed:32:
70:36:31:d9:d7:7f:3f:31:0b:8f:56:1d:3c:15:60:cc:5a:63:
71:44:29:cd:43:b5:75:19:50:cd:aa:53:4c:2d:5e:cb:6b:44:
a8:f6:72:8f:43:c3:19:01:be:c1:3c:a5:85:aa:f8:46:8c:87:
f1:40:c1:70:b3:05:a0:ed:d2:00:d2:17:db:48:c8:e2:04:ec:
e7:80:07:c7:40:90:86:35:d4:d5:f0:ec:33:0f:4d:a5:66:e3:
ba:7c:84:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:14:08 2025 by rpki-client