Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/KdusehTdj4mFaS8_gCE7FW_-g38.roa
File: KdusehTdj4mFaS8_gCE7FW_-g38.roa (raw, json)
Hash identifier: lWCGAGYNPf+kzdKOZRjVjfz5aEE7uTo9w04hBHk7SRk=
Subject key identifier: 29:DB:AC:7A:14:DD:8F:89:85:69:2F:3F:80:21:3B:15:6F:FE:83:7F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0759
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KdusehTdj4mFaS8_gCE7FW_-g38.roa
Signing time: Fri 16 May 2025 21:08:15 +0000
ROA not before: Fri 16 May 2025 21:08:15 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881 (0x759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 21:08:15 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=29DBAC7A14DD8F8985692F3F80213B156FFE837F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:66:03:d2:a0:7d:81:8f:be:3d:2b:00:43:7f:
88:0d:77:84:0a:2a:aa:a9:a3:da:52:52:ba:9c:03:
d2:37:f2:9a:15:07:a3:ba:eb:08:d5:55:03:74:ca:
8b:bc:bd:49:0d:68:87:f4:8f:3f:9c:22:52:f0:8f:
1e:b5:ab:88:63:3c:32:2b:39:3c:ec:50:dc:78:12:
95:58:58:0d:af:40:bf:72:7a:c0:34:52:58:e9:0f:
71:70:24:2d:14:c3:97:b4:a9:1d:8f:76:1e:a3:d3:
08:ab:f3:14:c6:48:aa:e7:78:8f:02:dc:79:bd:e1:
97:d3:90:ca:48:08:28:69:a3:3d:95:4b:f2:75:6d:
2e:a3:3f:90:21:ea:cb:c3:b8:ba:b0:db:e6:9c:9c:
6e:e0:93:ce:ad:3e:7f:be:94:9d:a3:61:b3:d3:b9:
25:b6:1c:74:50:b8:f3:3f:c7:a4:bc:29:ba:06:91:
ee:ad:67:1a:aa:56:51:42:9e:4d:8c:95:aa:3d:f2:
7d:1c:51:66:86:c2:3a:88:99:03:22:6b:9c:49:88:
76:00:ad:e1:41:44:57:6e:73:22:61:21:d8:89:8a:
28:5f:ee:85:c7:60:b5:45:50:d6:82:e6:bb:42:f0:
2e:94:12:83:71:e9:93:24:d9:bd:fe:87:2b:91:ab:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DB:AC:7A:14:DD:8F:89:85:69:2F:3F:80:21:3B:15:6F:FE:83:7F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KdusehTdj4mFaS8_gCE7FW_-g38.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:1c:1e:29:9d:03:02:5c:fc:67:b4:c5:69:23:2c:cc:f2:46:
e3:a5:6b:83:df:da:0f:4c:dc:9c:09:2f:7a:83:09:8c:2f:6a:
8e:59:c6:85:30:d7:7a:b5:c3:d9:36:ce:10:b8:a7:f9:6f:52:
d6:85:d4:37:78:11:3c:2b:8a:4a:14:7e:69:4a:16:69:aa:b4:
a8:f6:6e:36:f4:31:89:c8:71:95:d8:1a:63:d9:9b:02:93:1e:
75:91:0d:3b:47:0a:99:88:7c:07:98:70:0b:e2:dd:ce:95:c2:
b7:3f:b2:ad:d8:7f:e8:53:78:a1:c5:df:f9:d8:3f:ba:44:f9:
3b:4c:80:f8:f1:d6:79:02:0a:cc:d2:3d:f4:41:fd:bb:14:3b:
c0:ed:62:99:3b:75:15:97:4e:32:87:41:a8:13:88:73:2c:80:
2c:c9:02:c3:8c:80:1f:85:30:ab:a3:a9:4e:77:71:9b:3b:7c:
fb:e7:06:ef:89:ed:58:78:e4:d1:cd:7e:5a:ae:0b:5e:5f:62:
9b:87:4d:06:d3:fb:90:dd:a6:0d:c1:5b:f8:c6:79:16:c7:b3:
7e:f0:79:79:12:d3:8b:9c:ab:ab:27:9b:b8:52:b7:9e:ac:06:
b4:0c:36:4c:b2:ac:5b:fb:11:c1:76:80:9e:cd:1f:fe:93:da:
4d:6d:e5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:08:56 2025 by rpki-client