Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Nc8rNSH6lWHAAiVP3Wuu6RStibM.roa
File: Nc8rNSH6lWHAAiVP3Wuu6RStibM.roa (raw, json)
Hash identifier: MB5vdVFuZx8E8nSp5JphZTQJ9yrCU/oD35S0c47gfKI=
Subject key identifier: 35:CF:2B:35:21:FA:95:61:C0:02:25:4F:DD:6B:AE:E9:14:AD:89:B3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C39
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Nc8rNSH6lWHAAiVP3Wuu6RStibM.roa
Signing time: Fri 23 May 2025 09:09:08 +0000
ROA not before: Fri 23 May 2025 09:09:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3129 (0xc39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 09:09:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=35CF2B3521FA9561C002254FDD6BAEE914AD89B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:b8:4f:b7:d7:59:ba:71:dd:a7:bf:dc:ec:
ef:66:3d:91:90:cf:be:a4:1c:d7:37:ec:c5:31:e4:
f0:0d:06:09:fe:25:cd:78:d7:e8:39:b4:22:a2:c0:
d5:fe:cd:7e:cd:d2:2b:b7:11:11:60:63:31:73:62:
49:9c:57:92:87:a4:6b:a1:3e:39:d5:b2:81:92:9c:
4c:3a:96:2c:ea:f5:dc:21:4a:82:e9:4f:0d:37:db:
78:24:a4:96:49:07:f0:19:7f:ec:33:79:4e:4a:78:
78:c7:01:ad:16:7b:60:5d:b6:ad:bf:be:0c:34:51:
92:21:f5:be:45:be:3f:15:e8:3e:51:3d:e0:06:35:
39:9c:1f:2c:25:d8:19:4a:59:15:7f:46:49:8f:34:
bb:c1:7f:68:e7:84:7a:ee:13:83:40:f6:d3:02:a1:
36:11:42:77:1b:bb:fe:04:df:7e:c5:0e:0c:7c:31:
92:2a:9a:20:19:c7:d1:84:52:8b:7a:52:43:57:64:
51:f8:e9:ea:8c:3c:16:81:0d:cc:d7:49:4f:4f:b7:
22:70:ba:2d:30:33:09:f1:86:2e:ae:0e:04:0e:cd:
27:01:42:ae:63:94:d8:da:ce:42:5c:02:69:f0:11:
33:97:f5:eb:43:32:81:48:aa:48:44:63:9e:ae:a0:
77:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CF:2B:35:21:FA:95:61:C0:02:25:4F:DD:6B:AE:E9:14:AD:89:B3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Nc8rNSH6lWHAAiVP3Wuu6RStibM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:f8:a7:3c:e2:f5:bb:c9:14:5b:df:db:ff:d9:a5:bc:77:24:
d5:76:8b:4c:e1:5e:34:e4:31:f3:10:12:34:63:a1:85:23:60:
28:0a:29:bd:da:99:aa:1e:81:17:71:f1:64:65:c4:d8:54:2c:
98:a2:75:d2:20:76:14:03:68:93:1d:59:68:66:35:f9:22:c0:
0b:97:44:0e:b2:95:29:ef:32:c6:16:d4:6f:3e:5d:15:a8:5e:
f7:52:19:8b:d2:0d:5f:0f:7c:fa:d2:b9:cf:52:d7:5a:32:fc:
9c:58:f7:d1:f5:86:17:bb:49:d8:e3:bb:76:c5:86:49:a1:f8:
d7:ee:e9:36:a6:6a:36:94:43:ec:81:06:fb:fb:9b:bf:04:41:
a4:23:8b:75:e1:8b:ad:2a:49:b3:b2:38:8c:04:49:48:e6:fd:
30:d2:7e:88:9e:90:f1:c6:a1:7d:55:56:83:f5:77:a4:e4:21:
fb:a5:25:30:5e:de:a8:3a:75:0e:33:fd:8a:98:44:5b:23:2d:
7e:3f:2f:95:02:63:5a:4d:bb:54:2d:56:04:57:08:80:38:2c:
12:09:36:aa:de:02:b7:6f:69:35:f7:54:50:41:c8:40:f0:81:
ca:4d:9c:71:b9:ea:b2:f1:66:98:a2:78:50:b0:b5:ba:75:c2:
de:dd:90:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:19:41 2025 by rpki-client