Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/OuE3mBmnxSZyZ9PYwUUwqLvE4hc.roa
File: OuE3mBmnxSZyZ9PYwUUwqLvE4hc.roa (raw, json)
Hash identifier: Eq1mvEghv2ewgreT9wJK31DLiqYBA9yjjGD+vnfoqiU=
Subject key identifier: 3A:E1:37:98:19:A7:C5:26:72:67:D3:D8:C1:45:30:A8:BB:C4:E2:17
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D41
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OuE3mBmnxSZyZ9PYwUUwqLvE4hc.roa
Signing time: Sat 24 May 2025 18:08:32 +0000
ROA not before: Sat 24 May 2025 18:08:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3393 (0xd41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 18:08:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3AE1379819A7C5267267D3D8C14530A8BBC4E217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a0:f4:c6:45:45:ae:25:24:e7:e4:ae:3a:17:
3f:cc:d0:73:b6:7e:10:28:03:65:51:d5:9b:b1:ff:
8d:39:a8:8a:ea:9f:c9:a3:91:3d:a4:33:9b:f0:d7:
18:4b:6c:d1:19:d8:a3:bc:c7:be:bd:f9:d4:57:aa:
33:c0:c2:30:ec:99:7b:90:95:a3:3d:27:73:25:4d:
fc:a4:21:f3:12:91:4b:75:98:0d:1e:81:e0:01:ec:
1c:51:7e:55:57:cf:60:24:da:70:d6:58:9b:eb:22:
b8:66:41:54:37:18:06:58:7b:ec:77:8e:bd:24:78:
e9:d6:61:00:d0:76:96:74:26:7d:ec:8b:92:ad:9d:
70:3a:d1:51:a1:6d:53:84:0f:30:33:e7:5e:df:f4:
cb:e3:7b:96:cc:73:e4:19:58:ec:6d:f6:c0:5b:7f:
17:12:3f:d5:f1:c2:11:5c:64:4f:7d:00:10:7a:dd:
aa:dc:fa:ce:98:e9:3d:7b:e2:97:74:89:15:0f:f8:
26:ee:1c:3e:5e:4a:f6:21:12:98:68:33:95:a7:9e:
7c:68:14:70:52:8c:48:e2:aa:ff:eb:84:ef:60:8c:
18:bb:fb:e7:84:e3:ad:d9:cc:cf:45:21:fa:2f:56:
16:97:94:72:c2:98:40:44:8d:95:21:c6:ee:3d:f6:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E1:37:98:19:A7:C5:26:72:67:D3:D8:C1:45:30:A8:BB:C4:E2:17
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OuE3mBmnxSZyZ9PYwUUwqLvE4hc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:b6:ae:db:5f:31:4f:bb:3c:f7:bb:fb:1c:72:5c:0f:92:9c:
b6:a3:6e:af:ff:9d:10:3c:fd:67:9c:bd:87:d0:e6:95:a5:ec:
4d:af:ec:21:b2:6c:b0:47:c0:ef:40:bb:39:85:cf:fa:df:c1:
bc:b7:3b:84:a3:5b:a6:b6:79:fc:fd:0f:50:72:70:b6:51:db:
db:f9:cd:e7:cf:c5:1b:00:a0:22:f8:49:32:fc:0f:2a:f7:e6:
14:7e:14:9c:25:6c:ee:8a:12:54:93:0c:cd:d8:e1:52:1c:f8:
4d:bd:f4:71:99:9d:a7:e6:b4:88:23:f8:f2:29:18:5f:01:0c:
d6:35:11:11:13:df:6d:02:89:7d:4b:1a:84:64:c4:a2:c3:ef:
cf:24:4a:d6:52:4f:8b:c2:80:49:21:42:1f:4c:ad:5e:cc:10:
9d:ee:13:1a:d9:f8:15:ed:8f:e5:c6:16:4e:c3:e2:8a:95:7b:
cc:37:d0:43:7e:dc:07:67:37:b6:7d:b4:aa:4e:4c:b3:b1:fc:
06:47:b1:62:9d:99:d1:53:4d:cd:e6:f4:0d:16:82:e0:e6:a9:
96:4f:29:4e:9e:a1:e7:81:77:2a:7c:75:17:86:20:4c:68:3c:
55:4b:f6:7c:59:fb:76:be:4e:7a:4b:f6:5c:41:8f:0b:6a:75:
2f:d7:8d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:08:24 2025 by rpki-client