Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/RcPx0ut35amKq2cvxWKrXmn6soA.roa
File: RcPx0ut35amKq2cvxWKrXmn6soA.roa (raw, json)
Hash identifier: mKUfdCIjqRoHrNDh+6/szKP49H+qoodRfbByg5Req9c=
Subject key identifier: 45:C3:F1:D2:EB:77:E5:A9:8A:AB:67:2F:C5:62:AB:5E:69:FA:B2:80
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 06D5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RcPx0ut35amKq2cvxWKrXmn6soA.roa
Signing time: Fri 16 May 2025 04:38:13 +0000
ROA not before: Fri 16 May 2025 04:38:13 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1749 (0x6d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 04:38:13 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=45C3F1D2EB77E5A98AAB672FC562AB5E69FAB280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:b0:94:dc:02:4a:be:58:2a:f0:7c:45:c7:
c1:9b:9d:0e:db:bc:6b:f3:c0:6d:11:b1:92:32:5f:
08:e3:b3:bb:a0:9d:8e:62:bc:15:db:b1:0e:be:b9:
f6:d3:48:39:0a:ae:24:c7:69:dc:58:59:f4:4a:71:
40:64:be:2c:dc:50:7e:eb:d7:0a:86:09:12:51:ef:
49:de:2b:d5:d4:1c:83:b3:10:cc:72:db:98:53:4f:
f9:4a:e1:59:b5:a6:98:7e:0d:0c:33:a5:6a:22:e6:
76:06:99:ac:ff:b4:df:13:45:02:56:c6:65:c7:d6:
1d:b7:a7:c0:8f:ac:51:c1:53:8a:0b:b3:0c:91:1d:
ad:ca:60:ca:20:3f:aa:d3:46:b2:f2:1a:02:24:f9:
0d:ae:29:f0:82:16:67:4f:6f:41:98:e5:b4:3a:04:
23:ca:16:60:77:ae:85:ef:05:6c:03:de:7c:9a:4d:
36:0b:33:0f:16:18:37:76:49:30:e2:8a:f8:ef:7d:
33:1a:63:33:90:c5:2b:a9:b8:de:1b:f3:68:b5:f8:
55:2a:4c:4b:42:67:f9:bd:3e:7e:d1:57:2f:13:6f:
3e:6c:12:9b:4f:c6:0a:a8:d2:76:56:1d:e1:9b:42:
76:d0:0a:20:fe:97:dc:d2:30:e7:eb:7f:56:0c:bb:
45:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C3:F1:D2:EB:77:E5:A9:8A:AB:67:2F:C5:62:AB:5E:69:FA:B2:80
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RcPx0ut35amKq2cvxWKrXmn6soA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:74:7c:7a:8c:21:88:54:87:ef:56:bd:6e:68:28:78:c9:c7:
ea:5b:5d:6b:87:f7:26:26:10:b6:b9:e4:8f:e8:d8:c8:f8:88:
c6:e7:99:ab:11:7e:ea:b9:77:c9:5f:b6:2b:c3:1a:46:99:2c:
9e:8b:63:0d:f9:7f:ed:c3:27:c4:a2:fc:e2:7e:f4:27:7e:14:
0f:45:da:1a:aa:5d:15:c4:f2:ea:d3:dc:9d:d6:43:0a:64:38:
6a:3c:cb:ee:9b:63:8b:af:cf:0e:57:ac:eb:d5:a9:c5:52:b5:
0f:a4:75:35:f3:eb:02:9e:b4:95:1b:9b:26:de:39:89:63:45:
82:d5:69:2b:45:1f:57:34:c1:85:5b:cc:cd:60:4b:22:3b:ea:
63:01:3a:ea:3c:4d:43:80:60:9b:f4:9e:f0:99:a2:c1:0a:15:
bd:a2:e7:ac:9e:6a:bc:3f:e9:21:4b:e3:80:20:b6:76:cf:ee:
b4:8f:83:2d:9b:ba:c3:5f:24:3d:6e:4a:26:6d:3d:d4:58:d1:
60:76:e4:e2:15:6e:06:02:45:d3:23:8b:a6:9c:51:bd:81:47:
2f:22:62:38:85:60:cb:42:bb:fe:02:b6:2e:fb:4f:af:7e:37:
ed:cc:6c:20:9a:72:28:fc:03:da:8d:f9:cc:61:70:c3:a3:66:
69:79:0a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:07:58 2025 by rpki-client