Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/VGet8FKYa0u-o3f0CysiOuh4kk4.roa
File: VGet8FKYa0u-o3f0CysiOuh4kk4.roa (raw, json)
Hash identifier: DxJ5/16p8xzKQCGNAfsCLGDw1YLegkj/YRUggCk7Dzk=
Subject key identifier: 54:67:AD:F0:52:98:6B:4B:BE:A3:77:F4:0B:2B:22:3A:E8:78:92:4E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 018D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VGet8FKYa0u-o3f0CysiOuh4kk4.roa
Signing time: Fri 09 May 2025 03:37:45 +0000
ROA not before: Fri 09 May 2025 03:37:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 03:37:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5467ADF052986B4BBEA377F40B2B223AE878924E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4c:7a:cc:04:59:64:dd:6a:dd:d0:d2:dd:9b:
05:cb:d8:49:44:44:57:2c:86:3f:8d:a3:c9:81:57:
db:90:b7:c2:47:db:5d:dc:aa:8f:a0:f7:66:53:03:
04:94:e5:a0:bc:4b:c5:d7:45:bd:38:52:66:07:b9:
11:6d:3f:23:a9:e3:9f:4d:60:59:ca:aa:81:49:55:
29:f9:d3:b2:d0:a5:5e:9d:6c:1d:12:a1:c0:f9:d4:
bd:da:49:eb:2f:42:2b:c7:ea:a6:0f:af:63:36:e3:
f2:73:aa:75:0f:8d:cf:55:8a:39:04:19:ae:95:23:
c2:97:31:1d:00:f5:72:e0:4e:b6:c1:e2:17:ac:ec:
bb:75:b4:72:bf:7a:37:8c:0a:33:fc:1f:c0:7e:f6:
89:f5:4b:3f:ab:17:a9:e3:79:21:aa:3c:fa:d5:4c:
5d:ca:37:d1:c2:5e:b1:3d:ae:14:61:1e:50:63:52:
b1:ce:71:e5:f3:d0:ec:9e:db:91:0a:52:ec:a8:ec:
60:6e:e8:9b:a6:4b:f5:2e:e9:59:69:03:cc:26:ae:
4a:5b:2c:92:96:a2:13:54:2e:b6:54:d3:9d:f5:b6:
ec:ed:9c:5a:95:f7:12:77:65:a2:27:87:13:7d:31:
05:ec:d8:83:e5:2f:81:47:64:1a:6c:ab:5a:ae:9f:
1c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:67:AD:F0:52:98:6B:4B:BE:A3:77:F4:0B:2B:22:3A:E8:78:92:4E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VGet8FKYa0u-o3f0CysiOuh4kk4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:9f:9e:a9:20:ee:12:dd:7f:f0:09:9a:36:c8:bd:07:56:4a:
ac:7f:bf:d1:e1:1c:e0:ce:50:a5:6c:2f:56:5d:f5:75:65:8b:
a4:a8:dd:8b:d3:ab:99:2f:73:fc:85:41:bb:3a:5a:a3:85:b6:
ea:eb:08:d1:27:0e:64:18:d9:23:bf:25:d9:ec:d8:64:d5:be:
80:cc:25:c4:d4:11:34:74:ce:d9:f2:16:e4:b4:59:bc:00:55:
01:95:8f:4b:a4:71:87:36:1e:ca:c5:ae:e8:fc:75:f3:50:16:
29:53:2b:0b:05:09:1d:93:73:ab:69:a1:14:03:78:60:59:cc:
07:91:5b:25:05:d2:78:a6:a8:87:c4:d4:24:c6:87:a9:ff:7c:
76:24:b5:47:13:24:c3:3b:44:bc:04:2f:62:24:fe:fc:7f:ce:
ef:1c:1a:00:8d:2c:b0:c5:5c:b2:c7:99:91:75:4c:7e:75:59:
ae:ad:83:ed:b2:ca:46:55:79:94:67:32:c5:7a:23:fd:7b:67:
4e:42:0b:ea:ab:dc:a9:85:5d:98:84:87:59:1b:85:37:d9:57:
6b:36:96:6e:c2:58:f1:50:1e:44:4e:43:40:8c:68:5b:3a:c0:
ac:aa:4a:6b:90:f5:07:e1:b6:06:99:ce:24:1a:ec:a1:63:5b:
7e:fc:73:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:06:00 2025 by rpki-client