Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/WWysbcFq-jP9voc7vAJzOHSjrXA.roa
File: WWysbcFq-jP9voc7vAJzOHSjrXA.roa (raw, json)
Hash identifier: Ti6Bt+0sBt5n6MkGNx4JOTMnu+IGHFFlBwwqh+9+NZg=
Subject key identifier: 59:6C:AC:6D:C1:6A:FA:33:FD:BE:87:3B:BC:02:73:38:74:A3:AD:70
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0845
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WWysbcFq-jP9voc7vAJzOHSjrXA.roa
Signing time: Sun 18 May 2025 02:38:14 +0000
ROA not before: Sun 18 May 2025 02:38:14 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2117 (0x845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 02:38:14 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=596CAC6DC16AFA33FDBE873BBC02733874A3AD70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ef:27:5a:9e:fd:ad:8a:b8:bb:22:05:8e:73:
a9:19:45:24:d5:f8:e4:6b:d7:86:61:69:0c:1b:95:
12:4d:a3:ef:0f:fd:1e:20:03:d6:c4:60:9d:6e:0e:
4b:59:6a:f9:01:98:db:43:79:a9:01:87:18:e5:ea:
ea:32:27:2b:8a:8e:79:3e:7d:45:83:ba:17:0b:2a:
17:95:c9:3c:d4:de:fe:18:47:cf:fc:04:d5:de:9b:
38:72:a9:34:47:e7:80:4a:e5:3f:40:92:d4:3d:ba:
e8:9c:79:1f:81:fe:55:94:42:55:28:d7:73:29:80:
44:35:31:cb:26:6c:29:17:2b:ce:5c:86:06:9b:8e:
9a:1a:8a:60:88:c8:50:23:8c:c6:b9:e4:46:e2:b3:
83:ba:e4:02:c8:80:2a:0a:cf:26:3d:5d:97:9d:ca:
a7:b5:0d:2c:9a:5e:a8:cd:77:df:ca:77:37:24:06:
e1:7a:50:5a:a0:e1:67:db:66:63:5d:b8:b4:00:41:
4d:66:e6:4f:b8:63:e0:f9:40:96:ff:c5:f3:87:97:
f2:52:e8:99:32:d7:5c:0c:16:c6:1d:1d:a4:85:d6:
3e:64:2b:13:c5:32:ef:30:ae:0d:4b:7c:41:de:09:
52:76:fc:86:51:f3:1f:34:fd:79:05:dd:8b:cc:7b:
75:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6C:AC:6D:C1:6A:FA:33:FD:BE:87:3B:BC:02:73:38:74:A3:AD:70
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WWysbcFq-jP9voc7vAJzOHSjrXA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:32:6a:b6:85:2c:71:02:e6:49:bb:10:c1:70:8b:cd:ae:97:
ed:00:de:8d:50:ce:1e:68:a8:35:a9:2e:69:37:5c:a7:9d:2c:
29:3c:80:c4:3c:d4:f3:e3:38:2c:6f:5e:69:a3:b1:98:02:da:
e6:38:1f:c7:58:c9:4a:82:56:c4:c2:b7:12:f0:d2:9c:ee:12:
3a:41:4c:a4:b8:13:5b:9b:d8:15:e4:08:f2:dc:8f:77:4e:fb:
f7:a3:eb:23:93:0a:c1:da:e6:4c:c1:97:62:87:4a:25:6a:6c:
f7:df:ce:1c:14:57:57:4b:e4:ed:15:07:09:69:da:6c:23:10:
c4:a5:f6:86:81:62:90:67:dd:ce:5e:c7:9d:ee:b0:c0:aa:0b:
c2:09:5c:af:de:6a:f2:d4:c1:4a:03:4d:5b:7b:f7:65:c3:40:
b8:4a:66:75:b3:a3:c6:96:31:34:db:db:61:ad:d6:14:4b:cf:
47:8d:f3:bd:4b:ec:97:49:92:8b:88:bc:a5:88:09:51:82:a2:
f7:77:bf:6b:4e:36:a9:01:40:17:2f:5f:38:b8:16:73:38:e1:
02:96:f5:1d:26:17:ea:6e:d3:c2:8e:6b:07:c4:72:46:fa:f5:
07:a2:fa:ca:12:e4:c2:09:ff:85:eb:b9:59:e9:e2:4d:a8:cb:
1c:d8:7a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:06:35 2025 by rpki-client