Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/WoaaoM29SoF5p-tK19-zJJqZASg.roa
File: WoaaoM29SoF5p-tK19-zJJqZASg.roa (raw, json)
Hash identifier: htJBPoB5iZ6O4y9M2Fx+JUPJNBUcskGAXCzQzw9Fh5Q=
Subject key identifier: 5A:86:9A:A0:CD:BD:4A:81:79:A7:EB:4A:D7:DF:B3:24:9A:99:01:28
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1BC5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WoaaoM29SoF5p-tK19-zJJqZASg.roa
Signing time: Fri 13 Jun 2025 02:46:26 +0000
ROA not before: Fri 13 Jun 2025 02:46:26 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7109 (0x1bc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 02:46:26 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5A869AA0CDBD4A8179A7EB4AD7DFB3249A990128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:7b:20:71:bb:5a:48:bd:47:12:d6:f3:f2:
e9:4f:59:e5:eb:56:d3:27:05:b3:9a:9b:43:62:1a:
21:c9:48:68:52:f6:8c:6d:c3:86:6e:91:d9:b1:67:
bd:22:bd:41:5a:02:8e:c3:56:ba:ce:a7:6a:8c:3d:
fe:fe:bb:1d:fc:81:28:33:e7:2c:59:19:a0:3b:3b:
3d:20:5e:23:0a:70:97:a3:7b:55:d8:25:fb:53:9b:
1c:2c:53:4a:f0:59:b0:37:d6:40:e2:70:da:d4:0e:
d0:f8:ed:bf:86:2a:f8:99:78:66:04:e5:9c:ec:30:
f7:3f:cf:18:0e:6f:5f:46:20:24:9d:f9:94:25:f2:
ae:74:32:4c:02:ae:52:71:98:29:42:1d:1e:45:ec:
95:da:ec:41:6c:40:8d:6e:5a:9b:fb:0b:44:82:7e:
d3:5f:bf:ff:08:ab:57:9d:4b:37:6e:14:91:33:1a:
04:2b:1f:1a:f6:18:3a:7f:2a:0f:f5:90:ea:5a:1a:
60:e6:bf:52:cc:21:2e:f6:9a:5f:5b:1a:63:72:c3:
40:fe:1b:67:a6:23:29:63:11:62:ca:eb:56:b6:d3:
1d:af:71:fd:ca:6f:a8:49:2a:d5:40:46:50:8f:40:
06:62:8b:c7:03:36:f1:8a:a1:f1:f0:f1:02:be:d1:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:86:9A:A0:CD:BD:4A:81:79:A7:EB:4A:D7:DF:B3:24:9A:99:01:28
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WoaaoM29SoF5p-tK19-zJJqZASg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:1b:1f:9e:7d:52:a2:e7:4f:66:c5:39:eb:73:14:fa:24:6d:
c0:66:92:b9:a5:c2:52:e3:6b:22:59:64:1a:df:37:8f:05:87:
41:91:7d:e4:47:78:92:93:a6:93:48:0f:3c:9d:2a:2a:71:28:
b8:e3:c5:09:ba:af:98:81:bd:66:e4:f9:04:4e:4c:3c:dd:8c:
44:cf:07:f6:86:4d:b7:47:77:51:29:10:3a:51:99:d7:e9:a1:
4c:50:d0:ba:1c:4d:6c:9d:e5:e0:a4:5b:6b:0d:e7:8e:26:be:
2a:17:a0:59:39:0b:5b:32:ef:0e:53:c3:57:b4:14:f2:43:a9:
d1:6c:2d:37:12:1a:0f:fb:3d:06:de:e8:c2:98:fb:43:29:a1:
36:f2:fd:3e:dd:30:9d:27:e2:c6:92:45:22:dd:40:ca:b8:de:
83:81:57:f0:ff:b8:95:be:ee:14:9d:88:93:87:32:b3:b9:0f:
aa:a4:bf:49:8d:04:c0:f1:ec:a2:de:da:17:f4:29:e4:c2:0c:
8a:61:7d:87:62:de:3c:4a:fe:00:0d:aa:9c:5e:79:e0:b7:23:
49:bc:95:21:41:b1:3f:0a:5b:89:b7:17:f9:1c:64:9f:8c:11:
8f:d0:81:f3:47:ed:48:52:62:8c:91:03:2f:af:0b:74:8c:db:
c5:5f:25:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:09:08 2025 by rpki-client