Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/WofZXHihqp-I-DziWbdULjf80SY.roa
File: WofZXHihqp-I-DziWbdULjf80SY.roa (raw, json)
Hash identifier: iZu8VHn9rIEofo5TLgKR5OumZ+pIAaVNP7tgjmoUjYw=
Subject key identifier: 5A:87:D9:5C:78:A1:AA:9F:88:F8:3C:E2:59:B7:54:2E:37:FC:D1:26
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2229
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WofZXHihqp-I-DziWbdULjf80SY.roa
Signing time: Sun 22 Jun 2025 02:41:49 +0000
ROA not before: Sun 22 Jun 2025 02:41:49 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8745 (0x2229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 22 02:41:49 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5A87D95C78A1AA9F88F83CE259B7542E37FCD126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:73:8b:c7:12:88:16:a5:ef:ee:b1:6d:82:
ea:32:2e:e9:00:9c:4c:27:b2:33:3a:e5:2d:ef:32:
27:ae:df:2e:16:69:2c:2c:94:e5:87:77:89:b8:df:
78:e4:d4:e0:7a:c7:73:a6:88:8b:b4:71:2f:61:18:
bd:06:36:64:0d:21:38:21:4c:ac:01:4c:bf:d3:cb:
90:39:47:af:87:f6:9f:db:f4:60:d2:de:6d:a0:7a:
b3:5b:61:a0:00:f5:eb:17:1b:90:90:71:e3:e6:6a:
27:47:57:e2:8e:31:62:30:77:2b:17:b6:ae:6d:ca:
5f:83:e5:52:13:9f:9a:0d:08:c2:69:22:55:eb:3e:
ca:c8:e1:f6:2d:98:88:d4:52:e1:67:6a:41:df:99:
89:b5:24:e8:e7:79:7a:10:ce:05:00:0e:87:f8:0c:
59:b4:f3:55:1e:50:11:2c:aa:88:f7:84:14:85:97:
9e:b9:e9:2e:63:46:da:03:75:4e:45:95:7a:39:ca:
c4:7a:99:95:85:b8:c7:1a:b2:9e:10:e3:5d:b2:60:
c0:33:ca:28:ce:2c:13:7d:e2:ca:f5:5d:39:06:94:
38:3b:b1:3d:32:b3:4e:ec:bc:bb:ac:44:7d:b9:ac:
ad:bb:5a:3d:34:66:30:f6:a8:df:bc:42:2f:b4:46:
c5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:87:D9:5C:78:A1:AA:9F:88:F8:3C:E2:59:B7:54:2E:37:FC:D1:26
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/WofZXHihqp-I-DziWbdULjf80SY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:22:67:31:72:70:4d:0b:25:86:de:f8:3f:c0:fd:b2:5c:07:
7f:09:df:18:83:d4:54:85:44:ba:27:50:8f:1e:6d:bf:14:7d:
a8:73:58:d6:93:6d:24:03:d5:8a:1b:dc:5b:f5:e1:51:87:93:
57:13:2c:cd:cd:01:a7:5a:bd:37:c1:5f:62:71:b8:d4:78:ce:
f5:c8:2d:28:93:96:91:57:ff:e3:49:a6:58:1f:c0:2d:d6:b9:
af:4f:0f:dd:01:02:d6:df:73:89:4b:27:86:80:bd:9d:c2:de:
21:f4:be:50:16:e6:76:21:89:92:fd:a7:7a:7a:9f:41:40:8d:
4a:ac:c0:c4:00:17:d3:91:2f:0b:91:0a:90:cd:53:f9:8b:5f:
af:70:e3:e9:87:da:f6:33:26:8e:59:60:41:40:f8:8a:d1:58:
37:e8:42:26:7e:1c:27:84:9e:10:17:9f:c9:12:51:44:66:f2:
49:84:46:91:13:c0:b3:45:5d:ef:7c:3e:07:46:8a:28:08:9f:
b2:ba:4a:d2:e0:35:71:16:97:45:a1:dd:82:11:d0:42:29:65:
a0:74:19:3c:e2:34:87:57:b5:76:42:4f:56:3c:90:3b:de:9e:
74:dd:5f:15:10:4e:7f:d3:d8:d1:92:dd:51:dd:df:11:3b:c3:
37:db:4c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:13:09 2025 by rpki-client