Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ZrT-UFutdS4VxauL9G7x42lEMdw.roa
File: ZrT-UFutdS4VxauL9G7x42lEMdw.roa (raw, json)
Hash identifier: 6re/0Lz6ANS2A7kVHppllGjNFv8G0Q8/V3hRAmVpeAA=
Subject key identifier: 66:B4:FE:50:5B:AD:75:2E:15:C5:AB:8B:F4:6E:F1:E3:69:44:31:DC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C49
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZrT-UFutdS4VxauL9G7x42lEMdw.roa
Signing time: Fri 23 May 2025 11:08:44 +0000
ROA not before: Fri 23 May 2025 11:08:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3145 (0xc49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 11:08:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=66B4FE505BAD752E15C5AB8BF46EF1E3694431DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:cd:13:fe:36:af:23:a7:a0:0d:7d:37:c1:
a7:5e:09:bc:e5:bb:3e:a4:48:38:f9:43:47:17:2f:
cf:aa:57:e3:a4:41:2a:4d:4b:2b:da:41:56:bb:cf:
26:64:17:e9:b9:4b:9f:e9:c3:08:f4:7d:fd:06:33:
2d:d4:56:ee:d0:51:c2:a2:ec:37:72:a7:3c:84:a5:
47:5a:a3:01:b5:49:44:18:b0:20:7e:39:a5:bd:4c:
7a:3a:c5:91:40:0f:3f:6c:9d:8d:36:13:15:06:6f:
37:fa:5f:9e:af:72:03:99:f5:fa:6d:97:f7:5c:76:
5d:d6:dd:89:a2:76:4b:2b:73:ec:8a:07:5d:25:49:
ac:ae:c7:d9:8c:d1:2a:51:1a:ee:b4:fa:b9:c4:48:
33:ee:c5:58:a8:72:fc:1f:22:68:03:cc:35:dd:7c:
e9:e0:00:40:28:5c:90:c6:28:73:e9:54:f0:46:ec:
5c:40:24:1e:5d:be:51:7f:a6:fe:40:4f:0c:c6:9e:
8a:de:49:78:1c:88:5e:b0:0b:26:d3:68:fd:39:c9:
69:2c:58:a0:53:e4:f8:3d:c9:a3:d4:0c:f3:0f:70:
17:a0:55:c3:b4:12:49:09:ec:91:b1:37:49:41:76:
53:c4:16:21:43:44:1c:a8:e1:61:d8:06:50:78:4f:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B4:FE:50:5B:AD:75:2E:15:C5:AB:8B:F4:6E:F1:E3:69:44:31:DC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZrT-UFutdS4VxauL9G7x42lEMdw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:13:9c:11:f6:71:17:72:65:df:60:fb:3e:f4:78:bb:bb:97:
eb:ca:84:df:ad:3f:55:c1:5e:e8:b8:ed:30:32:55:ce:94:7e:
b7:a3:14:9d:8f:bf:50:8f:b2:e8:90:9b:9a:1c:38:b4:ba:f3:
ba:6f:45:0e:cc:5e:82:e6:35:20:bb:83:e5:73:b4:48:2e:4e:
56:ef:7e:64:69:dc:19:fb:05:40:c5:c5:d7:7e:aa:e4:68:99:
db:58:83:f5:eb:1a:84:ee:3f:5c:6f:35:dd:66:7a:c8:fc:8c:
85:90:a2:e9:81:2c:6a:f1:7a:4f:ad:0f:0f:57:d1:f3:89:69:
97:af:ec:5a:4e:cf:7b:ea:0c:70:51:b0:d0:80:81:a5:20:79:
1d:ed:72:7e:85:40:73:8f:a8:ca:34:ab:12:27:8e:68:0f:f0:
a1:f9:6a:43:18:05:c0:08:f2:52:7f:b7:6f:f7:2a:54:d7:0d:
dc:a0:c0:fa:9b:5c:13:40:61:ff:2d:58:86:91:87:e7:38:a4:
c7:2d:e3:0a:7a:a3:19:f3:2a:c8:fd:e7:e4:70:b8:09:9e:d2:
53:d5:b0:8b:0d:65:30:91:0c:e9:f2:72:af:7e:31:bd:c8:41:
d0:7c:ea:40:e9:e9:8f:00:94:31:7b:84:c2:d6:70:23:9e:7e:
a6:2c:c1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:56:27 2025 by rpki-client