Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/aRLH41N1PzWpweNOeCBK2BYDguY.roa
File: aRLH41N1PzWpweNOeCBK2BYDguY.roa (raw, json)
Hash identifier: UwJ7EosDKMFCWrcTj+6YZ7R5aCraJc6Bswc40T3g4Lc=
Subject key identifier: 69:12:C7:E3:53:75:3F:35:A9:C1:E3:4E:78:20:4A:D8:16:03:82:E6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0195
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aRLH41N1PzWpweNOeCBK2BYDguY.roa
Signing time: Fri 09 May 2025 04:37:44 +0000
ROA not before: Fri 09 May 2025 04:37:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 04:37:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6912C7E353753F35A9C1E34E78204AD8160382E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:a2:fd:f7:76:ec:8b:f6:a9:40:d9:6d:3a:
fd:af:f8:df:e8:5d:d4:b1:6d:de:49:20:c9:87:45:
b9:5a:e7:bf:8d:16:30:49:6f:00:69:e4:0b:2b:e0:
05:97:32:4f:d6:48:4d:4d:e2:e1:ba:f6:61:9f:52:
9d:65:2c:ac:02:f2:a4:5b:66:d8:04:50:e3:08:ad:
91:48:48:2e:5d:5b:c0:c0:5b:44:aa:e0:ab:02:6a:
47:19:95:65:b3:72:2e:0c:d6:c9:37:d3:68:d9:c2:
27:67:22:af:4c:d2:c8:a7:63:90:64:c5:b6:ef:6c:
ce:94:f8:a8:f8:0f:7e:09:00:b7:10:1a:80:05:36:
af:88:7e:83:12:8b:07:1d:fb:09:cd:4f:03:ae:99:
ac:a1:87:92:a4:01:9e:91:e3:52:d7:fa:e1:e6:15:
3d:cf:4f:c9:b0:13:87:a4:6d:cb:2c:7d:26:9d:de:
1e:7f:3f:39:a8:75:c1:d1:5b:56:08:6e:2b:12:93:
15:d5:76:0c:92:b5:85:1f:d1:fa:40:43:ab:da:11:
a7:44:04:6f:71:ec:bc:68:65:53:ef:37:29:f4:98:
da:5c:56:73:06:b6:4a:fc:98:dc:f6:2d:a4:2f:4e:
e5:7f:76:fa:ce:21:87:01:4c:9a:ef:fd:7d:1d:c4:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:12:C7:E3:53:75:3F:35:A9:C1:E3:4E:78:20:4A:D8:16:03:82:E6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aRLH41N1PzWpweNOeCBK2BYDguY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:49:7e:07:97:bf:18:a3:00:41:e3:54:be:77:b9:6c:17:e4:
a4:e8:72:f1:f8:97:38:2a:0b:bb:0c:6e:a9:1b:b0:f7:4f:0f:
cb:36:25:da:0e:3e:7f:bc:f2:bb:6d:79:e2:c3:93:cd:ea:97:
4d:43:4f:4e:78:eb:a4:bc:78:d8:39:3f:a9:1e:2e:73:53:5e:
6b:28:83:19:69:89:71:54:3f:88:4f:15:c0:a9:87:f7:39:b2:
9c:37:8a:a3:a4:bd:45:43:b3:cc:79:75:ab:33:24:7c:ce:9b:
22:c7:70:cf:cd:c4:11:7b:ea:c0:d0:d7:99:66:58:82:81:26:
87:df:b5:8e:ef:72:f6:bc:e6:43:94:b1:36:40:63:26:62:e6:
57:01:fb:eb:86:c0:33:cf:e6:99:f0:85:ce:99:61:a9:fe:24:
cc:55:d1:bf:f1:ba:3d:e7:95:72:ad:96:d8:0f:28:49:15:1e:
37:6c:da:7b:09:e9:cd:60:59:f9:2f:7c:a4:47:1f:61:81:5c:
0f:5f:06:79:3e:6f:cc:86:b7:3b:6e:de:c5:96:77:d9:77:b6:
89:45:16:c0:5b:2c:4d:70:8c:48:de:69:1c:5b:2d:4d:7d:61:
48:d8:37:8f:38:55:18:93:02:c4:d6:b6:76:57:16:9f:00:0d:
bc:9b:f4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:23:32 2025 by rpki-client