Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/b2kN_NKIku7HcCgh93LcjKJXHqE.roa
File: b2kN_NKIku7HcCgh93LcjKJXHqE.roa (raw, json)
Hash identifier: qFML4ryOMy8OeEISr5V4VpcDWRBrh9755CpBP7RDx6Y=
Subject key identifier: 6F:69:0D:FC:D2:88:92:EE:C7:70:28:21:F7:72:DC:8C:A2:57:1E:A1
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0489
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/b2kN_NKIku7HcCgh93LcjKJXHqE.roa
Signing time: Tue 13 May 2025 03:08:01 +0000
ROA not before: Tue 13 May 2025 03:08:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1161 (0x489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 03:08:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6F690DFCD28892EEC7702821F772DC8CA2571EA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:e3:3d:27:61:52:ab:e6:34:a2:99:a7:2b:
d6:65:9b:b0:a7:9d:b2:1d:4f:1e:7e:13:68:99:7a:
12:72:1b:44:71:f2:e6:da:29:e8:2e:eb:c4:ef:f6:
93:36:5d:0d:29:0d:1a:5c:a6:72:75:93:39:8e:1b:
de:6d:a1:af:73:02:51:fc:ae:af:ac:33:5b:d5:46:
00:a7:fd:18:8f:27:6b:a8:0e:e5:ab:c7:4a:e0:a1:
9f:26:32:4d:f5:c1:81:62:1b:d9:8d:52:ca:70:02:
75:b2:8f:92:6a:27:2f:bd:34:2f:35:51:81:44:9f:
5d:ea:8c:f5:0d:93:33:5e:1c:c3:e4:7b:b8:c6:f5:
a3:28:99:11:c9:61:0b:0e:45:3b:0b:72:ac:09:6d:
f8:57:99:b8:04:58:46:89:1d:5c:20:08:ac:c5:5f:
71:10:ba:88:2a:5f:96:50:b0:81:12:f2:97:f7:e1:
25:bd:b3:33:22:85:55:92:38:61:3d:e6:e0:6a:a8:
98:b6:bf:cb:49:0e:8f:07:2a:f7:f9:40:4f:a1:5c:
cc:11:24:97:66:da:27:5d:66:fc:2e:c9:2e:7b:42:
4e:37:22:74:b5:8c:8a:d5:bb:98:9f:ae:60:40:49:
81:58:86:45:b8:fc:75:14:3d:0d:c3:2e:e9:7f:72:
1f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:69:0D:FC:D2:88:92:EE:C7:70:28:21:F7:72:DC:8C:A2:57:1E:A1
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/b2kN_NKIku7HcCgh93LcjKJXHqE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:6d:c3:15:9e:d8:c1:ac:1b:d0:c0:22:0d:31:99:10:02:1c:
b6:37:c1:49:ee:6e:81:95:e9:b8:f1:0b:bc:51:ae:6f:0f:c3:
ec:73:e0:e6:6b:81:5e:13:47:ff:fa:9b:2d:0e:05:32:51:4c:
21:b0:81:30:3c:aa:13:5f:3a:d3:41:04:b3:c5:51:47:9f:f6:
82:58:d0:84:75:b9:4b:8a:b1:ed:96:7b:5e:97:77:23:83:01:
6e:e9:1d:58:24:20:f2:c6:20:39:fd:0d:80:ef:6f:aa:d3:f4:
7c:9e:39:50:1e:8f:41:d4:70:ff:a5:c9:37:17:e4:b7:bb:4b:
f5:42:c8:42:28:a1:2e:10:c4:2a:4b:64:a4:8a:b1:4d:49:c5:
64:8c:d7:b2:77:d8:cb:5c:1d:4f:e6:ea:20:40:61:82:8d:01:
e2:42:fb:49:75:f0:0d:45:8b:fc:34:1e:18:92:17:f8:2a:74:
ba:46:7e:68:e9:e7:20:64:b2:cb:32:00:58:dc:22:26:f0:93:
26:af:ee:47:1f:c8:93:a4:22:c5:fb:2c:e5:37:07:65:f7:44:
8e:45:e3:32:61:98:56:71:ad:d6:52:e9:51:cc:de:e7:c0:5f:
bb:e2:cd:fe:cf:80:58:8e:0f:46:9d:4a:b6:5f:77:ed:46:56:
6f:be:cb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:27:04 2025 by rpki-client