Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/emc4aQwIeRNeFvIbvOxZCrdYjVk.roa
File: emc4aQwIeRNeFvIbvOxZCrdYjVk.roa (raw, json)
Hash identifier: /npnGqju8hZ+P022Kz1cju4UrNPiyalk7FR+DKQmB1A=
Subject key identifier: 7A:67:38:69:0C:08:79:13:5E:16:F2:1B:BC:EC:59:0A:B7:58:8D:59
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0AA9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/emc4aQwIeRNeFvIbvOxZCrdYjVk.roa
Signing time: Wed 21 May 2025 07:08:21 +0000
ROA not before: Wed 21 May 2025 07:08:21 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2729 (0xaa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 21 07:08:21 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7A6738690C0879135E16F21BBCEC590AB7588D59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:aa:c6:2d:98:83:ac:f7:47:73:a1:6c:f1:
85:4b:9c:ae:1c:ce:85:81:d3:33:e9:37:35:f9:12:
6f:3b:cf:1c:9d:34:21:7a:4e:0e:80:81:02:9f:37:
6c:8f:37:ab:0b:53:b0:d6:6c:fc:7e:de:35:bf:22:
30:8f:16:35:84:5d:b4:bc:25:ea:64:07:a4:45:c9:
4d:da:e2:86:c7:37:8f:f9:d4:c9:af:29:db:e9:f5:
0d:a6:01:f1:f2:66:68:12:ae:27:6e:e7:5e:f2:a9:
42:b7:bb:03:2a:13:7e:2e:f3:b4:92:3a:2e:10:e4:
e7:f4:bb:88:25:7c:19:14:a8:e0:30:6b:32:34:6e:
e4:46:71:12:4d:f1:74:24:17:86:dc:c0:a1:4a:18:
5e:76:fd:bf:99:c6:f8:5c:0d:37:65:bf:18:25:83:
b5:2c:90:a1:8d:4f:b4:08:31:c7:f6:95:0f:25:90:
50:8b:02:98:62:bb:7d:09:c4:bc:eb:90:00:fb:3d:
de:59:0e:96:3c:25:fc:39:78:da:a3:e1:e6:bb:a2:
64:b6:91:5d:dc:f0:67:e5:a3:c3:2f:49:0a:59:51:
2c:92:69:74:4b:71:37:a9:a3:ef:64:3c:36:e9:20:
e4:39:16:1b:c8:00:69:d2:96:60:f1:be:bf:e7:1c:
2d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:67:38:69:0C:08:79:13:5E:16:F2:1B:BC:EC:59:0A:B7:58:8D:59
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/emc4aQwIeRNeFvIbvOxZCrdYjVk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:75:84:2b:9c:81:4d:80:81:9b:5a:f7:be:97:e6:26:0a:7a:
a3:1e:6b:63:c5:18:1c:14:f2:ae:22:6e:76:e2:1c:f8:de:55:
6b:67:72:77:ab:d5:74:ab:2d:ce:79:8a:5d:30:33:1b:4f:46:
f5:41:2d:94:68:bf:a3:5e:52:89:01:2e:3f:2e:72:8f:70:2d:
26:f2:75:51:85:23:36:9c:7e:51:30:57:72:bb:94:1b:0d:ea:
40:18:68:c0:64:96:ca:18:19:bd:cd:0e:09:7a:b3:2c:3f:f5:
2e:06:b1:69:7f:59:cb:a9:99:ef:af:2b:b3:39:ae:84:cc:bf:
90:9b:23:8f:06:53:14:5d:38:be:63:0d:58:3b:6d:50:eb:da:
3e:6a:98:bc:e3:4f:72:05:81:26:9b:4a:d0:05:d2:93:5b:50:
b6:99:29:34:52:ed:b4:64:78:95:51:d3:e0:7e:39:a1:58:38:
de:af:74:b7:fa:df:54:f2:ea:a6:6c:ad:93:53:cf:91:e9:dc:
3d:3b:56:ca:4e:ae:8d:9d:6e:31:fe:26:c5:62:54:05:f8:d9:
fb:02:b1:fc:f2:a7:2f:a6:85:9b:60:66:f9:5b:16:a3:96:b9:
9b:17:7a:c4:b5:b6:ce:33:90:38:8d:dc:eb:71:7f:58:80:5b:
29:da:f5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:53:02 2025 by rpki-client