Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vsXO_wPO-eJMa--JjEtAsb1Gw1g.roa
File: vsXO_wPO-eJMa--JjEtAsb1Gw1g.roa (raw, json)
Hash identifier: efjw5Ei/3MFHmIFg6Aez0vEOeDXIpotcmhRsG4Ac9OY=
Subject key identifier: BE:C5:CE:FF:03:CE:F9:E2:4C:6B:EF:89:8C:4B:40:B1:BD:46:C3:58
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E85
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vsXO_wPO-eJMa--JjEtAsb1Gw1g.roa
Signing time: Mon 26 May 2025 10:38:41 +0000
ROA not before: Mon 26 May 2025 10:38:41 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3717 (0xe85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 10:38:41 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BEC5CEFF03CEF9E24C6BEF898C4B40B1BD46C358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:c5:a5:0d:78:9b:b2:15:7b:85:87:92:e2:
f7:1e:2e:cc:e8:3e:be:49:3d:1e:1e:f2:a1:92:7a:
38:ff:ed:dd:a8:4d:46:4a:33:9c:54:a2:a5:ab:21:
f8:aa:6a:4d:51:a0:4f:15:ee:e0:a5:04:d5:64:f3:
1f:2c:a4:d3:fe:95:54:57:76:96:90:1a:63:5b:57:
c6:f0:11:85:e8:ee:b1:13:a9:20:b5:29:6a:c9:76:
09:36:7e:b8:35:e2:42:80:0d:e5:45:dc:3e:64:af:
34:01:76:4e:64:5d:68:9b:ac:36:1a:e0:06:72:21:
17:02:65:36:a1:80:e5:90:a5:eb:cf:d0:f8:94:20:
11:39:85:e1:ae:0a:e6:c1:fe:0d:39:4b:7d:eb:4f:
02:74:d4:0e:44:59:25:db:2e:bd:2b:2e:cd:e6:a7:
b9:2a:ab:03:38:d7:68:7d:92:86:9e:3a:4c:5c:82:
16:bd:f7:09:1d:d1:0d:fd:52:68:ad:e4:b8:b7:76:
b6:4d:1f:ca:10:60:a2:1d:2a:1a:85:be:4c:cd:4c:
e6:87:83:11:5a:a3:de:6a:cf:09:56:57:f4:33:d9:
fa:01:86:7a:40:a1:32:d8:00:9d:e5:82:a6:2b:c7:
87:f8:67:f2:f6:8e:1e:7b:3a:8f:80:d9:78:7b:7e:
fb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C5:CE:FF:03:CE:F9:E2:4C:6B:EF:89:8C:4B:40:B1:BD:46:C3:58
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vsXO_wPO-eJMa--JjEtAsb1Gw1g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:81:37:49:c4:b1:2b:fe:58:4a:11:8a:68:ac:98:6c:cb:27:
b8:21:cd:93:5c:fb:1f:fc:a4:a0:f4:d8:72:05:72:b8:df:13:
e8:03:89:ea:3d:16:69:60:fe:53:90:9c:50:39:5d:f2:08:bd:
68:ff:2e:56:d7:0d:6c:d0:73:2a:43:96:af:17:12:6b:80:67:
48:03:93:c9:57:04:2a:0a:cf:6b:58:1e:ee:36:f4:ed:1e:d1:
38:eb:9e:b7:a6:bd:4c:11:19:3a:39:75:c8:19:64:67:64:da:
f4:70:5e:cf:95:c9:c4:73:52:8b:84:a7:83:02:06:75:6c:fd:
a8:75:8c:70:61:6a:e5:ba:f9:6f:00:16:73:0d:21:75:50:31:
07:ad:c2:6d:7e:b3:cf:98:9b:09:05:8c:02:31:0b:ed:37:4b:
09:05:5f:13:d3:56:59:92:f4:62:f0:62:31:d8:5d:58:2e:5d:
81:b3:bc:5c:d9:59:6a:0e:83:d8:2a:61:ef:8b:b7:38:a0:ec:
73:41:93:94:b4:32:41:90:12:9c:92:df:0b:45:6f:aa:ef:4b:
de:cb:1a:35:5b:e1:20:2e:9f:36:1d:cc:9b:fb:a9:5c:07:1f:
30:f3:58:33:ca:74:6b:d3:4c:42:b8:5a:2d:ba:42:ec:ec:1b:
c9:b8:04:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:18:17 2025 by rpki-client