Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/7pxbEwIU-nUrDTq4WyDxj8Y9lLc.roa
File: 7pxbEwIU-nUrDTq4WyDxj8Y9lLc.roa (raw, json)
Hash identifier: 11A73581sZ2PUoxOOKC8ds5RiGPRpNr4JIAFGjD/tRg=
Subject key identifier: EE:9C:5B:13:02:14:FA:75:2B:0D:3A:B8:5B:20:F1:8F:C6:3D:94:B7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0969
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7pxbEwIU-nUrDTq4WyDxj8Y9lLc.roa
Signing time: Mon 19 May 2025 15:08:10 +0000
ROA not before: Mon 19 May 2025 15:08:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2409 (0x969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 15:08:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EE9C5B130214FA752B0D3AB85B20F18FC63D94B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:8f:75:6c:c4:d2:a6:02:36:11:f7:3c:6a:
f3:65:bd:c5:26:33:41:81:e6:ac:b5:58:a4:f2:b8:
fe:93:21:95:8f:c2:97:fe:b0:be:ca:7e:fe:1d:79:
e3:ae:c8:74:1a:d2:c5:dc:8d:52:d3:67:09:97:61:
11:8e:1e:b6:61:03:f6:52:ad:57:93:07:fa:2a:a5:
ef:45:87:6c:ec:a4:83:57:09:80:23:02:a4:17:9a:
98:e3:9a:3d:b6:e0:e0:90:e6:5f:1f:84:c8:cb:35:
9c:c8:b7:3d:6d:c5:51:63:37:88:52:15:d4:9a:3a:
8f:d2:05:4a:a2:ad:98:7f:02:d0:56:01:9d:d4:49:
72:08:dd:61:39:df:f2:a9:ed:8d:85:1c:f5:4e:79:
93:3e:c5:c2:ed:1d:f6:8f:20:24:e1:dd:4c:0a:8d:
66:7f:2b:6b:e4:fc:7b:a7:57:c1:65:d7:2d:a8:1d:
b4:5c:61:28:3b:21:e6:fa:be:d5:42:45:e9:b5:c8:
3d:ce:3b:e8:c1:fe:58:69:53:d8:a0:71:90:04:c0:
10:9e:95:41:7c:7b:6b:db:95:70:da:fd:85:bc:43:
81:71:07:67:90:b5:62:c0:f5:3e:dd:5e:99:34:1d:
ee:ab:92:a3:8e:a4:fe:4a:50:13:df:d1:fb:8d:2e:
43:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9C:5B:13:02:14:FA:75:2B:0D:3A:B8:5B:20:F1:8F:C6:3D:94:B7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7pxbEwIU-nUrDTq4WyDxj8Y9lLc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:ba:7e:3a:3f:d2:2a:ca:e2:d2:e1:ad:61:cd:35:a1:9e:74:
cf:0c:cc:08:df:45:d9:85:a8:7b:be:dd:5f:3c:ba:0e:13:08:
ed:df:5a:dd:5c:e5:4d:1d:ef:46:00:4d:2b:80:c5:2b:d8:c3:
93:bd:b9:8d:f1:46:38:6f:72:b5:9e:1d:76:2b:14:cb:74:70:
51:6c:cd:7c:40:cc:6c:28:82:f4:c3:3c:fc:d8:33:89:e9:20:
7c:f2:91:7c:b1:43:13:3e:df:02:f9:84:b3:9f:71:4e:1e:da:
47:5a:05:91:ab:61:bb:5a:9e:66:fa:6f:05:f3:3b:c0:42:4e:
7d:ab:fa:26:74:7b:1a:0a:58:c0:07:6d:69:a7:8e:03:a6:31:
44:5a:a1:03:9c:7e:46:ca:e6:c0:5d:fb:67:a0:94:3b:a4:41:
89:e3:3e:21:2d:b9:12:c6:b8:cd:85:5f:bc:5c:b9:9b:18:13:
6b:22:3f:59:e0:19:ba:13:8d:de:6d:75:2f:7c:d1:f5:5b:44:
a4:e7:09:07:ae:a8:f5:0d:9f:1e:33:80:33:73:2d:6e:6b:b5:
f0:02:5d:c6:0a:5c:c2:16:00:87:af:11:20:bd:7f:78:7d:28:
6b:8f:a5:69:43:2f:92:2e:00:53:ab:87:46:ac:ec:cc:20:bc:
e3:db:d8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:05:56 2025 by rpki-client