Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/F5k07mbzJsCAzVQbOjQe9ffesAs.roa
File: F5k07mbzJsCAzVQbOjQe9ffesAs.roa (raw, json)
Hash identifier: g85zdzG2Wy4+vcnhiG1NGmmIkBrP+S6siYxpZ9ni27g=
Subject key identifier: 17:99:34:EE:66:F3:26:C0:80:CD:54:1B:3A:34:1E:F5:F7:DE:B0:0B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0ABD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/F5k07mbzJsCAzVQbOjQe9ffesAs.roa
Signing time: Wed 21 May 2025 09:38:18 +0000
ROA not before: Wed 21 May 2025 09:38:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2749 (0xabd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 21 09:38:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=179934EE66F326C080CD541B3A341EF5F7DEB00B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:47:2c:21:31:64:87:78:21:c4:32:2c:eb:7e:
9b:2e:24:7b:16:c4:98:d3:dd:9a:c5:b6:7d:5b:6e:
b6:25:48:d4:4d:26:37:d8:60:9a:ce:c3:5d:f3:11:
be:c9:77:4c:ec:78:88:bc:44:d7:64:1f:1f:bc:4b:
6c:f3:98:2f:97:96:0f:c7:51:7e:89:3e:b4:4f:f1:
a7:47:a7:df:05:68:0a:0c:47:32:24:58:cd:cd:3e:
21:a5:5d:81:d8:8d:7c:cd:2d:d0:95:b3:af:c4:91:
50:9f:46:11:52:c9:2d:77:ca:4c:ef:00:ff:0f:94:
00:51:eb:26:55:e8:b2:d6:dc:b0:93:ec:d1:71:55:
d5:2f:5b:ad:f1:b0:31:86:e1:b1:c9:fb:cf:1b:bf:
f1:19:ab:41:7c:8c:ac:63:3f:e4:45:64:cf:d1:0e:
2c:ad:11:f5:a6:4d:3a:73:94:dd:ed:2a:db:25:2c:
39:71:fb:34:89:12:fc:c5:6f:99:19:fc:8a:f4:f0:
28:2c:87:0d:a8:db:17:d7:92:53:e5:1f:7b:13:76:
2c:43:5e:55:72:cf:6d:02:63:f6:00:6d:8c:52:21:
23:88:90:b7:6a:8d:e3:9a:8f:bf:21:c7:12:ce:c9:
6a:ec:e9:3c:d3:67:e7:0b:a1:4d:39:82:c3:ff:05:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:99:34:EE:66:F3:26:C0:80:CD:54:1B:3A:34:1E:F5:F7:DE:B0:0B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/F5k07mbzJsCAzVQbOjQe9ffesAs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:b7:72:69:8c:f1:aa:09:f7:ef:df:10:f3:ea:54:22:c3:50:
8b:bc:3e:90:fd:84:23:f1:9a:e2:c2:48:66:ac:50:04:21:e2:
56:f2:dc:8a:cf:ed:0f:b4:94:14:bc:bb:d7:d9:d0:05:d3:f7:
24:6d:16:d2:e6:da:15:ba:6d:36:28:70:1d:62:4a:4f:cd:ed:
f1:a5:3d:aa:6a:bb:67:fd:54:96:c9:a2:64:09:01:38:fd:4e:
0a:43:37:1f:81:e1:d2:d1:88:eb:83:42:0b:f5:93:81:ab:68:
00:0b:2a:fe:08:71:cb:cd:10:0c:2c:d8:46:85:1c:5e:22:e4:
dc:fa:16:ee:86:c1:8a:8a:26:a8:93:02:53:8c:7b:78:15:ae:
c4:bd:37:d6:bd:d7:88:c7:7a:c6:63:6b:ee:27:e0:2c:5b:df:
d4:f8:9d:9f:b4:ae:77:5a:8b:50:dd:93:bd:d1:90:ab:70:27:
b5:a0:2f:41:2f:b4:82:83:d3:11:a0:cf:14:25:23:a1:ff:1e:
6e:5c:1e:b1:5b:b5:8e:57:b0:8e:d2:b2:7b:c3:bb:b3:70:6b:
20:e5:9a:48:a9:a6:40:1c:fb:01:fe:da:35:b4:1e:93:97:84:
4d:1d:1f:d2:84:3d:e1:7a:f1:c0:b1:11:20:58:ac:8a:11:d2:
50:2f:76:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:32:44 2025 by rpki-client