Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/KWSTBvjeXlsFNaINRqlyvvnjen0.roa
File: KWSTBvjeXlsFNaINRqlyvvnjen0.roa (raw, json)
Hash identifier: ScwwRfHpCBVqc6YcZ01CVLwEyZKVMN6YIQocew8GJbk=
Subject key identifier: 29:64:93:06:F8:DE:5E:5B:05:35:A2:0D:46:A9:72:BE:F9:E3:7A:7D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 02DD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KWSTBvjeXlsFNaINRqlyvvnjen0.roa
Signing time: Sat 10 May 2025 21:37:51 +0000
ROA not before: Sat 10 May 2025 21:37:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733 (0x2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 21:37:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=29649306F8DE5E5B0535A20D46A972BEF9E37A7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:40:c8:f9:1a:09:91:81:40:53:1d:eb:b7:2e:
31:06:1f:9e:97:61:db:33:bf:65:1a:85:4e:9b:c0:
a6:80:7e:47:4b:d0:40:47:c8:2e:94:2b:b9:38:7a:
df:fb:d4:3d:0f:16:a9:20:c1:62:ad:e6:0d:91:bc:
7f:2c:c8:6e:bc:cb:ce:ad:03:f1:66:84:a6:c2:e4:
b9:63:3d:73:37:38:88:2c:9e:1b:6b:64:5c:4f:56:
a2:99:c8:06:fe:27:6c:4d:82:1c:cd:34:55:42:23:
74:75:5d:a1:c5:5b:a9:97:58:fc:60:6d:78:07:93:
f3:80:57:0b:e7:8a:a9:20:e3:43:60:cc:6f:e5:56:
69:be:9c:01:19:0a:c1:e2:3c:7b:06:8d:1d:79:18:
d4:9d:69:31:37:a2:c6:8c:3e:eb:6f:ac:60:d9:9a:
df:63:4a:15:f5:ec:68:ac:c9:8d:0b:04:b9:d1:76:
da:41:3d:5f:09:0c:34:36:c0:03:6c:d3:b0:d4:7b:
c9:45:fe:53:fd:c2:b9:b3:eb:9e:15:a9:d5:67:e8:
9b:90:96:ec:79:b9:32:14:b1:ff:60:65:55:b9:e8:
7e:a6:d2:0a:6c:be:43:ca:cf:e4:e3:85:3e:d0:ac:
f4:0f:32:60:fc:4c:09:2a:61:10:fc:45:9b:42:ec:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:64:93:06:F8:DE:5E:5B:05:35:A2:0D:46:A9:72:BE:F9:E3:7A:7D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KWSTBvjeXlsFNaINRqlyvvnjen0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:61:db:1d:f2:fc:e9:94:e5:51:56:a6:b9:b6:39:ee:9b:50:
50:4d:d2:44:ba:d1:7c:9d:b8:75:c7:27:76:40:71:a5:51:11:
9e:97:e7:58:36:32:1b:c7:d5:b3:70:09:d5:14:2c:76:4e:3b:
b6:80:bb:44:07:1f:50:d7:4d:25:3f:2e:66:1d:87:19:3d:a0:
f5:19:61:ee:0e:06:fa:63:48:48:72:85:c7:fd:ba:12:5b:13:
2f:50:4f:8d:2f:87:9b:4a:a1:1b:11:d9:f0:72:04:73:77:e8:
74:84:6e:01:c4:2a:82:e5:3c:34:fa:0a:3f:ce:05:f1:0f:bb:
a9:ef:b1:c4:03:8b:7a:24:09:c7:b3:d1:93:06:6a:1c:f7:d2:
81:3c:a4:46:3f:7c:89:94:2a:45:e9:97:f4:66:87:17:b1:c3:
6e:13:a4:16:83:21:3f:d7:49:bf:c2:d9:13:a8:ac:e0:2d:84:
a5:df:3d:5e:53:36:c3:b1:2a:63:bb:6a:0f:ce:aa:c5:86:0d:
f1:76:8c:be:66:96:98:d9:a9:5d:1c:41:84:2f:c1:01:f0:9c:
e4:d0:7b:cf:ba:41:b5:48:fd:da:8e:4b:27:72:43:20:b8:a8:
f6:f5:d8:48:34:c4:fc:03:84:44:0e:7b:2e:f5:c8:c6:39:74:
61:13:fe:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 13:46:09 2025 by rpki-client