Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LOUTi1z7l8UK9sJCSElFQU_6xes.roa
File: LOUTi1z7l8UK9sJCSElFQU_6xes.roa (raw, json)
Hash identifier: tFF93/gXHHwiCV+VijXhL0hnJcKFPUrMOGBL8iakldQ=
Subject key identifier: 2C:E5:13:8B:5C:FB:97:C5:0A:F6:C2:42:48:49:45:41:4F:FA:C5:EB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 123D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LOUTi1z7l8UK9sJCSElFQU_6xes.roa
Signing time: Sat 31 May 2025 09:39:06 +0000
ROA not before: Sat 31 May 2025 09:39:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4669 (0x123d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 31 09:39:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2CE5138B5CFB97C50AF6C242484945414FFAC5EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a3:bd:71:5c:4d:46:c5:f0:13:7a:a5:7c:f4:
ff:23:f2:a7:4e:e7:24:c8:f5:5d:16:89:a1:c5:1c:
c8:c9:b7:81:c5:03:d3:12:cc:7b:cb:6c:80:4f:dd:
4f:2a:09:16:37:c8:29:32:ec:db:6e:c9:8b:ca:4a:
0a:30:bb:9f:ad:66:b7:03:7d:39:46:48:4a:93:b0:
5a:06:7c:ef:72:04:4e:72:06:96:c4:aa:58:14:40:
53:51:ea:2d:7a:a5:fe:1f:ac:eb:ac:5b:15:a2:7f:
42:cd:f1:60:c4:af:f7:ab:cb:63:8a:e1:68:9f:ba:
03:56:4e:af:fd:0b:c0:ff:8e:34:44:78:8b:a2:f4:
a4:f4:7b:ce:c4:76:7b:05:1f:83:ee:93:42:4e:b9:
ce:3d:3f:d3:e6:34:2b:04:c5:d8:9c:b0:6b:15:15:
02:0f:73:37:d8:97:07:4b:42:9b:94:e1:c3:72:60:
ab:16:c2:ef:ae:cc:73:96:fe:13:c9:e1:1b:1f:9d:
ca:d2:29:3f:0c:2e:60:f4:04:f0:f1:a5:15:9f:c0:
55:77:1c:99:28:5c:13:1c:ba:a3:3d:5d:2a:60:85:
84:33:fd:96:b2:9b:e6:b0:76:2c:63:0d:d7:dd:ac:
a9:ae:61:86:d4:14:8c:6a:86:b9:54:a3:ec:12:a2:
d4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E5:13:8B:5C:FB:97:C5:0A:F6:C2:42:48:49:45:41:4F:FA:C5:EB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LOUTi1z7l8UK9sJCSElFQU_6xes.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:c2:32:d4:47:85:2d:a8:01:21:04:44:22:7f:3a:8e:c1:75:
95:d9:1b:d3:7a:55:30:29:5b:81:f6:00:f0:ce:18:22:93:30:
97:5a:2a:09:7b:0b:a3:b8:9c:b7:4b:d4:15:81:5b:7a:38:2c:
a6:e2:cc:b9:ef:d7:fd:0a:43:86:9b:f8:1f:d9:41:db:10:a9:
43:57:3c:14:21:a9:3a:fb:21:8a:11:97:ba:e6:40:a1:f2:5c:
23:32:da:7f:6f:f2:30:96:58:db:5c:fa:21:81:32:a9:d2:d0:
94:18:94:41:6c:b8:0c:16:df:db:d2:38:ad:70:db:31:e1:26:
ac:a0:ba:3b:d1:06:7a:bc:05:b8:9a:a0:63:7a:c6:b0:0d:00:
f9:45:77:66:29:27:b0:ab:80:f5:22:e0:67:d9:76:48:1b:7d:
1c:5a:10:5a:39:83:4e:92:f1:09:91:d9:b5:f5:42:2a:40:8a:
9f:5f:6b:e7:75:d3:d2:ca:52:a6:62:47:74:13:11:9d:50:0a:
59:f0:28:41:71:2e:fc:30:b7:6a:95:de:bb:f4:f0:18:4d:a8:
a0:c1:ce:87:ce:c3:41:44:12:84:78:72:03:da:0e:5f:6c:62:
6c:c5:ff:3f:0d:86:39:65:7a:b7:16:5c:fe:cc:86:78:63:2f:
3b:71:6c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 13:51:36 2025 by rpki-client