Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/NRRVrW0YOtzYeQR5EscxoiIh8yU.roa
File: NRRVrW0YOtzYeQR5EscxoiIh8yU.roa (raw, json)
Hash identifier: 4d5tjJ1Wp4HbSMJiVAvmYvxp+HnNtr0rNjugU0d4ne4=
Subject key identifier: 35:14:55:AD:6D:18:3A:DC:D8:79:04:79:12:C7:31:A2:22:21:F3:25
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 09E9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NRRVrW0YOtzYeQR5EscxoiIh8yU.roa
Signing time: Tue 20 May 2025 07:08:14 +0000
ROA not before: Tue 20 May 2025 07:08:14 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2537 (0x9e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 07:08:14 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=351455AD6D183ADCD879047912C731A22221F325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:98:a1:3a:35:74:7e:bd:a9:4d:90:8b:e1:
06:ca:eb:0a:14:a1:1c:52:f8:36:3c:47:57:dd:5a:
7e:ea:12:48:c1:50:e4:0e:79:f8:8d:aa:cd:1f:8f:
a0:f5:13:01:46:45:76:7f:17:fd:ad:0c:08:e3:d9:
8b:4a:f3:55:b5:81:1b:21:46:4a:6f:78:6d:73:79:
46:8b:38:45:b5:1b:46:11:de:4c:05:1a:e1:dd:de:
59:6d:35:ec:89:5f:de:cc:63:16:be:f5:d8:02:c8:
72:8e:73:31:64:12:56:df:27:5f:c1:02:2d:b9:4b:
50:76:80:af:88:69:83:94:42:1f:12:a9:fb:a9:a4:
a0:be:94:f4:15:61:f4:d8:08:47:3e:f2:80:56:83:
1a:ed:0d:4d:25:13:27:70:e4:36:9c:59:f7:c8:a0:
86:31:71:73:9b:4f:f5:28:42:d4:a1:fc:61:79:40:
13:de:e0:22:8b:61:de:2e:d6:b8:44:d2:d6:ff:2c:
36:8c:0d:aa:44:7b:15:6d:46:9c:a8:11:df:c5:96:
35:d8:d2:47:a8:3b:cc:ac:71:df:d1:45:51:44:ad:
48:14:1f:dc:c1:da:0f:10:62:40:87:f8:51:3d:17:
c6:fe:36:cd:14:65:2f:6b:e3:e9:08:05:ff:a3:74:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:14:55:AD:6D:18:3A:DC:D8:79:04:79:12:C7:31:A2:22:21:F3:25
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NRRVrW0YOtzYeQR5EscxoiIh8yU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:77:b4:2d:b0:ed:7c:80:7a:e8:7f:60:c2:46:e2:0e:e1:9c:
29:0a:d0:26:f0:ea:3e:f9:b1:6c:c7:31:e9:a8:c1:79:e5:c2:
a8:93:47:7c:9b:2b:d1:2c:7c:e5:c6:da:f6:08:59:14:80:f0:
1b:7c:dc:a5:35:b1:14:6d:2d:26:d5:13:db:a0:b1:f0:75:5f:
dd:0e:2e:1a:6e:86:11:76:00:d8:52:20:02:36:a7:e8:97:93:
e9:9e:1f:9a:05:21:11:b5:2e:b4:b0:d8:51:fe:03:84:bb:23:
65:76:42:cd:05:61:0a:21:e7:3a:aa:60:4d:f9:d2:21:e7:34:
86:d5:28:f5:32:2b:bc:66:c5:b2:62:eb:a4:b8:50:92:68:d1:
a4:df:af:7f:c0:85:8b:92:c5:c7:f0:03:64:22:91:d9:51:d2:
00:71:37:06:72:22:fc:2e:85:4c:ff:17:27:55:46:4e:13:58:
b6:1b:50:70:d8:8b:5f:f0:11:6d:33:62:c4:3d:e9:66:b6:d3:
d2:03:de:73:be:38:cb:31:ee:b4:0c:34:33:1e:6f:2c:3e:58:
28:0f:4e:8d:3a:da:d8:f9:db:74:30:aa:d6:07:17:42:16:01:
a1:32:1b:d8:dd:7b:1f:31:79:c1:bd:ac:49:2b:49:83:ec:87:
7d:60:b1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:07:21 2025 by rpki-client