Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/TuwyU8eaP1m8wzoFQbGSeTLYz10.roa
File: TuwyU8eaP1m8wzoFQbGSeTLYz10.roa (raw, json)
Hash identifier: 3xD3BcLAW9M7qqlGZ0QlFDuLckrqTCHKUs0n9vd62rM=
Subject key identifier: 4E:EC:32:53:C7:9A:3F:59:BC:C3:3A:05:41:B1:92:79:32:D8:CF:5D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0685
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/TuwyU8eaP1m8wzoFQbGSeTLYz10.roa
Signing time: Thu 15 May 2025 18:38:08 +0000
ROA not before: Thu 15 May 2025 18:38:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1669 (0x685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 18:38:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4EEC3253C79A3F59BCC33A0541B1927932D8CF5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:df:8c:c3:4f:cb:76:4b:d7:8f:c6:9d:85:e9:
af:89:dd:db:6f:6f:c4:0a:b4:a1:fd:69:d5:07:96:
41:ec:c8:40:c0:78:9d:2e:db:dc:c6:f3:82:b7:1a:
1c:67:e1:42:b3:10:54:e1:b4:79:d9:f2:9f:63:ea:
61:e4:d2:54:16:25:2b:a1:3e:89:b9:e7:f1:48:60:
ec:0e:e8:f3:3d:ea:8c:a4:cd:d3:cd:43:d4:cb:87:
ef:87:80:01:73:9b:fc:38:89:a0:22:7e:ea:4c:6f:
a6:f9:94:37:57:99:67:43:0c:44:e6:ff:90:ca:9a:
1b:65:85:fa:46:9a:35:cc:4f:7d:e0:58:a8:83:9b:
5b:31:fa:15:37:54:81:4e:97:34:71:67:1b:69:f4:
54:c0:79:b8:67:5d:f4:77:12:9b:ce:60:a9:85:f9:
97:ad:91:01:19:a7:5d:81:c9:f2:1c:41:ee:bc:d6:
7f:e6:c0:22:fd:32:15:0c:f0:77:18:86:77:41:eb:
3b:56:f9:d5:fd:16:32:21:56:fd:8e:47:4a:5f:75:
d1:44:80:83:69:1a:a8:ef:9a:1c:5c:6b:af:5c:5f:
95:0c:64:d6:9e:5c:b4:d9:83:56:31:3b:eb:9c:b2:
b7:ed:b7:4c:95:2a:08:d7:3e:53:b5:68:70:8e:ce:
b8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EC:32:53:C7:9A:3F:59:BC:C3:3A:05:41:B1:92:79:32:D8:CF:5D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/TuwyU8eaP1m8wzoFQbGSeTLYz10.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:9a:0c:a0:36:11:3d:59:61:b8:ef:08:d9:39:c4:55:77:17:
58:32:ac:ef:fa:6e:11:53:32:18:13:5f:90:a7:f2:49:71:0c:
78:38:41:34:c2:fa:64:94:c3:55:fa:f9:34:47:3d:80:4d:d4:
5c:dd:64:7d:da:3f:0c:a3:5f:d7:41:22:0d:22:68:d0:fc:92:
fc:a9:51:26:9e:38:b4:2f:2b:df:36:2d:ea:f8:51:5a:1b:64:
d2:68:b4:69:68:40:f6:aa:6b:bd:8f:3f:a8:38:a6:ea:b1:32:
f1:8c:8b:2d:60:7c:21:1a:8b:9c:60:12:00:d4:1a:06:d8:84:
77:a3:68:81:1f:7e:43:9b:c8:a7:18:20:f9:4f:66:dd:e7:9f:
c7:9e:8b:92:42:7c:f5:a9:71:39:58:b2:70:2e:7d:1f:2f:2f:
64:24:1f:93:83:ad:51:72:ba:63:04:5a:fc:02:e5:32:81:94:
ed:e1:9e:e5:16:b3:dd:70:78:5e:7e:a8:a2:8d:52:9a:f5:75:
96:db:9f:94:98:6b:70:49:19:f7:70:19:39:15:83:3f:e6:34:
78:96:fb:4c:81:db:6e:02:78:68:1d:af:b7:31:7a:e3:7c:aa:
f3:b9:f3:c7:ad:4f:3e:52:f2:1a:8e:4a:c7:19:b7:a1:d8:37:
09:5f:95:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:55:59 2025 by rpki-client