Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/VAM4jSEopa5xhW80HKnUol69tYQ.roa
File: VAM4jSEopa5xhW80HKnUol69tYQ.roa (raw, json)
Hash identifier: YplBwINlh34PKlHkXhWKlHGZOFAlp3gITL0YhytDc0A=
Subject key identifier: 54:03:38:8D:21:28:A5:AE:71:85:6F:34:1C:A9:D4:A2:5E:BD:B5:84
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 085D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VAM4jSEopa5xhW80HKnUol69tYQ.roa
Signing time: Sun 18 May 2025 05:38:19 +0000
ROA not before: Sun 18 May 2025 05:38:19 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2141 (0x85d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 05:38:19 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5403388D2128A5AE71856F341CA9D4A25EBDB584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:c4:d1:a5:e2:3d:77:e7:94:bf:0a:1c:b6:
d4:47:4b:df:f8:5b:f8:0c:42:c6:b5:9b:df:31:35:
1d:85:83:08:c5:60:b8:9a:2b:3f:25:d0:e8:a0:4f:
b9:9c:f1:b9:68:06:be:d2:e1:82:dd:4e:53:ad:a4:
a3:37:1f:14:39:3c:6e:e0:cd:e0:3f:c8:3f:b7:55:
1f:dc:76:22:2d:2e:99:e1:08:61:40:15:59:fe:51:
13:69:55:53:57:19:30:e5:08:8e:30:fa:60:50:9b:
d0:a8:38:0c:17:24:47:a9:8f:fa:17:10:bb:03:c7:
34:ac:e1:2b:16:dc:00:7b:88:70:25:43:d8:17:c6:
67:9b:d0:92:b2:50:82:83:dd:22:62:09:1d:80:72:
cb:ad:2b:68:77:67:54:a0:4c:09:ec:58:8d:5c:b1:
ff:b3:49:90:fd:bd:e4:e3:e6:8c:66:93:7d:d3:31:
7b:77:b6:b7:19:ff:de:47:24:02:fe:d8:cf:da:32:
23:ba:a1:12:1a:7e:ca:04:0e:00:40:c7:65:f8:fd:
35:29:61:88:96:dd:bc:94:82:40:e0:16:29:38:53:
3a:3a:1f:c5:45:e6:46:fe:ea:53:87:aa:16:15:a8:
ba:f8:b2:b3:4f:f1:41:91:b2:06:16:44:09:24:2f:
c2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:03:38:8D:21:28:A5:AE:71:85:6F:34:1C:A9:D4:A2:5E:BD:B5:84
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VAM4jSEopa5xhW80HKnUol69tYQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:b6:83:d0:da:43:1f:e4:3b:5f:4c:d8:2e:de:90:2f:6f:37:
e3:57:ad:16:ab:10:6b:45:75:8a:91:26:e6:68:10:bb:3c:dd:
4a:89:4b:2a:51:4d:bf:d5:95:44:d0:95:12:5e:2b:45:1c:1d:
8c:ec:35:07:20:14:9f:8b:b3:2c:22:82:ac:21:6d:d6:4f:b6:
1c:5a:67:88:45:c7:03:bb:cd:22:8d:1b:d1:43:d5:3c:71:6d:
34:1d:e4:94:44:f8:a8:5a:45:a2:ab:b5:55:b7:cc:d6:c7:3a:
e2:9d:50:27:e1:9e:15:49:49:28:11:dd:b2:28:60:a4:ab:5f:
66:5f:9a:cf:0f:66:3e:f5:55:69:bc:1b:56:a4:13:e3:68:e5:
d6:82:0e:e8:d8:dc:f5:8b:42:7d:d3:84:b7:cd:0f:74:d0:86:
03:bf:9c:ad:cd:b2:35:fa:f5:bf:d7:32:57:a3:a0:81:d1:36:
0a:5b:24:50:49:fd:a4:b1:21:3d:e4:26:ad:a0:45:9e:7b:eb:
f6:be:68:5c:fe:22:11:0f:c0:e6:b7:e5:c7:b6:e3:10:aa:a1:
27:cc:7f:c0:c8:54:fe:a5:dc:ff:d0:90:93:21:2b:dc:19:24:
fb:7e:29:b9:7a:10:e7:5d:1c:49:b3:c6:f6:12:94:b3:ce:81:
6f:6c:c2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 02:20:59 2025 by rpki-client