Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/VRbImyCSpmVWtDGbeL8L3gVD15Q.roa
File: VRbImyCSpmVWtDGbeL8L3gVD15Q.roa (raw, json)
Hash identifier: lw1xEVPkr+RL7OwAox5YP8HxkSDQM68LvN4QTMlNMZc=
Subject key identifier: 55:16:C8:9B:20:92:A6:65:56:B4:31:9B:78:BF:0B:DE:05:43:D7:94
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1BF5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VRbImyCSpmVWtDGbeL8L3gVD15Q.roa
Signing time: Fri 13 Jun 2025 08:39:51 +0000
ROA not before: Fri 13 Jun 2025 08:39:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7157 (0x1bf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 08:39:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5516C89B2092A66556B4319B78BF0BDE0543D794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:3b:05:7e:fe:8c:03:ee:d8:0e:57:75:b2:
a6:2b:10:54:6b:1b:cf:1e:28:70:a5:b3:8a:b9:b2:
b0:ee:97:0e:ce:3d:88:64:70:e7:4c:f5:57:47:3c:
92:5f:4f:a0:b0:c3:b5:4b:8a:40:e6:95:99:96:3e:
e2:90:ea:de:48:f1:bd:45:6a:60:b0:98:21:c9:80:
2c:95:1b:57:3f:bb:ae:07:71:eb:8b:25:ec:c6:58:
cd:be:98:46:4d:4a:4b:e2:ab:83:bd:de:f0:26:8d:
3e:14:d7:94:72:e4:f4:ce:96:a6:9e:d9:98:0f:27:
29:e0:f9:ea:d3:58:f8:b5:a6:6e:30:4b:87:0e:be:
4e:75:30:38:45:41:5c:ea:cb:ae:13:f0:b3:90:38:
f6:83:be:85:79:8c:37:3d:aa:75:52:b5:7c:d9:ef:
c3:09:00:46:c3:8e:3b:53:03:ee:a5:06:ea:d6:e1:
98:62:5d:2f:0c:a2:68:4d:a4:f3:e8:62:9b:18:8b:
5e:85:66:1d:b7:76:1a:6f:38:dc:18:31:b0:93:1b:
18:94:db:25:f2:de:31:80:0b:c4:cb:16:e3:68:47:
c2:d4:d7:95:15:81:6b:3c:da:7b:15:21:de:f4:a0:
10:87:76:82:8b:5a:9a:c2:03:b5:9d:ff:c8:b3:a6:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:16:C8:9B:20:92:A6:65:56:B4:31:9B:78:BF:0B:DE:05:43:D7:94
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VRbImyCSpmVWtDGbeL8L3gVD15Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:b5:2b:56:7c:9e:f7:79:7f:46:5e:84:08:de:ab:c5:10:4e:
f6:50:e7:5f:2f:8d:02:02:f6:5a:2c:ff:09:a8:d2:74:3a:ec:
1b:aa:7c:5c:4f:ac:fb:5d:6a:b1:10:7a:e1:af:42:c7:d6:1c:
96:26:72:bf:5f:60:86:4d:70:1b:d6:85:40:4e:c9:a0:90:6b:
e0:13:65:f4:f3:bc:6c:62:8a:61:30:a4:a6:33:b8:b0:30:5e:
27:62:a2:59:a8:42:82:cb:7e:9e:a7:82:ff:44:16:c8:3d:35:
53:45:b8:66:e6:36:04:9f:a3:a9:72:10:11:f2:63:9c:ea:d1:
a8:cb:c7:54:94:6a:e5:40:1c:66:a9:a9:41:cf:4d:ab:76:86:
71:79:57:4c:c2:fd:30:9b:84:63:22:64:c3:e4:b9:bf:53:dc:
2b:7c:4d:79:40:19:5f:15:d3:ea:f8:fb:66:7e:ed:66:0a:e4:
6f:07:e7:83:5f:4d:bb:be:10:0d:7d:30:36:9e:ce:f6:8b:95:
6f:37:5b:d1:c8:d6:f2:6c:b8:62:e6:6b:cc:44:f0:62:bc:00:
ec:fc:bb:64:74:67:a5:a2:39:b7:a9:dc:84:71:3f:ff:fc:c3:
3e:ea:ad:9b:95:08:8a:ed:e8:fd:24:e6:93:a9:de:40:41:05:
18:a3:44:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 10:51:08 2025 by rpki-client