Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Vq6LiHF7jbvePZ1I7MY0U2tXCJo.roa
File: Vq6LiHF7jbvePZ1I7MY0U2tXCJo.roa (raw, json)
Hash identifier: UgPSm4sT8rdR8pn2VJ16wq4sEx9H4gfPvp8KbE2LXGk=
Subject key identifier: 56:AE:8B:88:71:7B:8D:BB:DE:3D:9D:48:EC:C6:34:53:6B:57:08:9A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0359
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Vq6LiHF7jbvePZ1I7MY0U2tXCJo.roa
Signing time: Sun 11 May 2025 13:07:50 +0000
ROA not before: Sun 11 May 2025 13:07:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 857 (0x359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 13:07:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=56AE8B88717B8DBBDE3D9D48ECC634536B57089A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:19:81:3e:9d:7a:7b:93:6e:a8:37:3d:ed:
e6:78:27:c5:11:6a:2d:21:7d:cd:21:90:02:20:ea:
09:08:40:c3:b8:2e:03:b1:59:92:db:55:a0:86:aa:
aa:ea:65:4b:27:91:3d:8f:9b:7a:f5:e1:39:cd:3f:
c9:22:20:46:60:67:5e:a2:29:02:4c:90:77:49:d2:
38:35:cf:c5:49:c9:a3:32:b4:7d:62:7b:8e:b1:07:
5d:ca:13:98:de:aa:21:51:3b:87:e3:01:9a:3d:bc:
72:3a:d7:20:d8:51:42:60:17:84:77:bc:44:fa:31:
aa:25:00:ad:47:eb:f8:39:2d:5c:57:24:25:3b:4e:
2a:cb:de:8c:8f:64:b3:58:fc:2e:56:39:38:a3:b2:
85:be:b4:77:06:6b:37:df:6b:cd:38:52:cc:83:b2:
d0:4f:23:52:9f:49:e6:ab:88:94:6c:55:64:e3:23:
76:12:bd:a1:57:d7:5d:16:76:bc:ad:df:28:83:c9:
72:9b:89:08:30:9b:9d:26:ab:c5:f0:17:ba:e7:ce:
3b:3d:1e:75:f5:7c:fe:9d:01:64:65:f7:c4:3f:c5:
bc:b6:20:7c:30:1f:7a:98:32:38:bd:15:f7:7c:97:
64:90:34:ec:35:92:a7:e7:4d:47:85:9c:1f:de:66:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AE:8B:88:71:7B:8D:BB:DE:3D:9D:48:EC:C6:34:53:6B:57:08:9A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Vq6LiHF7jbvePZ1I7MY0U2tXCJo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:80:c5:4a:b0:78:f7:99:bf:14:6e:94:b6:50:55:fa:7f:1c:
60:92:cb:44:d4:ee:7b:4d:e3:03:4b:fe:a3:51:26:0b:5b:01:
10:b5:64:2f:a4:e2:8c:02:f0:06:d9:5a:25:a3:16:86:67:29:
7a:e6:bc:3c:80:17:9b:e8:75:70:0e:90:64:2f:bc:a6:56:60:
b0:b5:f7:5e:80:56:f0:ee:34:32:b1:64:4a:ab:e1:13:99:0b:
f9:4e:64:f7:80:4b:00:2e:77:52:42:83:c0:66:c0:3e:bd:a2:
40:6a:78:28:1f:46:42:2c:ea:96:48:1e:e4:5b:38:07:2d:d8:
e5:57:ba:78:66:20:de:33:04:90:56:66:96:75:0d:dc:95:93:
ac:0a:45:d3:b1:4c:74:66:17:56:f9:af:39:e8:9e:67:fe:81:
34:1e:25:00:89:0c:c5:89:c2:53:a5:39:a9:aa:f1:ba:36:47:
a5:09:38:8f:c1:3e:46:f0:9b:82:14:02:1e:7d:e1:57:04:43:
5c:f4:8c:84:68:ac:f0:51:91:3d:0f:10:cb:2d:94:9d:d2:d5:
80:3d:f7:a4:fd:6b:00:49:ef:ff:c1:a7:9f:7b:22:c6:c2:1a:
dc:8e:56:dd:a1:80:bc:2d:e0:f5:3c:07:64:c2:f1:e2:25:ec:
10:80:c8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 16:48:05 2025 by rpki-client