Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/W0iTzzy07NenWpfvcwbhp76ufug.roa
File: W0iTzzy07NenWpfvcwbhp76ufug.roa (raw, json)
Hash identifier: Ijnsdil5808GLcOJmMWv2mxZcrwALf7PXkHU7WlH4zE=
Subject key identifier: 5B:48:93:CF:3C:B4:EC:D7:A7:5A:97:EF:73:06:E1:A7:BE:AE:7E:E8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 19D5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/W0iTzzy07NenWpfvcwbhp76ufug.roa
Signing time: Tue 10 Jun 2025 12:39:42 +0000
ROA not before: Tue 10 Jun 2025 12:39:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6613 (0x19d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 12:39:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5B4893CF3CB4ECD7A75A97EF7306E1A7BEAE7EE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:e8:3b:77:87:80:43:09:2f:ba:7d:9b:d4:
fe:48:e1:f2:32:8c:df:ba:64:fa:a5:19:f5:c4:b1:
4b:1f:87:81:7c:5f:29:d4:fb:30:e0:e6:0c:41:ba:
b4:c3:fe:4f:62:60:88:ec:11:5f:13:ad:6b:ea:33:
31:4d:22:44:13:86:ea:42:b3:a1:50:b0:2e:2e:00:
6d:c9:0c:aa:1d:d1:1d:14:7f:cf:ac:b5:06:14:e1:
b4:ee:26:55:8d:ea:31:d1:5b:0f:fb:8d:25:b8:d9:
7e:00:07:80:2d:d5:6f:20:69:56:29:df:87:b9:17:
0f:a1:a0:3b:da:35:7f:ce:42:ff:1c:ad:0f:5e:99:
a0:a7:be:8b:e6:4b:be:25:9b:05:65:9d:09:47:ca:
5f:23:be:b6:d2:04:82:d2:1e:c8:23:25:d7:4b:c2:
56:91:58:6d:a5:c9:04:c7:c0:d4:a9:8f:77:4c:4f:
c0:c6:e9:0e:1d:09:ec:00:c9:a9:04:03:51:84:ea:
3b:6f:cf:dd:02:ea:3a:ff:2d:a4:aa:05:bd:70:6f:
49:cb:84:3c:fc:0a:ac:41:01:9c:c7:77:b7:4d:da:
40:8c:ae:f6:05:11:c0:74:7f:25:c2:82:ac:56:64:
0d:7f:22:c2:16:9e:a3:f4:0a:8c:57:c0:20:64:fa:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:48:93:CF:3C:B4:EC:D7:A7:5A:97:EF:73:06:E1:A7:BE:AE:7E:E8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/W0iTzzy07NenWpfvcwbhp76ufug.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:39:26:be:71:f7:45:86:a1:87:7c:56:5f:75:1d:18:2b:69:
d9:eb:88:47:08:2b:01:81:e7:ce:5e:9b:2b:a9:ab:6b:08:e1:
5f:51:0b:f4:dc:d7:c4:7a:2d:55:22:0c:a8:41:d1:d6:44:66:
fa:88:e4:11:53:a5:02:86:1c:4b:32:c1:19:b2:35:8c:a2:dc:
56:f6:f6:30:26:6e:b6:a6:46:b9:7f:b4:be:6c:3d:fc:5f:b5:
11:5b:59:60:a4:be:e3:be:0d:33:09:93:fd:49:16:b5:c6:be:
bc:9c:31:fe:39:cf:64:4b:6f:da:ff:5b:eb:2d:2f:7b:8e:8c:
a3:99:59:02:cf:2b:6b:f2:f3:60:85:79:b2:9a:2a:96:1e:20:
46:cf:cd:56:ac:c7:68:28:46:99:45:7c:a3:0c:bc:7b:95:a9:
2b:72:ec:83:3e:d4:36:2e:03:3d:a4:e8:cd:43:66:1b:9c:6e:
3f:c4:05:55:3b:b5:ba:69:fb:b1:1d:1d:94:9c:d3:d2:ce:e4:
c2:4e:e3:87:67:7c:ef:28:31:ef:ff:34:2f:1e:db:d4:b8:24:
bb:74:1f:7a:b9:bb:78:b4:77:eb:b2:d9:3d:f0:d5:72:66:b3:
f0:a5:d0:b7:8c:2f:b2:b2:39:be:44:90:65:d1:98:19:b3:4a:
2a:4b:e8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 00:23:50 2025 by rpki-client