Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/oH15VXd1eCIovLMeSwu-grSkXjE.roa
File: oH15VXd1eCIovLMeSwu-grSkXjE.roa (raw, json)
Hash identifier: W3BILh4rFwvkFeXIFighsc29BCjjfiyDns8XMnxax6o=
Subject key identifier: A0:7D:79:55:77:75:78:22:28:BC:B3:1E:4B:0B:BE:82:B4:A4:5E:31
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E35
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oH15VXd1eCIovLMeSwu-grSkXjE.roa
Signing time: Mon 26 May 2025 00:38:36 +0000
ROA not before: Mon 26 May 2025 00:38:36 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3637 (0xe35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 00:38:36 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A07D79557775782228BCB31E4B0BBE82B4A45E31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:36:11:d0:c8:d9:0b:7d:53:e8:73:84:65:
fc:67:23:03:e2:9a:da:82:ba:74:9f:e2:3e:d3:bd:
cf:f5:9b:f3:87:66:fc:b0:51:19:08:f7:ef:d4:61:
10:77:b5:89:96:cc:a6:6e:32:f7:22:26:33:42:62:
6d:28:aa:91:c5:fd:2b:c7:31:30:29:22:4d:24:a4:
24:17:c4:c4:17:47:cb:4d:aa:57:2a:15:f1:03:5e:
f0:4c:07:bd:3e:d1:4f:0f:c1:1e:84:f8:97:82:d0:
6c:52:d9:92:fb:05:3f:8b:b6:c0:8e:61:59:13:b2:
cc:f0:f0:8e:da:b1:7b:d6:92:82:22:e9:0f:d3:5f:
fc:0e:7e:98:0a:76:9b:39:3c:62:a9:4c:08:77:de:
2b:3c:93:54:2d:63:56:20:ba:11:be:b9:52:59:06:
a8:9d:13:df:12:c5:de:72:d5:b4:fc:63:c2:25:81:
fc:34:90:1c:fb:74:fc:d0:98:05:48:b7:db:24:c0:
ff:82:3b:d3:cf:ef:d1:20:47:7b:1b:22:63:50:b6:
11:df:ed:22:e0:15:6e:d5:54:48:37:19:7c:0a:5f:
6e:b5:8a:62:76:00:84:b4:b4:d4:dd:66:68:7b:b7:
27:a6:a1:d6:90:04:3b:76:dc:c8:38:eb:52:3c:06:
67:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7D:79:55:77:75:78:22:28:BC:B3:1E:4B:0B:BE:82:B4:A4:5E:31
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oH15VXd1eCIovLMeSwu-grSkXjE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:1f:66:97:21:8e:7e:15:c2:0b:d3:56:22:32:cb:4d:aa:60:
c1:ae:15:a8:37:77:ba:57:f0:5f:fa:16:08:3e:60:10:7d:93:
18:f8:76:4e:af:9a:26:4b:4d:6d:90:a8:a0:f7:01:1b:46:d9:
c4:22:3f:09:51:24:1b:b5:83:1f:33:ba:be:73:a2:78:f1:82:
66:88:a9:a3:70:92:ab:e0:48:99:11:14:92:36:49:d9:2e:90:
52:68:ea:55:87:96:ba:bc:10:74:5e:c3:8a:5c:2c:d7:0c:cd:
cf:32:d9:d3:ac:34:76:30:72:c5:65:fd:16:28:4d:bc:a8:25:
0e:ac:2a:a2:2a:95:60:70:69:6e:cd:a0:c9:1d:57:98:4d:4f:
df:d0:48:4c:4b:ac:bc:25:71:8d:a4:5e:c0:b6:52:cd:a7:f6:
d3:0b:ec:8c:a4:7f:8d:88:93:b3:ad:1c:ef:f0:5c:b1:ba:4d:
bc:a1:9b:56:20:85:56:64:50:fe:42:96:d2:96:16:58:48:6f:
ce:a6:13:3e:4b:f9:39:2d:41:43:3f:00:cb:a9:e8:28:fb:6c:
a6:e0:7a:d9:8b:7d:34:9f:aa:87:1e:95:32:3b:0a:3c:85:ef:
46:98:9f:9f:d9:ab:ac:6b:4b:51:c2:92:a2:4f:3e:b3:df:c7:
6c:06:15:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 12:12:30 2025 by rpki-client