Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/wTsppieZF_ka3YuuftFLiJNmeHA.roa
File: wTsppieZF_ka3YuuftFLiJNmeHA.roa (raw, json)
Hash identifier: uRQHFK4foW5sdvRxhLbUxE2qKdNt+qDjjxAz+cirGLU=
Subject key identifier: C1:3B:29:A6:27:99:17:F9:1A:DD:8B:AE:7E:D1:4B:88:93:66:78:70
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 05B1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wTsppieZF_ka3YuuftFLiJNmeHA.roa
Signing time: Wed 14 May 2025 16:08:56 +0000
ROA not before: Wed 14 May 2025 16:08:56 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1457 (0x5b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 16:08:56 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C13B29A6279917F91ADD8BAE7ED14B8893667870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:5e:bf:6f:93:ea:75:ed:fe:4a:6c:67:76:
14:80:9f:9e:e0:f0:98:46:3f:f1:a6:53:79:47:73:
8b:99:d7:ba:9e:4f:ef:dd:8c:63:43:8f:43:a0:a9:
0e:08:89:e3:71:d1:df:49:bf:45:26:ed:6b:2c:24:
ba:86:75:35:d5:33:8f:3e:7f:85:1f:44:f9:01:38:
2c:b2:d7:73:ab:19:b7:13:74:a7:a7:b1:13:49:a0:
be:8e:83:54:b5:37:97:9d:b4:08:1b:27:f6:20:55:
9f:71:b4:56:76:cd:f4:e7:ec:c6:f7:e3:97:45:a2:
14:f2:29:55:27:a5:c0:00:48:65:ce:cf:76:69:d7:
5b:3a:44:a8:ee:46:b3:35:f7:0d:12:57:d9:6f:c7:
d5:02:1a:74:04:28:38:de:a9:31:e1:84:a2:bc:df:
c7:2f:cd:14:08:0a:da:f2:00:99:05:04:df:bd:ed:
ac:b1:3a:33:32:ee:21:ba:44:7d:0a:5f:56:05:64:
27:9f:67:55:6d:31:d9:8d:76:07:12:80:b0:ee:ae:
e9:c2:51:fc:51:85:37:f9:cb:15:7a:0a:83:f7:d0:
f4:21:8a:db:1e:36:29:47:7d:5e:e6:a9:20:45:49:
e5:a3:e2:f9:2f:b1:03:9a:40:f3:19:3d:10:ca:02:
55:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3B:29:A6:27:99:17:F9:1A:DD:8B:AE:7E:D1:4B:88:93:66:78:70
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wTsppieZF_ka3YuuftFLiJNmeHA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:98:5b:4b:da:7c:97:ee:29:38:b8:f7:f9:3b:63:fa:87:91:
cf:54:1c:5f:28:64:7d:75:3a:00:37:9a:c9:65:68:d6:f9:63:
21:4a:0b:d3:8f:7c:41:e4:1b:00:9b:9d:2d:90:26:af:f3:ca:
10:96:5f:52:25:58:a6:fb:93:14:40:5d:7c:c1:46:d3:fc:15:
c6:01:26:af:43:81:b6:85:30:8a:1f:e2:1c:a5:de:bf:0b:10:
28:ef:b6:0b:8b:37:f9:3e:f6:9f:0f:6d:ec:d7:74:d2:42:a1:
ce:88:15:0e:bb:d0:2e:aa:6f:8e:41:49:75:d9:59:3a:3a:92:
39:dc:83:72:8a:51:52:24:bb:05:b5:fb:45:4a:7c:91:4e:52:
94:f0:95:02:75:63:c0:03:55:bb:ba:4a:ed:b1:7a:a2:d1:ef:
7c:ba:2d:4b:bc:09:5b:d1:f0:4d:3e:b6:c7:a8:0c:a9:92:2f:
98:dc:23:57:40:87:b6:f6:02:67:3b:17:f4:b9:68:82:9e:03:
70:5a:28:40:f3:9d:fb:cb:f8:1c:e6:92:98:54:d8:2d:dd:56:
76:16:36:43:c5:8b:75:3e:50:b6:29:1f:86:53:bb:f4:cc:9f:
aa:71:50:30:b4:39:09:f5:55:61:15:fb:23:80:6d:86:c2:33:
6d:3b:63:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 13:43:29 2025 by rpki-client