Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/37k3qp8_OHmDGuWYQsFi1xgO8WQ.roa
File: 37k3qp8_OHmDGuWYQsFi1xgO8WQ.roa (raw, json)
Hash identifier: R306Zg80UpJp4g3PNh1vIv/2BVANyJxZe+j5GIKd3xU=
Subject key identifier: DF:B9:37:AA:9F:3F:38:79:83:1A:E5:98:42:C1:62:D7:18:0E:F1:64
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 19F1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/37k3qp8_OHmDGuWYQsFi1xgO8WQ.roa
Signing time: Tue 10 Jun 2025 16:09:44 +0000
ROA not before: Tue 10 Jun 2025 16:09:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6641 (0x19f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 16:09:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DFB937AA9F3F3879831AE59842C162D7180EF164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:11:da:37:c4:86:18:09:c6:a6:5d:cd:d1:
92:65:00:7d:ab:74:0c:95:6d:8f:62:77:e6:a3:44:
ab:9c:f2:d3:0b:8b:71:57:3a:04:e8:ab:64:1a:f3:
9a:77:e7:b2:3d:de:62:c1:de:d4:cd:bd:ee:5c:20:
18:69:40:90:cf:11:c8:7a:56:fd:2f:8e:09:c2:e2:
d2:58:4f:f3:9b:4a:74:10:37:b4:65:71:e1:39:5e:
c3:25:5e:a2:b1:c3:87:58:ed:c1:25:53:97:f9:17:
53:cf:db:e3:92:e5:00:56:0b:62:15:58:2a:a8:e4:
84:c0:f1:03:f4:e6:c2:01:8f:8c:1a:ac:f3:ec:4b:
a0:4a:36:1a:c4:5b:64:5a:66:81:d9:ae:7f:4c:33:
1c:2d:bc:6c:35:11:e4:8c:53:6a:71:9d:92:24:d1:
a4:bf:9a:3e:e7:24:5c:66:24:35:81:44:ce:e2:9b:
c7:af:67:77:43:c9:7b:4d:50:ee:54:7f:ae:fa:e8:
62:0a:9b:2c:f7:14:7e:b7:60:46:32:9c:e9:a0:d9:
30:1f:aa:26:6f:f8:f0:8d:95:35:63:c3:12:cd:c2:
a7:dc:c6:7f:60:1a:87:d8:88:47:30:33:31:2f:9f:
0d:49:c4:5c:94:14:57:4f:63:1a:05:18:d9:82:09:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B9:37:AA:9F:3F:38:79:83:1A:E5:98:42:C1:62:D7:18:0E:F1:64
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/37k3qp8_OHmDGuWYQsFi1xgO8WQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:4e:b3:d7:96:95:28:c4:0f:3e:92:da:bf:03:3f:af:b3:bc:
ee:23:8c:6c:db:90:fa:97:6e:9a:a9:d4:87:5f:8d:a4:72:9e:
d2:5e:b4:fd:6c:f3:12:e1:24:84:b2:b6:84:f4:6c:8b:f1:6f:
1d:96:92:6d:d4:e8:07:b5:26:d8:3d:01:22:c3:29:89:9d:f9:
91:bf:53:58:1a:bb:b6:81:ef:7b:cb:ce:7d:d2:54:04:b9:d3:
3b:cf:e0:36:a7:38:d1:2f:6a:30:0c:69:e3:f8:b5:ab:cf:65:
65:bd:5b:83:4e:9e:bd:85:e5:4a:35:53:fb:0b:5d:ae:72:2a:
cb:11:9f:70:90:d3:46:b9:c4:51:10:86:28:62:cc:cb:90:2c:
7f:1c:f8:73:43:7c:6b:c6:b3:c2:ff:0d:a2:2d:ab:8f:0a:fb:
cc:53:22:86:34:a2:86:0b:1c:b6:fa:22:de:ee:9b:6d:ab:38:
df:da:5f:e5:6c:7f:c0:c4:20:64:45:f6:cf:07:46:6f:c6:22:
13:45:8c:6c:99:12:42:e9:81:01:b9:e0:34:bf:1a:f1:1b:d8:
de:71:75:49:bf:16:96:fb:ef:3e:c1:65:2e:d4:4c:0f:2c:25:
1e:c6:b7:fb:45:ed:cc:27:87:9d:88:3e:22:3e:ad:7e:a0:76:
96:d4:00:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 23:27:36 2025 by rpki-client