Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/53m7bQb0zYC5V4KwaCzTEoNM4wg.roa
File: 53m7bQb0zYC5V4KwaCzTEoNM4wg.roa (raw, json)
Hash identifier: c3ULgAZndFVs6KfIOX7TOpvMHGUkh8rgFrfuGO53W9A=
Subject key identifier: E7:79:BB:6D:06:F4:CD:80:B9:57:82:B0:68:2C:D3:12:83:4C:E3:08
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1699
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/53m7bQb0zYC5V4KwaCzTEoNM4wg.roa
Signing time: Fri 06 Jun 2025 05:09:24 +0000
ROA not before: Fri 06 Jun 2025 05:09:24 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5785 (0x1699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 6 05:09:24 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E779BB6D06F4CD80B95782B0682CD312834CE308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:42:f4:8c:05:8d:3e:eb:a7:4b:c2:63:66:ae:
b0:00:2c:3f:fe:58:27:41:a2:05:b3:f3:71:96:83:
be:57:8c:b4:37:fb:6b:88:51:d4:63:e9:e2:96:e7:
19:eb:8c:3f:47:60:ae:9f:11:8c:64:ad:86:3d:14:
23:7d:d3:fd:8d:3d:49:75:08:06:ae:da:61:6c:38:
bc:6e:64:e6:a7:e5:57:a6:44:ff:45:07:a5:17:b2:
3f:05:8e:a5:9d:e3:30:00:5e:7b:b8:5b:12:b8:38:
a5:44:24:57:31:f7:46:f6:4a:0f:f2:67:db:ad:15:
5a:c7:a2:11:6c:0c:7a:bb:24:98:9d:b8:f9:1d:23:
02:c0:bf:2b:53:40:82:bd:fe:aa:15:9d:f6:70:93:
10:cb:1a:b5:14:6e:8d:1b:b8:7d:5c:69:22:08:76:
75:fc:6d:40:af:88:f7:2c:e3:e7:81:b6:a8:7e:01:
ee:ee:66:34:04:d1:30:6d:bd:3e:53:8f:d3:f1:34:
b6:8f:fb:a5:dc:7e:49:3c:d2:a9:5a:34:d5:be:9e:
e4:00:c4:a5:79:80:d7:ba:54:50:d3:a1:ae:c3:1a:
f4:e7:96:84:15:8a:80:b4:d8:bf:8b:32:59:11:46:
ed:00:1c:1d:3e:c6:cc:c0:27:d1:8b:de:c1:5c:e6:
87:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:79:BB:6D:06:F4:CD:80:B9:57:82:B0:68:2C:D3:12:83:4C:E3:08
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/53m7bQb0zYC5V4KwaCzTEoNM4wg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:11:34:eb:01:5d:6e:21:15:49:89:d7:0c:42:36:52:c0:1c:
7f:de:30:fa:2b:93:2e:7c:a2:a7:25:97:c6:e1:2b:0d:cc:d6:
06:8a:7c:d0:3d:9f:45:b5:c8:2f:fa:b1:e0:53:d1:fb:da:54:
81:39:25:a3:0f:e8:f9:22:39:4a:c1:ea:ce:a2:9b:6a:d8:8a:
b7:e8:8c:86:b4:ef:d7:b5:8f:a2:b2:2d:2b:ce:89:82:a3:7e:
2d:0d:40:f1:52:8c:b3:1e:48:5e:29:b4:6d:1e:8c:d9:67:a1:
1e:70:d2:d9:dc:7c:5c:75:70:91:4a:8d:6f:f8:09:05:60:bc:
0e:57:b2:0f:8c:97:ad:ae:79:2a:3d:65:dc:94:7d:d1:53:86:
82:96:f6:c6:00:d9:bc:d6:9a:15:e5:00:e0:5c:a0:01:24:4e:
35:c0:3a:35:be:c6:ee:40:44:09:79:2b:5c:89:58:4d:fe:29:
d4:6f:3c:43:9b:d4:c3:74:b8:00:db:d0:68:0c:ba:be:5c:26:
aa:c9:42:dd:23:ed:07:a2:52:82:ef:a7:95:3a:d3:d0:8a:0c:
df:87:63:55:e2:9a:67:c0:fe:2c:85:9b:b0:ee:3f:d7:bc:cc:
44:3c:7f:b9:6b:83:47:5b:45:dc:aa:32:b2:e6:0c:6a:36:b7:
25:b0:dc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:54:27 2025 by rpki-client