Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/DugD0c1jys49_X_jYiTjOk34pHQ.roa
File: DugD0c1jys49_X_jYiTjOk34pHQ.roa (raw, json)
Hash identifier: 1HJisXq7jUf9omZm9V35am0vziH0xmdSXqjR2v1K4f0=
Subject key identifier: 0E:E8:03:D1:CD:63:CA:CE:3D:FD:7F:E3:62:24:E3:3A:4D:F8:A4:74
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1AE9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DugD0c1jys49_X_jYiTjOk34pHQ.roa
Signing time: Wed 11 Jun 2025 23:10:01 +0000
ROA not before: Wed 11 Jun 2025 23:10:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6889 (0x1ae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 23:10:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0EE803D1CD63CACE3DFD7FE36224E33A4DF8A474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:64:04:a0:84:2c:cd:3a:24:ea:cf:c3:fd:
61:3d:2a:95:61:3d:df:78:06:dc:71:a0:ab:d3:97:
d8:66:16:02:d5:9d:50:68:4f:a0:2b:8f:f1:b0:c9:
9f:86:4c:80:18:0a:39:9f:f1:7c:67:74:68:0c:e1:
4d:d2:6e:bb:49:c1:68:37:c2:58:1f:8a:7e:d2:7d:
22:c4:32:6c:ac:29:b3:b1:df:1c:ee:f0:8c:4e:13:
9d:05:c1:fc:b0:19:60:5e:48:4d:bb:23:6b:3b:00:
77:b3:09:f4:13:6e:4c:b9:fe:df:65:1d:8f:8f:5b:
26:dc:54:5e:5b:6f:c0:bb:5a:ed:7f:2a:0a:5d:fb:
f0:b2:ae:45:c0:5e:33:3c:8f:53:46:60:21:88:2d:
21:31:6d:d3:36:55:29:d8:1d:5e:5b:36:d8:de:ef:
4a:d8:68:75:19:64:1f:7f:0d:7a:2b:04:e2:47:3a:
83:2b:1f:15:9d:6c:27:52:e2:de:2f:98:8c:85:b6:
a0:98:41:2e:61:48:a6:85:c8:a9:22:f5:f7:95:8f:
11:80:50:27:0b:76:b3:4a:90:7b:eb:8f:00:bc:7e:
b2:6d:c3:77:f5:d6:33:b6:1c:4f:8b:23:65:91:c8:
f4:65:86:5f:91:62:ec:f3:f3:0a:97:1b:70:f4:01:
39:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E8:03:D1:CD:63:CA:CE:3D:FD:7F:E3:62:24:E3:3A:4D:F8:A4:74
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DugD0c1jys49_X_jYiTjOk34pHQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:82:69:73:63:55:a1:e0:5a:3f:62:d4:a2:ed:5e:05:77:66:
90:56:a7:73:66:5e:31:59:39:b3:d2:93:1c:29:06:b6:56:71:
f8:83:11:29:e5:28:8b:0c:bf:4f:c5:74:6b:0f:0c:27:52:32:
83:64:2b:04:b8:cb:1b:f9:d8:6e:cb:40:a9:e5:35:a7:98:08:
d8:d8:e7:2c:47:0d:8b:ca:2c:e3:82:a5:68:b2:95:ee:8d:92:
79:4c:bb:81:6f:97:88:7c:99:4c:be:41:62:25:2c:71:97:6a:
23:77:55:e2:72:b4:c3:30:bd:cb:a9:b6:ab:7e:26:2f:8e:cc:
7b:86:6e:12:1b:a5:fb:67:2a:53:4c:a7:da:d6:67:85:1d:0e:
dd:b2:d9:99:31:8d:51:01:e6:ac:72:a6:a0:7f:60:56:02:ae:
d5:9c:5b:c9:97:d2:ac:39:8c:f0:01:10:ac:00:78:ef:16:c3:
0c:cc:70:53:ea:84:cb:e6:46:02:25:3d:2d:1d:e8:ae:f8:3f:
57:b6:cd:56:ac:76:95:1f:0f:88:38:82:77:91:c6:dd:7b:05:
bd:77:80:83:13:ef:8c:35:70:8f:18:53:a4:0d:00:8c:a6:14:
28:1c:82:ad:7f:ab:e0:01:61:4e:83:98:4f:68:85:dd:1a:a7:
85:e4:aa:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:39:08 2025 by rpki-client