Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/EkpAhu_PxrkF6HovQss5oZrkU30.roa
File: EkpAhu_PxrkF6HovQss5oZrkU30.roa (raw, json)
Hash identifier: b8uvCd2WaVqouriMVUK8y6pAcvwv7IjYBrnY/svy/AY=
Subject key identifier: 12:4A:40:86:EF:CF:C6:B9:05:E8:7A:2F:42:CB:39:A1:9A:E4:53:7D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 130D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/EkpAhu_PxrkF6HovQss5oZrkU30.roa
Signing time: Sun 01 Jun 2025 11:39:19 +0000
ROA not before: Sun 01 Jun 2025 11:39:19 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4877 (0x130d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 11:39:19 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=124A4086EFCFC6B905E87A2F42CB39A19AE4537D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:51:e7:12:0a:b2:18:d6:ab:b1:2b:4b:d8:
15:52:62:94:6e:e7:81:55:3a:f4:06:16:e8:22:04:
aa:5f:1e:f1:08:6f:b7:16:d6:cb:98:2e:15:21:7f:
be:66:75:a1:78:55:7c:e2:64:38:1d:04:27:1d:d9:
12:f6:82:b1:8f:35:42:90:d8:36:6e:7b:4a:ca:ec:
59:9a:b4:1b:2c:78:d4:d9:09:c5:2b:5f:e5:c7:8c:
4c:52:47:9a:7e:6d:a4:e1:58:0e:69:bb:0f:f3:08:
3e:f2:3c:4d:0b:75:fd:e8:58:2c:29:88:e1:19:5e:
42:8f:78:f4:62:ca:57:df:de:ab:70:57:95:9d:89:
69:39:55:0b:b7:20:63:ed:3a:d7:e7:9e:e9:14:6c:
db:eb:4a:a0:fe:ae:e2:1e:ce:14:2c:78:6d:ff:57:
89:0a:b2:70:18:20:a4:76:da:8e:fd:78:c4:05:e3:
e7:47:55:b9:d2:d6:97:6f:bf:8a:8f:cc:50:cb:92:
d8:5c:ba:56:eb:b5:9a:5a:ec:21:52:e8:5e:81:1c:
d7:82:4e:48:24:24:e1:94:31:69:89:2d:dc:03:0c:
36:04:a1:d5:9f:97:f2:5c:14:8b:23:d6:36:f8:48:
73:30:2e:3b:33:d5:10:9a:da:d8:08:90:b9:72:64:
74:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4A:40:86:EF:CF:C6:B9:05:E8:7A:2F:42:CB:39:A1:9A:E4:53:7D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/EkpAhu_PxrkF6HovQss5oZrkU30.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:f8:7a:25:99:9a:39:ad:1b:95:d8:0b:1f:dd:79:4c:1a:3b:
d8:0a:0e:02:48:4e:62:1c:79:97:9d:48:4e:7b:09:f8:43:09:
de:c8:49:e9:76:5e:99:a1:bc:af:06:e4:6d:1a:fe:64:d0:a3:
03:da:3c:ea:91:7c:ea:33:b0:38:cb:9a:6b:9c:b3:83:47:54:
52:76:e4:84:14:db:15:33:2a:0f:a3:a1:24:ca:18:fe:c0:f4:
80:b9:3b:fd:7f:b5:07:b4:a5:8e:b4:42:0b:3d:2f:77:16:8f:
90:be:5e:bc:c4:ec:8e:c7:76:8f:80:64:ec:94:bb:ad:54:ce:
36:bc:0f:67:93:1a:72:8b:f9:64:dd:dd:a3:90:39:62:54:6c:
83:ab:5c:61:73:85:c0:27:26:53:96:a8:81:60:38:c0:7e:c6:
b1:30:30:49:1a:27:a6:18:e5:63:94:71:56:37:09:0f:77:81:
be:84:6e:46:2c:f1:ca:ac:47:8c:73:0c:76:12:82:5b:e3:3d:
64:52:fb:9b:4c:30:74:6b:45:e0:e8:6c:22:3c:64:95:4a:86:
4a:96:b1:6e:0d:24:b8:2c:a9:f8:78:2a:45:b2:3f:1d:a9:15:
6f:0e:bf:ed:79:80:43:0e:59:60:94:1b:e4:ab:7a:fb:ca:e3:
96:18:96:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 22:35:26 2025 by rpki-client