Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/K1Uc8dV7L8fma0LznbZZOIgPoIA.roa
File: K1Uc8dV7L8fma0LznbZZOIgPoIA.roa (raw, json)
Hash identifier: 5b5qP0lotUY1KewyVN39hEQM3rC70oX3f9O7eZUh484=
Subject key identifier: 2B:55:1C:F1:D5:7B:2F:C7:E6:6B:42:F3:9D:B6:59:38:88:0F:A0:80
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1499
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/K1Uc8dV7L8fma0LznbZZOIgPoIA.roa
Signing time: Tue 03 Jun 2025 13:09:25 +0000
ROA not before: Tue 03 Jun 2025 13:09:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5273 (0x1499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 13:09:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2B551CF1D57B2FC7E66B42F39DB65938880FA080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:11:4f:3d:cb:d6:51:84:a1:83:0c:d8:87:2a:
65:19:da:22:7b:a2:e5:65:8d:03:4a:e8:03:47:83:
7c:4d:b1:40:5f:3c:53:fc:f9:20:63:02:ff:5d:e0:
be:1e:01:75:68:af:c6:b2:50:78:25:3c:29:84:e2:
ff:bf:d1:86:b3:81:16:78:76:d5:9c:83:10:ca:1e:
00:66:ac:8c:69:85:ad:e5:9b:c9:c9:ba:b7:0d:21:
e7:28:ae:47:91:4a:46:e4:4c:b3:11:23:e6:23:0c:
d7:5e:10:24:9e:43:ca:b4:53:a9:a5:71:9c:70:5d:
6b:89:07:d7:2c:25:16:de:98:47:bd:a3:39:7e:64:
4c:77:9f:98:c0:c5:d9:d4:67:74:87:f7:80:ab:b4:
af:65:37:d3:8b:5f:f7:a5:46:38:60:fb:80:70:9b:
c5:e1:2a:ac:26:dc:76:4f:0e:97:81:7f:4f:dc:3f:
98:af:14:88:af:b1:5d:e0:5e:24:d2:fb:23:eb:9e:
c9:67:5e:6c:0d:bc:48:bd:5c:f0:b0:6f:78:05:81:
96:f2:8f:f4:07:e9:d7:6c:31:33:cb:90:9b:a8:07:
ef:df:76:54:10:9c:b5:e5:16:80:a2:38:14:08:af:
3f:1b:67:62:18:b9:81:91:2e:4a:16:76:05:fb:0b:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:55:1C:F1:D5:7B:2F:C7:E6:6B:42:F3:9D:B6:59:38:88:0F:A0:80
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/K1Uc8dV7L8fma0LznbZZOIgPoIA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:a7:c9:10:2c:dd:b9:52:98:7b:ef:7a:9c:ff:dc:a5:a7:0b:
a5:73:33:fa:b7:1c:9b:53:95:68:a8:35:fd:d7:ad:ce:1d:95:
88:03:ba:69:f5:00:7f:07:65:c5:59:66:d5:90:53:f6:cf:f6:
1f:88:8e:c7:6c:02:49:7b:0b:e6:f8:68:37:47:78:1b:16:2b:
58:ac:cd:9f:0d:55:7e:74:79:21:37:85:de:03:e2:ef:40:e6:
d1:23:26:06:fc:9d:cd:9f:b1:ca:e3:37:5b:fc:38:7f:28:87:
d3:7c:24:31:78:17:7e:34:08:26:7e:5b:27:38:4f:92:bf:31:
2a:c6:96:72:e1:14:da:78:63:e8:6b:63:6f:70:39:65:b2:73:
bf:67:32:0f:18:31:38:13:95:6f:4c:54:82:2f:f7:d4:85:be:
51:c0:6a:b9:4d:22:73:0f:72:fc:85:0d:ea:86:5d:8e:24:29:
c5:e9:80:7d:87:e4:df:d8:2e:4a:e4:ef:d3:63:c8:0e:6e:67:
90:10:79:ff:cf:d1:e7:0e:1c:77:09:23:f3:6a:52:1e:c0:07:
3a:46:48:0b:b5:dd:91:c0:dd:0a:02:eb:cb:4f:42:90:29:a3:
79:d0:96:74:35:be:1c:f3:c5:56:22:99:56:a6:bb:ec:8e:ec:
ef:ac:d4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 14:56:16 2025 by rpki-client