Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Mw3mM-BLPOqWdVus4PjZ9c5gamo.roa
File: Mw3mM-BLPOqWdVus4PjZ9c5gamo.roa (raw, json)
Hash identifier: RpHJ2nZSQww2B2zqwwppfOvtMQirW10dgFU6PsGVX3E=
Subject key identifier: 33:0D:E6:33:E0:4B:3C:EA:96:75:5B:AC:E0:F8:D9:F5:CE:60:6A:6A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C29
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Mw3mM-BLPOqWdVus4PjZ9c5gamo.roa
Signing time: Fri 23 May 2025 07:08:25 +0000
ROA not before: Fri 23 May 2025 07:08:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3113 (0xc29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 07:08:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=330DE633E04B3CEA96755BACE0F8D9F5CE606A6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:7f:b3:12:80:32:75:af:68:7a:04:86:25:
e7:d5:1d:34:1c:9a:01:ed:69:2f:56:be:60:52:fd:
2d:91:ab:4d:db:1f:cc:fa:c0:66:4b:c9:32:33:3b:
7c:e3:6a:10:c1:d1:37:d3:a2:41:1a:04:c7:11:bf:
37:aa:89:bf:e1:9f:38:e4:04:71:1a:a6:4f:11:b9:
03:39:f6:dd:d3:65:3f:bd:57:59:20:82:d7:6b:a4:
f0:c6:a9:2a:ab:01:a1:ed:97:74:f6:07:a8:b9:4b:
bf:0b:36:1e:60:9b:44:43:26:99:10:f0:96:c0:ef:
48:41:65:bc:f2:2e:bb:d9:2a:7f:1d:43:71:f0:41:
ae:62:96:5a:ba:55:87:17:c6:5e:9c:f7:72:74:39:
91:44:d3:63:06:f3:17:1b:00:ef:9c:28:e4:1a:62:
a0:3b:36:14:e0:bb:7b:ff:19:80:bb:db:b5:c0:d4:
56:9e:3a:96:9b:10:b2:70:c7:45:b7:56:74:d5:c0:
09:b5:47:5e:73:03:5f:96:93:f4:5b:ba:6f:e6:ed:
0f:f3:e9:aa:ac:0c:f9:7d:38:bd:26:53:94:87:48:
68:9a:91:25:1a:e9:1d:9c:91:a3:3d:0b:7d:bc:ad:
f4:e3:fc:5b:95:8b:67:1c:51:1b:59:a8:6b:c6:2b:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0D:E6:33:E0:4B:3C:EA:96:75:5B:AC:E0:F8:D9:F5:CE:60:6A:6A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Mw3mM-BLPOqWdVus4PjZ9c5gamo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:f5:4f:03:2c:8b:fc:cc:81:f1:9f:89:79:c0:aa:23:6c:ff:
78:b4:e3:0b:7d:39:a9:ac:ef:87:46:46:ba:f2:72:4e:94:9d:
e7:1f:e0:b3:0f:c4:91:0a:cd:32:04:d6:8b:93:18:44:32:8c:
89:8e:df:84:22:c8:3a:cc:28:86:0f:95:7a:6d:0a:9e:10:61:
5d:2e:64:84:03:2a:36:b4:ab:54:3c:e0:8b:3e:00:99:d2:ce:
dc:9e:b2:ea:2a:ca:01:ff:5c:4a:dd:f4:70:1f:81:a6:af:df:
50:e3:d9:2a:6b:07:d6:9c:0e:63:e5:fa:e8:d4:75:46:2c:91:
0c:0d:7a:6b:46:07:46:22:d9:8d:bf:99:a8:2f:94:92:6e:ff:
ab:b5:f4:c5:6c:de:7a:ae:63:9c:0e:cf:0c:26:62:ba:5a:85:
20:48:12:a7:f2:ca:88:4f:6d:f6:09:a6:a2:0e:7a:c8:42:42:
bb:dc:86:df:02:a9:10:88:47:6b:cc:e9:fc:de:e0:a6:6e:60:
df:cd:23:09:0f:f5:03:f9:18:a9:cd:40:07:18:7b:47:a2:33:
61:f5:bb:c5:35:3b:47:e5:5f:7c:40:00:a7:9a:fb:6a:43:df:
0e:a5:ce:4b:89:28:c3:64:51:28:8f:56:df:f2:d9:7a:d6:87:
87:1b:e2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 10:02:47 2025 by rpki-client