Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/SNpI-K0pKdFd8yy8Rk8VVBd2ZCo.roa
File: SNpI-K0pKdFd8yy8Rk8VVBd2ZCo.roa (raw, json)
Hash identifier: 5Zfd/0p3QwB9mOOy/dCyY2m8gci1YWXUtMgsaeV+Fxc=
Subject key identifier: 48:DA:48:F8:AD:29:29:D1:5D:F3:2C:BC:46:4F:15:54:17:76:64:2A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 09B1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SNpI-K0pKdFd8yy8Rk8VVBd2ZCo.roa
Signing time: Tue 20 May 2025 00:08:13 +0000
ROA not before: Tue 20 May 2025 00:08:13 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2481 (0x9b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 00:08:13 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=48DA48F8AD2929D15DF32CBC464F15541776642A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:d4:c6:20:57:19:2a:07:5f:f8:16:2c:b0:
26:85:da:6c:1c:cf:2d:e8:46:49:75:c2:67:78:39:
c6:0a:0f:45:69:fa:5f:c4:ea:91:1c:5a:47:d0:d9:
5e:2c:ef:f4:66:08:c6:c9:a6:53:a9:05:bb:f5:51:
30:78:ae:1d:68:58:3d:14:cf:77:8d:d6:d0:34:f1:
d3:88:f2:c0:e9:34:d5:03:ef:30:16:be:ea:e9:3d:
5b:14:91:ad:61:65:34:18:80:a1:88:42:bc:f5:0c:
7c:b3:b3:5b:66:ca:de:59:27:a6:2f:3f:72:c4:11:
3d:49:6d:ba:71:13:1a:4b:6d:d7:69:7f:54:a7:95:
bc:3f:dc:55:af:6a:03:55:da:94:a4:51:a8:d7:68:
d6:a2:80:a6:13:dc:49:75:55:46:4b:86:35:89:e4:
f1:93:d1:c7:59:dd:6c:36:f1:bf:f7:eb:49:91:0e:
5b:42:1c:1e:ed:48:81:e1:01:3f:e9:70:a1:c8:3c:
d8:82:98:34:83:32:79:01:80:d0:e4:28:d7:c9:6a:
eb:95:47:ea:79:f7:67:02:52:f6:4e:56:c7:6f:a7:
1a:68:79:5c:11:aa:26:4e:46:38:c2:f9:55:4c:45:
72:51:8c:82:f7:df:ff:de:85:f9:19:b3:fd:be:86:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DA:48:F8:AD:29:29:D1:5D:F3:2C:BC:46:4F:15:54:17:76:64:2A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SNpI-K0pKdFd8yy8Rk8VVBd2ZCo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:c2:ba:05:a5:c1:63:79:d1:72:6c:f0:52:a6:08:00:bc:09:
96:08:b5:ac:90:65:bf:37:46:08:2f:ba:fe:51:e1:d2:a0:db:
b6:65:fe:18:ba:f5:ba:97:60:c4:35:d1:4e:39:ae:3d:6a:87:
b6:4c:77:72:9f:0e:9b:3f:34:9c:4a:5a:6b:03:50:84:e9:71:
95:6a:5c:cb:8b:03:aa:86:ab:3f:d6:cc:cd:71:b8:83:c3:9b:
3a:78:dd:0e:11:fd:e7:1e:a8:b0:d1:73:31:5a:c0:a2:fc:99:
58:d0:a2:ae:92:cc:26:2f:d8:18:9b:db:5d:a9:b0:cb:e9:96:
7e:02:7b:7f:7b:79:6d:e3:83:23:91:ba:59:dd:01:31:06:93:
52:65:bb:4c:fb:19:6f:ab:07:38:df:4d:fd:d1:76:21:1b:45:
ed:ab:7d:f4:d1:6c:b3:56:52:a5:7c:a9:12:0b:c8:1e:43:fe:
57:94:89:df:de:e3:59:af:d5:0c:36:31:8f:5f:d2:11:14:d4:
d2:91:d7:38:e5:74:b9:b0:fa:37:fc:e6:e9:3d:2e:ee:10:15:
2d:6f:81:99:b3:6c:f7:bb:3d:c6:01:49:fe:e8:dd:5c:d9:c4:
82:e3:85:10:0a:bd:1b:70:57:9d:68:77:c1:f6:5e:4b:b3:f6:
12:81:01:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:39:06 2025 by rpki-client