Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/UHAdj1q2HGvEUaZI7z_o_ebXunw.roa
File: UHAdj1q2HGvEUaZI7z_o_ebXunw.roa (raw, json)
Hash identifier: gX6cthNhSjAIqaDGI8fWlkLazt9WjycQ80m9klT82+g=
Subject key identifier: 50:70:1D:8F:5A:B6:1C:6B:C4:51:A6:48:EF:3F:E8:FD:E6:D7:BA:7C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0DED
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UHAdj1q2HGvEUaZI7z_o_ebXunw.roa
Signing time: Sun 25 May 2025 15:38:34 +0000
ROA not before: Sun 25 May 2025 15:38:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3565 (0xded)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 15:38:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=50701D8F5AB61C6BC451A648EF3FE8FDE6D7BA7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:67:bc:4d:23:c2:bd:c7:78:58:85:33:4f:38:
e8:76:30:6c:ee:72:a3:47:9b:aa:2d:e8:e0:e4:2b:
44:6e:b4:f8:d8:90:2d:4a:18:d4:2b:9b:16:5e:ef:
56:89:8f:41:e5:9a:1d:9c:79:8c:5a:5c:9c:fb:fd:
99:68:98:9f:f8:23:0d:16:b3:eb:12:61:7f:4c:6f:
72:66:43:23:cd:ce:fb:52:c1:41:08:b1:78:dc:fb:
4e:c2:4c:bc:bf:fe:92:8b:cd:a6:c8:37:74:88:b7:
d4:a4:b2:50:0c:3e:2f:bb:1b:40:16:ba:c1:4e:70:
c3:de:be:48:9a:ea:a9:83:19:1c:5d:dc:8c:1b:0d:
2e:c7:ef:86:ef:7b:1d:10:88:4f:1f:cf:88:fc:ff:
ae:98:09:2c:64:32:85:5e:fe:9d:19:bd:7f:e5:ca:
a5:49:29:a4:f6:c6:73:17:34:20:2f:06:15:3d:ed:
a3:05:7c:37:af:97:eb:54:ac:cf:7f:54:70:fe:9c:
8f:59:e9:f1:5d:dc:fb:e8:c3:e5:f0:fe:6a:a4:9d:
12:2a:e8:45:5d:d1:de:88:96:55:b0:33:71:d7:f1:
35:53:6f:ee:87:7c:f8:2d:bf:05:58:8b:fb:b2:17:
7c:f0:2e:dc:86:02:23:3c:5b:d4:51:26:b8:f5:40:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:70:1D:8F:5A:B6:1C:6B:C4:51:A6:48:EF:3F:E8:FD:E6:D7:BA:7C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UHAdj1q2HGvEUaZI7z_o_ebXunw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
26:de:2c:dd:3f:43:41:50:c7:73:e2:c8:ae:4b:6c:0a:f8:17:
b6:12:3b:5f:db:0d:0c:d7:16:45:e1:05:6f:ce:94:df:66:11:
ac:db:8d:a3:cb:fd:2e:bc:64:20:92:bb:64:c9:4a:10:9c:11:
7d:9c:df:22:d0:68:8e:e7:58:95:bf:dd:52:dc:50:0b:39:92:
7b:3b:c3:1e:78:99:76:9d:45:3e:7f:eb:23:3d:d7:2d:97:f7:
e4:4e:10:2f:73:f6:70:a2:4d:53:88:38:76:81:4d:ba:c1:f7:
8a:17:88:85:43:39:f2:7e:45:68:44:96:66:11:f1:ba:f0:c3:
04:cb:d7:58:a0:e3:a0:a6:c3:b7:63:c4:69:b9:4c:a3:a0:be:
e9:bb:e7:c2:80:b0:dd:6a:43:ec:d4:aa:31:b5:88:af:ce:00:
37:44:e7:4b:61:b7:cd:08:92:cc:bf:98:02:47:8a:79:b6:48:
5e:b7:58:be:cd:a7:0a:92:c6:8a:8d:5f:14:15:f7:19:44:f2:
fa:bc:1f:4c:42:67:b1:a4:0e:5a:1f:30:e4:97:29:c2:03:dc:
13:62:5f:fc:64:78:b8:e2:34:15:8e:49:17:cd:37:b8:55:53:
b5:27:71:d2:ff:d3:16:db:f3:2c:00:fe:41:10:a5:1d:14:e3:
40:37:03:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 01:50:11 2025 by rpki-client