Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/dpnWu2CGLngMPop0bnkULW6rNQs.roa
File: dpnWu2CGLngMPop0bnkULW6rNQs.roa (raw, json)
Hash identifier: Q1sK/s4OvU9ptFRpmb0zRNfY6I7s0xea1M2nQUgZf00=
Subject key identifier: 76:99:D6:BB:60:86:2E:78:0C:3E:8A:74:6E:79:14:2D:6E:AB:35:0B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0509
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dpnWu2CGLngMPop0bnkULW6rNQs.roa
Signing time: Tue 13 May 2025 19:08:08 +0000
ROA not before: Tue 13 May 2025 19:08:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1289 (0x509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 19:08:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7699D6BB60862E780C3E8A746E79142D6EAB350B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c4:76:e1:11:e3:bb:69:77:b2:c0:25:97:a1:
77:72:48:6d:48:71:46:d3:1b:61:4b:78:25:aa:ae:
1c:8a:32:87:2c:87:80:b7:26:39:93:80:4c:b3:e9:
45:4f:a4:10:a1:d9:be:e2:cd:8f:ac:e2:24:3b:6a:
36:e8:1e:11:95:8b:62:da:a0:d3:62:62:5d:72:10:
8c:21:87:f0:ca:b7:cf:0c:44:50:e8:11:2c:14:76:
6f:a1:b3:a4:22:7f:e8:c4:b9:4f:c6:8f:de:0e:c6:
70:1a:df:6b:15:4c:e7:d4:0b:df:bf:e1:50:20:6a:
29:f8:ef:37:e1:54:07:b0:62:56:b5:b1:1f:d6:77:
1d:89:17:c2:1a:1b:67:05:93:c3:ef:0b:b2:81:3c:
e8:7d:6a:d9:35:55:a5:d0:92:e3:76:47:ee:9a:7e:
d1:f0:f8:b2:89:5a:cd:d2:94:d4:47:11:d0:7b:00:
60:63:ab:a3:51:56:c7:29:ca:95:52:3c:b6:63:19:
b8:a8:4f:87:be:54:bb:6b:2c:4a:a1:a2:c0:44:b5:
a8:df:6b:a7:e2:f2:9c:d1:4d:4a:f3:66:e0:a4:5d:
d0:e1:79:8e:87:0b:c2:97:56:70:58:f9:83:96:29:
8f:83:63:3d:b9:ae:d3:49:c1:f1:14:a2:7f:c2:92:
13:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:99:D6:BB:60:86:2E:78:0C:3E:8A:74:6E:79:14:2D:6E:AB:35:0B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dpnWu2CGLngMPop0bnkULW6rNQs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:3d:56:0b:3d:3c:d8:af:f7:75:56:78:7a:c3:e9:d7:76:de:
cd:40:4d:62:dd:7d:6b:88:57:07:80:d9:bf:79:8a:cd:07:bb:
50:8a:be:b4:f5:79:b7:41:62:ff:b0:69:c8:b2:bf:fe:93:c1:
4d:99:6f:7f:51:d9:1a:65:7f:7f:f0:89:4f:b4:17:7d:6c:5b:
2a:7a:8e:ca:a9:66:4b:0d:0b:99:75:6e:d3:21:5d:86:08:88:
45:85:c1:fb:39:53:af:b6:dd:91:95:61:20:7e:b2:15:44:a3:
f4:93:00:7d:ac:82:c1:e2:cb:52:ae:64:41:59:17:61:99:28:
76:44:3e:df:0c:49:95:c3:57:bd:a1:38:dd:9d:1d:07:ce:d8:
45:2a:44:d4:1b:90:bb:24:a5:8d:5c:ba:f3:d3:64:26:be:6a:
e7:78:01:64:c2:99:57:52:0a:9a:71:4f:10:f7:b9:a0:25:c3:
40:a8:3e:5e:01:c0:2a:1a:be:85:3e:3b:3d:51:f3:d6:13:a1:
27:c1:28:6d:48:08:ce:33:23:86:8a:e9:31:2b:6f:84:be:32:
81:df:c4:a8:98:09:d0:b5:40:31:f3:84:5b:01:5e:89:1c:55:
e9:09:d6:da:c4:63:83:c6:21:01:cb:04:ab:af:76:af:25:6d:
07:38:db:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:33:42 2025 by rpki-client