Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/o3Y5ZMFH6HEFxwbgsIen7qxEOxA.roa
File: o3Y5ZMFH6HEFxwbgsIen7qxEOxA.roa (raw, json)
Hash identifier: 5l92FXz2leg6VWQbxXXmA53DXI0DmVL4t5ihLxiFirI=
Subject key identifier: A3:76:39:64:C1:47:E8:71:05:C7:06:E0:B0:87:A7:EE:AC:44:3B:10
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1CD5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/o3Y5ZMFH6HEFxwbgsIen7qxEOxA.roa
Signing time: Sat 14 Jun 2025 12:39:55 +0000
ROA not before: Sat 14 Jun 2025 12:39:55 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7381 (0x1cd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 12:39:55 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A3763964C147E87105C706E0B087A7EEAC443B10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:48:93:d7:1f:dd:02:a5:72:e2:98:3e:7b:89:
a0:ec:c1:34:3e:f1:ef:f7:65:cd:fa:e0:42:e0:e3:
77:d0:db:8a:81:2c:fd:b6:64:59:dd:55:5a:2d:57:
1f:17:9d:55:bc:89:81:b2:5b:ed:4f:f2:6f:d9:32:
a2:0c:69:c9:f1:91:0d:3c:13:1f:d9:1f:b1:fe:16:
84:b4:b9:e4:2b:2a:43:e4:c7:36:b0:99:55:e1:7f:
38:cb:f6:0a:77:14:99:ed:29:5e:29:b4:96:c7:5e:
95:9b:95:3f:ae:17:98:c7:49:e5:e7:f8:88:d5:09:
f1:ed:59:0d:d4:1c:3e:c2:e9:e1:25:4f:de:b7:82:
39:c3:c9:d2:11:28:4b:9f:5e:63:a1:30:15:0e:7a:
d4:a8:be:60:b2:31:66:ce:79:ec:e8:29:77:35:0a:
2b:25:24:9f:b4:75:9a:8e:a9:73:6e:7c:ca:a1:8e:
a7:2e:af:cb:70:f7:6f:57:bb:b7:28:39:75:58:65:
13:26:8f:f4:31:65:8d:d4:23:3c:35:1f:2a:73:c3:
7e:21:f5:9a:9e:ff:f9:8f:0f:c2:e5:b8:7a:0d:ba:
1c:5b:df:86:cb:15:91:78:f3:a7:ac:c5:fb:bf:3b:
85:5a:c5:d8:c3:65:21:b1:ba:a5:97:5f:01:6e:06:
d7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:76:39:64:C1:47:E8:71:05:C7:06:E0:B0:87:A7:EE:AC:44:3B:10
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/o3Y5ZMFH6HEFxwbgsIen7qxEOxA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:3d:ce:09:9b:0b:6a:5e:bb:92:ae:a4:2d:b1:62:a8:ce:56:
5d:55:d3:40:eb:1b:d3:4c:b8:68:6f:2c:55:36:48:45:bc:1a:
1f:f6:ea:5c:0b:14:c2:78:54:cd:63:ec:f9:bc:35:3e:a1:58:
40:36:1a:6d:4e:d9:73:12:50:ac:7a:3c:8b:86:18:fb:22:7e:
6b:e5:cc:3a:7e:79:96:80:c6:0b:cb:d7:24:b9:4c:c9:b2:41:
da:da:2e:a2:4a:45:4c:0e:11:bf:8b:3f:ba:02:16:44:ea:2d:
ca:d6:70:db:f4:b3:2a:82:e3:10:da:39:e4:e4:73:a6:38:03:
0e:9b:5d:57:82:34:84:e5:a2:3b:f8:d3:4e:ff:3f:10:f6:a0:
ef:38:42:af:57:b9:0c:6f:db:80:76:1f:61:70:b2:ab:83:f6:
e6:54:05:e0:84:c6:c4:80:62:64:ea:8e:44:1c:3f:e8:1e:d8:
c3:a7:7d:21:8c:df:a4:35:b2:3e:9f:6d:90:06:f6:1a:5b:3f:
db:bd:97:75:69:c7:ad:61:80:bb:97:24:da:ef:06:e1:46:a3:
44:57:38:24:98:c0:03:5c:64:f6:04:36:bf:3d:49:1e:a2:1a:
60:fd:e7:92:59:51:18:92:50:14:4c:65:6f:7c:9f:18:db:52:
50:02:4e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 07:00:25 2025 by rpki-client