Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/rdsxO-MZ9UBPHbu5yXFnaZOEZac.roa
File: rdsxO-MZ9UBPHbu5yXFnaZOEZac.roa (raw, json)
Hash identifier: RVk7eoAuJjBXgiB8N4VPjoy1EhLI2vdH3ewgo7gPwsk=
Subject key identifier: AD:DB:31:3B:E3:19:F5:40:4F:1D:BB:B9:C9:71:67:69:93:84:65:A7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1C65
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rdsxO-MZ9UBPHbu5yXFnaZOEZac.roa
Signing time: Fri 13 Jun 2025 22:39:55 +0000
ROA not before: Fri 13 Jun 2025 22:39:55 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7269 (0x1c65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 22:39:55 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=ADDB313BE319F5404F1DBBB9C9716769938465A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:b8:dc:bd:aa:01:90:66:2e:0b:46:ec:75:
53:cd:06:54:7d:67:61:a7:ab:3b:6a:af:b9:47:19:
da:38:ab:23:6b:15:3d:f1:f0:4e:1a:b0:64:55:f4:
fd:8a:e1:c8:d2:b7:2c:30:42:e9:62:0c:f0:32:75:
4c:6c:45:4a:0c:63:8f:bc:2d:d3:53:0c:50:ef:e6:
72:d1:5f:98:80:ef:00:18:83:53:b9:fa:ee:c1:7b:
c3:74:c1:a1:95:51:67:80:ea:c1:95:91:18:6c:f6:
30:80:0c:90:3f:92:ac:a7:1d:5a:97:8c:56:1c:87:
61:47:32:90:e8:e9:92:ac:e0:25:2a:dc:2f:53:b0:
d8:ff:a4:6b:2f:3d:76:0d:fe:df:68:c4:e3:aa:74:
22:09:a5:7d:1c:6a:01:1e:e2:3f:31:44:05:4c:f6:
7f:2a:19:3d:b0:f7:11:22:46:29:f0:a3:df:db:22:
e3:36:70:cc:9c:4d:b0:17:35:2a:2a:8a:08:4b:c8:
f3:14:00:7f:c9:94:0a:50:fa:3a:2c:c3:ab:e5:7f:
38:71:72:ce:74:4e:ca:61:c6:c0:4f:79:c8:5e:9a:
de:17:a1:14:aa:d2:da:f8:b3:eb:ed:0c:d4:1f:43:
c6:cb:17:19:f8:f9:ea:f7:9a:1d:51:59:ce:1d:6e:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DB:31:3B:E3:19:F5:40:4F:1D:BB:B9:C9:71:67:69:93:84:65:A7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rdsxO-MZ9UBPHbu5yXFnaZOEZac.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:7a:70:e0:84:de:d1:e3:e9:15:c6:7b:c4:fe:00:d1:17:0d:
bb:20:8e:25:cb:a1:fe:2c:58:1f:fb:4a:72:28:08:cc:33:fa:
3a:73:51:1f:12:c2:92:c7:25:d9:9f:7d:91:92:ae:d5:52:5b:
57:28:2a:8c:43:ce:2e:15:7e:e3:3a:01:9a:85:73:bf:28:20:
9f:a7:53:5a:4a:41:e2:ff:b3:2c:cf:16:2a:9e:5c:45:6c:bb:
e6:9d:dc:07:76:88:3f:83:be:1d:69:ec:43:b8:ec:71:59:45:
58:2a:88:4b:46:1f:9a:3e:2e:ab:b4:4a:7f:97:44:e9:b8:c6:
12:6f:33:df:ad:14:a8:95:4c:43:74:2f:a7:f9:01:af:c1:11:
ea:c5:09:03:9c:08:d7:9f:53:cf:cb:95:6f:88:43:10:d8:bb:
7a:6e:ed:4c:c8:f6:62:a1:37:2b:d2:91:8a:67:1c:d7:1f:4c:
9a:e5:a1:e7:e2:f4:4e:43:4e:25:77:ba:91:d2:71:a6:c2:7d:
1c:85:5f:11:6f:39:2f:6c:a5:48:c3:5a:41:95:18:5e:4a:82:
ab:d9:31:6e:a8:e0:f7:8d:9a:08:5e:8e:b7:0d:de:2b:ce:35:
59:e8:e7:7d:f8:95:dc:42:d0:47:16:66:17:c9:30:ef:b8:a4:
d1:79:0f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:39:27 2025 by rpki-client