Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/w8j0760wYVtRx1jy0nYyZAyxd7w.roa
File: w8j0760wYVtRx1jy0nYyZAyxd7w.roa (raw, json)
Hash identifier: bw0tEDyTp+Db8Hffsqq7TrQipJiSvmdMddNP9VDVeEs=
Subject key identifier: C3:C8:F4:EF:AD:30:61:5B:51:C7:58:F2:D2:76:32:64:0C:B1:77:BC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1B45
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/w8j0760wYVtRx1jy0nYyZAyxd7w.roa
Signing time: Thu 12 Jun 2025 10:40:02 +0000
ROA not before: Thu 12 Jun 2025 10:40:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6981 (0x1b45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 10:40:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C3C8F4EFAD30615B51C758F2D27632640CB177BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:61:dc:ae:0a:a4:00:8a:02:e1:a4:dd:15:
ad:44:02:41:71:23:ed:42:96:54:ba:27:17:a6:f9:
ae:4d:a2:6a:64:8a:cb:38:a0:b1:2c:e5:bb:ec:a5:
37:57:8d:86:ed:3f:b2:62:c5:65:bd:b9:da:18:4f:
35:11:0e:df:5a:0f:a4:64:49:d3:9e:ea:81:70:ee:
76:32:dd:ec:7e:b0:20:e7:49:3e:34:5a:73:1f:e1:
1e:92:de:37:78:87:77:ee:e1:1a:aa:b3:af:13:df:
51:de:73:5d:fa:1c:45:13:47:a6:da:56:57:86:c0:
48:5d:5a:c8:db:13:e0:bb:3d:2a:3a:b0:f6:b7:89:
5c:aa:6f:a8:0a:63:81:23:eb:71:96:f4:0a:ce:c0:
03:d2:09:7d:fd:ce:af:7a:37:57:ee:b8:1e:24:db:
66:0b:9b:1d:3a:47:bc:01:aa:08:0e:6b:34:51:22:
25:3c:04:64:a0:f4:cf:6c:28:12:95:62:5c:8c:90:
63:1e:4b:32:76:e2:0d:3e:61:12:bc:1a:a8:6c:8b:
fa:b3:f5:af:fe:84:06:aa:60:73:77:55:b0:44:ea:
98:4f:29:4f:ba:07:7d:28:4e:4a:0c:20:75:a4:e3:
c3:ff:82:66:49:2b:c1:3d:bf:23:37:10:bc:1c:b1:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C8:F4:EF:AD:30:61:5B:51:C7:58:F2:D2:76:32:64:0C:B1:77:BC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/w8j0760wYVtRx1jy0nYyZAyxd7w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:9f:f6:a8:b5:8b:47:a9:42:15:c8:6d:59:8c:75:86:8b:57:
0f:9c:9c:05:b7:2c:76:73:e5:53:3d:d7:01:4e:a4:d5:ab:67:
03:9a:32:80:5f:44:e5:43:99:eb:51:fa:25:a6:03:65:ec:9e:
ca:84:58:f1:26:25:29:d7:22:38:b5:fe:23:1b:27:ab:21:b5:
35:a7:8c:18:18:4f:3a:7a:a3:46:62:8a:9c:00:cf:2a:cc:f7:
78:5f:95:a4:6a:06:13:84:33:7c:2e:07:b4:94:50:b9:7f:b0:
aa:83:f4:a9:83:68:91:ed:d6:67:7f:09:cc:2a:fe:05:85:2d:
97:f3:57:bb:05:d3:33:b5:e9:e6:4c:1c:01:b1:44:64:a7:ee:
80:e3:1c:ac:e7:b3:36:3a:97:b3:17:fd:f1:24:4a:d9:ca:95:
ab:85:45:67:87:2a:9b:c2:53:70:e8:9f:2c:26:d1:0d:06:33:
2c:f5:70:ac:07:7e:ec:6c:d4:ae:35:28:8a:b9:22:fc:71:52:
7b:d4:88:56:e6:e1:ba:ed:c1:5b:76:e0:86:c8:14:bb:0a:89:
49:43:f3:e1:8f:27:36:5a:f2:11:6b:73:fd:fe:5f:97:43:b9:
94:3b:82:a0:10:42:a4:0b:a9:a6:b2:fc:16:d1:79:6a:f4:5c:
f2:d9:e5:17
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG0UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTIx
MDQwMDJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEMzQzhGNEVGQUQzMDYx
NUI1MUM3NThGMkQyNzYzMjY0MENCMTc3QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIXWHcrgqkAIoC4aTdFa1EAkFxI+1CllS6Jxem+a5Nompkiss4
oLEs5bvspTdXjYbtP7JixWW9udoYTzURDt9aD6RkSdOe6oFw7nYy3ex+sCDnST40
WnMf4R6S3jd4h3fu4Rqqs68T31Hec136HEUTR6baVleGwEhdWsjbE+C7PSo6sPa3
iVyqb6gKY4Ej63GW9ArOwAPSCX39zq96N1fuuB4k22YLmx06R7wBqggOazRRIiU8
BGSg9M9sKBKVYlyMkGMeSzJ24g0+YRK8Gqhsi/qz9a/+hAaqYHN3VbBE6phPKU+6
B30oTkoMIHWk48P/gmZJK8E9vyM3ELwcsb1bAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUw8j0760wYVtRx1jy0nYyZAyxd7wwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni93OGowNzYwd1lWdFJ4MWp5
MG5ZeVpBeXhkN3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAECf9qi1i0epQhXIbVmMdYaLVw+cnAW3LHZz
5VM91wFOpNWrZwOaMoBfROVDmetR+iWmA2XsnsqEWPEmJSnXIji1/iMbJ6shtTWn
jBgYTzp6o0ZiipwAzyrM93hflaRqBhOEM3wuB7SUULl/sKqD9KmDaJHt1md/Ccwq
/gWFLZfzV7sF0zO16eZMHAGxRGSn7oDjHKznszY6l7MX/fEkStnKlauFRWeHKpvC
U3Donywm0Q0GMyz1cKwHfuxs1K41KIq5IvxxUnvUiFbm4brtwVt24IbIFLsKiUlD
8+GPJzZa8hFrc/3+X5dDuZQ7gqAQQqQLqaay/BbReWr0XPLZ5Rc=
-----END CERTIFICATE-----
Generated at Sun Jun 22 07:12:50 2025 by rpki-client