Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/x2F7ntmQ9rG3le1ShhBfrBvLpBM.roa
File: x2F7ntmQ9rG3le1ShhBfrBvLpBM.roa (raw, json)
Hash identifier: tzJMWVqqy0ERR8duAjYt3C33nLB6yBUYQQc/yhEMPTM=
Subject key identifier: C7:61:7B:9E:D9:90:F6:B1:B7:95:ED:52:86:10:5F:AC:1B:CB:A4:13
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1431
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/x2F7ntmQ9rG3le1ShhBfrBvLpBM.roa
Signing time: Tue 03 Jun 2025 00:09:24 +0000
ROA not before: Tue 03 Jun 2025 00:09:24 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5169 (0x1431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 00:09:24 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C7617B9ED990F6B1B795ED5286105FAC1BCBA413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cd:3e:3e:ca:98:72:7e:d0:c4:26:30:5d:3f:
0c:4a:7e:56:26:be:03:f5:42:64:37:eb:c0:cd:9f:
69:20:63:b8:34:88:73:1b:07:31:37:7b:4b:ff:a4:
c2:d9:e9:a6:6c:e6:94:45:1c:b5:d3:0b:18:a1:8e:
28:45:6b:66:72:23:ff:05:a2:b7:54:bf:94:56:92:
4a:3d:09:c9:b3:d5:02:73:48:ed:02:99:6f:55:f8:
01:8f:33:d7:0e:43:90:33:e5:c6:d9:91:9a:07:32:
09:57:bd:57:ba:6e:9e:30:49:c8:a7:f2:1c:e2:87:
60:72:dc:b7:ca:2a:e9:01:79:1e:2b:65:cb:8a:ef:
99:29:12:69:18:0e:1a:62:3c:f8:9d:73:25:35:b9:
54:9f:13:9a:12:ad:04:58:44:e5:56:01:d2:cf:ec:
c6:b0:70:68:09:27:17:16:94:37:df:3e:9c:92:fa:
a8:bd:50:8e:e1:6b:42:6f:a4:f6:7c:bb:9c:a2:ff:
54:8f:1d:16:34:cb:e5:6c:48:96:61:1d:c7:6c:4c:
33:58:c5:b9:e9:13:dd:be:08:94:8d:23:4d:60:c2:
04:b0:f4:dc:6b:4c:20:7c:93:6a:ff:bb:fd:77:ec:
45:88:62:9b:2b:20:d7:2d:f8:26:5c:80:c0:af:d3:
17:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:61:7B:9E:D9:90:F6:B1:B7:95:ED:52:86:10:5F:AC:1B:CB:A4:13
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/x2F7ntmQ9rG3le1ShhBfrBvLpBM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:66:01:b9:de:d1:89:4f:7a:61:df:b4:44:f1:8e:6f:72:b0:
6f:34:68:b2:ff:7f:b8:37:46:e0:c4:d4:71:12:21:93:8b:9d:
24:8f:39:2d:ef:6a:1e:08:af:12:c7:a7:a9:ab:92:8c:4d:1a:
15:53:d6:4f:9f:95:7c:f0:b9:03:1b:cf:24:e0:7b:76:af:df:
a9:42:8c:8c:04:ba:aa:c9:39:3f:87:33:91:b4:8f:c5:bd:c9:
95:b7:5c:8f:b2:53:c3:6d:3f:1b:d1:19:65:0f:cf:76:13:8d:
00:47:57:7d:c1:75:68:4a:38:16:cf:02:f3:29:b5:f1:7f:ef:
0e:71:51:e1:7f:43:92:42:78:92:ed:b4:0c:dc:eb:24:17:1d:
3d:f5:8e:16:d0:65:81:c2:9b:e8:94:f6:9d:8d:e5:c1:d6:97:
c0:0a:aa:57:57:f7:c5:bd:f5:ff:20:7c:22:a4:49:c4:ff:f1:
61:8b:c6:04:10:51:bf:f0:d2:27:08:7f:a9:38:48:3a:19:ea:
54:fe:02:44:20:72:f8:22:ee:90:73:2e:ea:d9:f8:4a:fb:4a:
04:23:5f:42:0a:ba:59:dd:57:b1:9e:4a:8c:0c:fe:25:56:90:
66:4c:b6:7c:bf:87:d7:3a:bf:9d:82:4d:06:42:bb:2a:77:65:
2c:af:0f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 21:27:41 2025 by rpki-client