Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/z8GNphDS3yZER18T3QmKSsfM8kA.roa
File: z8GNphDS3yZER18T3QmKSsfM8kA.roa (raw, json)
Hash identifier: IcoxGdy3JQmsclO0aApO2Abj44soKtb0fbSVS8XzqFw=
Subject key identifier: CF:C1:8D:A6:10:D2:DF:26:44:47:5F:13:DD:09:8A:4A:C7:CC:F2:40
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0DCD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/z8GNphDS3yZER18T3QmKSsfM8kA.roa
Signing time: Sun 25 May 2025 11:38:55 +0000
ROA not before: Sun 25 May 2025 11:38:55 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3533 (0xdcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 11:38:55 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CFC18DA610D2DF2644475F13DD098A4AC7CCF240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cf:9a:31:7b:31:2b:35:91:da:8e:06:5d:25:
4b:c2:65:20:19:3a:c7:00:c7:20:74:66:14:9d:af:
45:a6:76:5b:7d:62:61:a7:6a:e7:a6:93:16:45:59:
b5:88:6e:25:f8:19:7d:90:84:8b:46:f6:43:54:a9:
73:2e:0c:9c:62:12:7f:6d:4c:97:8e:79:ee:b9:8c:
de:9b:f0:3b:7e:51:2c:b4:8f:32:40:d9:42:93:aa:
9b:2c:c5:74:f9:3d:95:f1:f1:e3:e5:f1:53:31:e9:
d6:f3:f0:36:bd:1a:b2:4f:20:af:74:0d:a2:70:b0:
a2:12:10:7c:fb:0d:37:f4:96:52:57:6c:27:e2:3d:
a0:cc:bb:0f:ab:ca:d2:91:6b:18:a7:38:a7:4f:dd:
d3:a3:96:08:e4:87:00:05:c8:15:68:0f:b8:77:35:
18:f2:8d:fa:a9:10:4b:10:f1:f7:8e:36:96:4e:00:
2c:32:a1:10:45:54:30:61:cb:21:cf:d4:5a:ef:ea:
96:43:8e:8f:8f:a1:13:55:53:df:33:86:f5:b8:1d:
bc:f7:a0:0f:bc:b9:95:aa:57:6f:6e:f7:ed:a6:ea:
e9:43:d6:41:9d:64:4a:60:48:73:f9:b8:b2:95:f5:
48:58:ec:9b:76:cb:e0:fa:59:da:ea:57:db:c3:4f:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C1:8D:A6:10:D2:DF:26:44:47:5F:13:DD:09:8A:4A:C7:CC:F2:40
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/z8GNphDS3yZER18T3QmKSsfM8kA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:8f:8c:9d:0d:35:c7:0e:90:16:78:6e:c1:c4:16:60:e5:bd:
d5:3c:2d:6f:90:d9:ee:9e:ec:04:c7:9e:5a:13:86:38:cb:ca:
31:d6:9e:23:cc:21:16:e3:0d:cd:bd:7b:1c:a7:54:48:c8:6a:
b6:e9:8a:01:4d:9a:68:81:a2:cb:72:a0:a9:9c:19:1e:ef:53:
ba:7a:94:b6:8b:6f:06:6e:d9:24:08:ce:26:b1:28:30:32:a9:
cf:79:59:2e:8d:c9:72:1d:c4:15:d3:38:f2:75:fe:06:7e:76:
36:49:c8:d1:a8:8c:02:95:7b:4b:a3:0e:2b:04:da:bd:74:ed:
c8:92:df:04:20:3b:e0:d2:fc:93:32:2c:db:6e:c3:74:dd:d3:
80:6c:71:4f:a5:c6:c9:83:28:6a:6d:56:bf:0f:62:a4:4c:f8:
ba:99:be:53:49:7c:48:c2:b5:09:fb:f8:15:54:68:fd:b1:6c:
29:72:2f:eb:6b:88:db:9d:68:dc:70:44:87:d1:b9:65:6e:4e:
95:c8:6e:23:20:75:38:48:59:9f:d6:4a:17:89:69:1c:ce:a5:
5f:01:b3:b2:90:0e:17:77:71:24:79:6d:17:e8:51:64:9f:15:
8e:06:4c:30:51:1c:da:64:5a:11:9f:70:f7:14:74:1d:7b:88:
3c:87:fc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 06:24:28 2025 by rpki-client