Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/07U8q_4G2lRMwoK-kAtHKaCAWr0.roa
File: 07U8q_4G2lRMwoK-kAtHKaCAWr0.roa (raw, json)
Hash identifier: 5PJGZvMJ2jfHaggZiKmGbeczOeM2SamrlgCQmNpFq3M=
Subject key identifier: D3:B5:3C:AB:FE:06:DA:54:4C:C2:82:BE:90:0B:47:29:A0:80:5A:BD
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2089
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/07U8q_4G2lRMwoK-kAtHKaCAWr0.roa
Signing time: Thu 19 Jun 2025 18:49:40 +0000
ROA not before: Thu 19 Jun 2025 18:49:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8329 (0x2089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 18:49:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D3B53CABFE06DA544CC282BE900B4729A0805ABD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:68:c2:aa:a5:7c:3e:97:e1:b2:3b:14:8d:
af:07:c9:6e:37:7d:b9:34:64:6e:22:17:dc:27:2d:
b2:3b:c9:b1:cf:69:6b:13:36:98:3f:94:2b:67:9b:
5c:d1:15:51:76:24:06:93:ec:79:c7:f5:28:fa:e9:
40:ef:f1:8a:f2:26:64:24:a3:af:d5:ba:0b:6c:2e:
49:56:f2:1e:59:31:1b:48:aa:11:c0:09:ae:81:4a:
94:40:7f:ae:4c:e1:a9:6c:b9:c8:ac:d7:3e:f5:e1:
48:f1:b2:1f:88:c9:85:60:bf:3b:8d:fa:5a:29:4c:
3f:79:28:26:67:8c:cf:12:c8:42:5a:4f:fa:04:5a:
c8:07:ea:ff:21:d3:2c:3a:62:51:b5:0f:f1:52:5c:
97:a6:ef:59:37:0e:b3:f8:96:1a:b6:c4:7d:fc:ef:
54:55:87:c5:64:3b:92:01:78:df:f8:79:ef:76:d3:
86:31:d7:25:45:0b:f7:e4:ad:42:c2:7a:b4:24:3f:
1e:42:84:2b:d0:6d:f4:b5:81:71:3c:65:74:24:f0:
eb:3b:a8:c1:66:b3:8d:6f:9f:5e:80:62:58:83:b3:
23:5c:2d:4b:fa:21:d4:1f:bc:9a:35:e4:b9:25:a7:
79:40:62:a7:f5:d2:60:5c:ea:ae:0a:7a:28:ea:3f:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B5:3C:AB:FE:06:DA:54:4C:C2:82:BE:90:0B:47:29:A0:80:5A:BD
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/07U8q_4G2lRMwoK-kAtHKaCAWr0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:ea:15:15:e7:93:6b:33:71:1f:e1:06:ca:2e:40:c4:7c:90:
45:aa:4f:ca:fd:06:3d:b6:2c:2a:88:e7:78:06:a4:13:3f:3f:
3d:13:cf:51:1b:3a:c2:66:ac:55:d3:27:14:22:fb:07:1a:8a:
b2:89:7c:8d:cc:3f:43:00:6c:b3:f9:c3:75:1f:74:35:c0:e0:
fd:70:f7:cd:a9:ea:47:a1:b5:32:c1:44:f4:cd:f9:e4:d9:0b:
66:df:4f:87:0f:65:a3:08:00:5c:05:0a:5d:6c:ee:fa:e6:c1:
2b:25:17:1b:4d:d9:52:42:88:25:e7:ec:3b:e0:d0:b4:7f:bc:
a5:b6:9b:b3:68:86:06:72:dd:db:79:6f:9c:66:e3:cb:9c:f9:
f9:a1:64:7f:25:34:a1:67:60:f7:a8:11:17:ed:4b:4d:f5:55:
48:d4:10:40:89:88:df:29:cf:1a:b8:bc:9b:c2:2f:94:37:a2:
47:96:cf:4c:2f:32:33:56:26:18:a2:3a:f7:86:f3:88:e2:c6:
28:a7:77:1b:4e:9f:8d:18:66:04:0c:d9:9c:84:2e:e5:2f:88:
aa:16:fb:e2:c8:4e:12:a7:f6:7c:e3:f7:c2:5d:4d:9a:3d:af:
69:8d:47:c1:2e:fc:75:f9:b4:52:6c:1d:f7:c3:02:ba:72:35:
0b:fe:b2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:10:03 2025 by rpki-client