Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/0sP6888hlfIYhXo5VK6A_c5YhQQ.roa
File: 0sP6888hlfIYhXo5VK6A_c5YhQQ.roa (raw, json)
Hash identifier: SjFlBb/12fxM8SwVHxV0TY/3kser+lHJ3C4NQZ8kZww=
Subject key identifier: D2:C3:FA:F3:CF:21:95:F2:18:85:7A:39:54:AE:80:FD:CE:58:85:04
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B9D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0sP6888hlfIYhXo5VK6A_c5YhQQ.roa
Signing time: Thu 22 May 2025 13:39:04 +0000
ROA not before: Thu 22 May 2025 13:39:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2973 (0xb9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 13:39:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D2C3FAF3CF2195F218857A3954AE80FDCE588504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:37:1b:97:b0:45:7b:a7:4f:c1:1a:d8:2d:
ff:1c:19:94:3e:3a:b9:14:72:33:74:c8:58:df:42:
14:35:c1:a5:a0:e2:23:84:d5:5d:d2:c5:3f:dc:98:
3c:34:33:14:d7:c4:bd:a0:2f:bf:a8:6f:92:78:88:
79:32:d7:25:e6:e4:25:bf:d8:4a:82:b3:9b:d6:67:
7f:a0:b6:a0:28:56:25:4a:5e:2f:d6:46:e3:c4:80:
4e:37:f8:0f:3c:27:50:c9:86:ee:44:a0:e5:40:2f:
73:4c:5c:fc:a1:97:47:5c:af:08:cb:d4:74:d7:6d:
fa:bc:78:d5:d8:85:62:57:85:87:60:d8:5b:c2:1d:
8b:a8:93:52:44:eb:e6:b4:df:6a:82:57:6c:2e:52:
ad:00:04:ea:0f:82:88:29:54:8a:db:e1:85:17:f7:
4b:21:ea:8d:16:e1:82:1b:c6:b9:f0:6d:ac:74:4a:
6a:66:42:59:1d:a3:50:82:fe:69:68:95:49:10:03:
05:c5:b6:74:f4:66:24:96:7c:1b:a7:9e:4c:cb:41:
c6:47:95:46:b3:02:6f:82:0b:d5:72:c1:c4:16:ea:
1d:1f:6d:38:dd:42:86:dd:23:bc:fa:da:5a:c0:9f:
97:21:e5:da:c5:9f:da:ec:e2:12:23:b5:e6:be:b7:
69:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C3:FA:F3:CF:21:95:F2:18:85:7A:39:54:AE:80:FD:CE:58:85:04
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0sP6888hlfIYhXo5VK6A_c5YhQQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:22:20:c9:58:79:f1:a7:4e:3f:f6:7c:01:75:da:c5:4c:a0:
5f:e7:3b:ad:96:ea:7c:c3:59:35:c8:bc:24:5f:12:c4:23:5c:
03:6d:a5:a3:c2:b3:40:35:01:4b:d6:05:bf:80:04:5c:2a:a8:
34:1c:da:4e:24:15:e9:f7:3a:2b:92:7f:1a:be:75:ad:f4:94:
57:6d:ed:b0:f5:fb:6d:6f:37:1f:13:e4:78:c8:05:5f:80:67:
81:49:df:68:60:de:24:3c:98:1c:d5:2e:c9:44:c1:f0:32:84:
88:34:48:2a:5d:e8:42:29:99:0b:e1:5e:81:fa:79:df:a3:ba:
9b:c2:b2:f6:29:e3:15:da:c9:18:e2:6c:74:85:69:5f:45:55:
20:7c:a7:1d:ac:8c:30:f3:f6:d4:7f:d2:1e:3d:82:46:bb:fb:
8f:13:99:0b:66:ac:f5:e5:10:b4:52:7a:ee:ad:05:21:d6:83:
e3:a6:77:7a:f9:ce:9c:b4:13:c3:80:b3:2d:84:10:f2:3c:dd:
1e:76:59:35:ee:f0:14:b2:85:a1:6d:5e:3a:39:30:16:2a:de:
e2:14:3c:e1:e8:a5:85:07:0f:89:dc:2e:26:77:df:32:6b:ba:
3b:fc:41:1e:d2:a3:a9:81:ab:09:4b:82:1b:2b:a1:56:94:0a:
6f:70:a4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:21:43 2025 by rpki-client