Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/3L3KgMYywLVRjcAsJiQoo0ys_qA.roa
File: 3L3KgMYywLVRjcAsJiQoo0ys_qA.roa (raw, json)
Hash identifier: /sNlHSyDbxRlkulmpyrVSetj21mzSvMM/2ZziwuwV4c=
Subject key identifier: DC:BD:CA:80:C6:32:C0:B5:51:8D:C0:2C:26:24:28:A3:4C:AC:FE:A0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04F1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3L3KgMYywLVRjcAsJiQoo0ys_qA.roa
Signing time: Tue 13 May 2025 16:08:02 +0000
ROA not before: Tue 13 May 2025 16:08:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1265 (0x4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 16:08:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DCBDCA80C632C0B5518DC02C262428A34CACFEA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:ef:27:a1:fe:be:a9:07:2d:16:83:c9:ff:
5a:d8:33:71:e8:3a:76:04:5a:64:ee:f1:a6:d6:db:
ad:43:46:d1:d5:a2:c8:e7:67:39:00:96:99:9e:e4:
2f:9e:84:eb:15:3e:dd:48:4d:50:24:67:8c:16:8f:
3c:f3:80:2b:bc:33:dc:ce:a7:ac:93:bd:83:aa:68:
9b:a0:f5:2a:b4:03:d3:a2:66:c3:ed:2e:b8:e4:6b:
94:69:3f:1f:e7:cf:5c:72:8f:06:92:ba:e6:8d:48:
27:98:47:fe:0e:be:d7:b2:72:13:52:b3:22:72:7e:
13:c3:78:85:75:69:f1:2d:3e:23:a1:de:af:96:4c:
86:d4:ba:79:18:91:76:1c:ca:cc:0f:1d:f4:78:07:
12:b9:87:9e:23:b0:f1:db:46:7d:7a:ee:8b:68:ea:
55:c6:65:9c:9d:65:a1:54:10:94:82:05:aa:c3:12:
94:ab:d2:26:5b:28:61:32:bd:7c:6d:eb:d0:8e:89:
30:0f:8f:d2:21:ff:07:cb:5b:d3:bd:ea:48:04:10:
7a:eb:f8:45:6b:10:57:77:69:f1:be:4e:aa:08:37:
0f:94:01:24:75:ac:d6:5f:10:51:3d:9d:43:bb:01:
e2:f2:0c:50:7f:4a:89:15:28:c8:c7:f5:08:48:28:
f2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BD:CA:80:C6:32:C0:B5:51:8D:C0:2C:26:24:28:A3:4C:AC:FE:A0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3L3KgMYywLVRjcAsJiQoo0ys_qA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:a5:4f:7f:19:53:b5:29:71:46:09:96:fc:2f:60:ec:e1:3b:
a2:ef:17:71:03:a3:6a:44:f1:59:d6:c2:ce:0c:fb:60:9f:8e:
48:8c:0f:f6:44:b1:6d:68:8a:61:12:a9:fb:f1:4b:19:ae:c9:
68:fa:09:88:cf:63:dd:40:36:c5:67:c4:b7:c1:15:b8:81:7d:
f5:2b:f6:3a:7f:95:4e:f6:de:b3:91:a0:c1:ea:d3:d6:aa:1e:
00:77:bb:83:ad:ce:59:79:20:e1:53:98:04:15:63:ab:82:01:
aa:71:6b:97:da:89:bc:35:08:a6:72:ee:33:7f:3f:f7:88:68:
3c:b3:f5:a7:88:37:b4:00:53:a4:75:4a:34:8e:f8:ee:33:e2:
44:12:bd:58:40:d0:8d:30:32:73:49:e1:4d:09:53:fb:d3:7c:
67:14:ae:53:48:f2:46:5f:d9:4f:24:a2:42:6d:ea:ef:35:1e:
96:2f:e3:f7:41:24:14:f8:20:5b:11:a2:fc:ef:bf:92:06:df:
41:17:dc:13:5f:8e:ae:18:ce:4b:70:55:45:8c:03:bc:f1:da:
1d:ea:d2:43:84:d8:4c:66:8c:d1:b8:33:4b:1a:6d:6e:f5:52:
11:f2:3a:e2:1c:71:d1:ad:4f:4e:59:4a:17:4d:d7:1e:7b:5d:
22:29:d3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:08:00 2025 by rpki-client