Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/C18tNaIagSJFOHHGgsg5DxsaEb4.roa
File: C18tNaIagSJFOHHGgsg5DxsaEb4.roa (raw, json)
Hash identifier: llP0qnRGhbyk6Z0EquU/cD1uIVDQ3BwWp2np1AAHva4=
Subject key identifier: 0B:5F:2D:35:A2:1A:81:22:45:38:71:C6:82:C8:39:0F:1B:1A:11:BE
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E61
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/C18tNaIagSJFOHHGgsg5DxsaEb4.roa
Signing time: Mon 26 May 2025 06:08:38 +0000
ROA not before: Mon 26 May 2025 06:08:38 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3681 (0xe61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 06:08:38 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0B5F2D35A21A8122453871C682C8390F1B1A11BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:80:3c:81:74:94:65:54:49:e4:af:2e:7f:
20:cc:cf:07:7a:5e:bc:e4:25:c9:a4:f6:82:0d:d9:
d6:cd:07:9f:b9:1c:a5:02:f8:e4:74:10:df:db:9e:
f5:d5:f5:a0:16:09:f6:b9:47:91:07:33:34:f0:2f:
05:96:e0:70:06:ef:2f:9d:78:bf:22:26:3f:df:45:
c3:c7:26:39:e2:1e:13:63:f8:87:72:0b:f4:2e:08:
98:19:5b:bc:a3:e6:6a:6a:8f:af:03:f3:96:ab:0d:
59:7c:b1:78:75:a9:7c:04:0c:a9:d8:d1:39:16:2b:
14:fd:29:42:f2:0b:cb:d0:a7:d2:d8:ad:0e:e2:65:
77:af:6a:37:47:ad:69:9c:7f:db:08:50:29:52:f5:
8f:7b:df:84:be:25:45:a9:8e:cf:17:3e:e2:2f:dd:
25:50:cc:cc:5e:95:67:7a:08:94:ab:3f:18:c9:18:
7d:20:4b:f1:84:9a:4d:95:d0:3e:b7:59:dc:2b:3b:
8f:47:fb:ea:db:38:c6:9b:ef:30:77:f1:20:b1:86:
cb:e3:4b:d2:4b:1b:e9:2d:25:11:1a:4e:17:c2:ef:
c7:2f:9b:88:b8:af:d3:73:30:4a:36:06:f8:71:33:
fe:f0:ec:a1:73:00:0d:38:f3:c1:71:4d:66:9f:ec:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5F:2D:35:A2:1A:81:22:45:38:71:C6:82:C8:39:0F:1B:1A:11:BE
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/C18tNaIagSJFOHHGgsg5DxsaEb4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:29:bb:5b:b9:99:a7:e6:32:6d:26:24:d9:e2:f4:9f:a3:12:
70:8f:c9:80:22:2e:3a:c9:03:8b:16:86:b0:87:e1:01:a2:11:
7d:4c:9d:76:79:46:01:22:bd:39:10:42:f9:bd:42:00:91:80:
17:ee:af:fc:d8:b4:21:20:82:6d:77:7f:ff:4d:a7:7e:db:8c:
4f:11:d7:de:e0:47:47:07:c8:0f:3a:db:e6:3e:d5:82:ec:5a:
71:76:b4:43:57:8f:e6:b9:3a:0b:58:92:6b:49:b6:84:0e:55:
c2:dc:b8:20:df:da:f0:05:ff:59:df:95:d4:40:35:8f:67:ed:
07:8a:63:41:6c:80:71:51:4e:b3:54:c1:2d:f2:b0:e0:1f:35:
c7:7c:d6:6d:90:ba:d9:dd:c2:f4:64:53:27:0f:26:d8:78:97:
41:a7:cf:3e:ae:21:ae:19:9e:06:39:79:2e:37:c4:2d:32:2a:
3e:84:8c:82:5c:3f:e2:bd:1b:2a:e6:2f:dc:69:5a:27:4c:98:
1d:62:03:dd:2c:af:75:d5:e9:1a:25:f4:fd:97:45:75:b3:d6:
51:d2:95:e1:ba:1d:fc:1a:b7:a8:15:28:aa:84:07:43:da:6a:
64:19:83:5f:21:cb:5f:81:10:d7:7f:8a:d1:54:38:1d:62:f3:
f8:d0:04:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:27:52 2025 by rpki-client