Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Ccf-yXufdfrk5E_S1b1YLICCuBc.roa
File: Ccf-yXufdfrk5E_S1b1YLICCuBc.roa (raw, json)
Hash identifier: D74irf1tsHMkwyDadWzkPbjMoLPtoD5i6r/eC+wIL/M=
Subject key identifier: 09:C7:FE:C9:7B:9F:75:FA:E4:E4:4F:D2:D5:BD:58:2C:80:82:B8:17
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1F09
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ccf-yXufdfrk5E_S1b1YLICCuBc.roa
Signing time: Tue 17 Jun 2025 11:10:17 +0000
ROA not before: Tue 17 Jun 2025 11:10:17 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7945 (0x1f09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 11:10:17 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=09C7FEC97B9F75FAE4E44FD2D5BD582C8082B817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:31:80:4d:d0:f4:cd:94:42:38:af:b3:36:9a:
37:24:48:3c:45:40:f6:a7:d5:58:36:a2:7d:84:3e:
33:47:60:14:05:dc:a4:f1:cb:e0:9f:20:0d:d8:47:
fa:52:50:3c:80:d7:ab:f8:ce:de:d7:41:56:e3:c3:
27:de:0c:7a:58:0f:c9:33:49:4b:89:21:87:bf:8a:
f2:fb:70:53:9c:32:fb:9f:e8:2d:e0:29:0a:d6:83:
a8:fa:79:fd:ed:26:9d:1c:57:71:3b:83:3e:73:73:
f2:e2:cd:b0:d9:d9:21:4c:ab:34:06:1a:25:61:16:
ca:82:1b:86:7d:d6:4a:bf:a1:1c:cc:fa:34:3c:d8:
23:09:1e:62:06:42:c8:77:34:07:43:39:9d:94:d5:
f2:33:31:22:f0:00:55:74:5a:6a:f8:44:25:5e:c7:
0f:f5:5b:73:ab:d3:df:90:67:12:81:90:a6:37:0d:
a4:73:06:c3:c0:58:29:e6:0e:94:85:4b:38:ac:f7:
0e:15:e3:de:e4:d0:ca:db:01:10:1a:81:af:57:8c:
4c:ee:11:14:dc:8d:e6:e7:da:83:80:e7:70:01:f7:
aa:ba:f6:6c:73:cf:97:14:0d:da:b1:72:fe:84:a7:
34:5b:37:9a:2e:35:1e:21:d4:22:0f:90:b0:de:21:
54:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C7:FE:C9:7B:9F:75:FA:E4:E4:4F:D2:D5:BD:58:2C:80:82:B8:17
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ccf-yXufdfrk5E_S1b1YLICCuBc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:0b:2c:5a:bc:95:ba:2f:15:fc:b9:00:30:a8:9a:3a:de:f6:
8f:95:d6:b4:9b:8b:db:1b:47:f2:b1:14:36:fe:ae:cd:b9:74:
d4:58:f1:96:3d:92:2d:cc:fd:9c:de:f8:13:2c:c0:b7:79:c0:
b0:b5:57:de:e3:f2:89:e1:a3:45:e2:a1:eb:27:1d:2f:34:9b:
49:a6:8a:be:ea:ea:28:5d:e9:26:47:be:79:a8:02:88:2e:51:
98:d8:ee:b6:fc:93:22:03:24:1d:d4:93:8c:8b:cf:dc:ae:0b:
92:63:59:c9:28:6d:b1:f2:93:4e:29:84:4d:e2:ce:11:d2:0a:
a3:8c:f9:bd:dc:11:b6:1c:17:ab:9e:31:07:33:3b:20:bd:7e:
f9:a0:d0:2b:75:8d:57:fc:e6:aa:ff:26:dc:23:8d:9a:86:d4:
ef:91:b0:8d:27:28:9c:28:eb:01:10:a4:59:bd:d4:c7:13:23:
e2:bd:92:f1:fe:bf:d5:80:72:51:b9:c3:9e:03:76:5e:ca:95:
3c:ef:ff:3f:67:c8:fd:70:e3:5c:42:0c:d3:e0:90:03:c6:26:
12:17:c2:0e:4b:73:ad:91:a1:23:02:e6:b1:fb:76:bc:fa:5a:
90:f6:96:05:44:ec:c5:3d:86:ad:27:08:ab:e7:e6:13:12:cd:
40:0b:03:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:03:28 2025 by rpki-client