Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/DRdUo41TzpZRfsaFkfwx3YZRxOM.roa
File: DRdUo41TzpZRfsaFkfwx3YZRxOM.roa (raw, json)
Hash identifier: NRgNtdXMG2Yx8MP6GXIIV0LrulqOtsKW4MkZUH+ieBQ=
Subject key identifier: 0D:17:54:A3:8D:53:CE:96:51:7E:C6:85:91:FC:31:DD:86:51:C4:E3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 09D1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DRdUo41TzpZRfsaFkfwx3YZRxOM.roa
Signing time: Tue 20 May 2025 04:08:54 +0000
ROA not before: Tue 20 May 2025 04:08:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2513 (0x9d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 04:08:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0D1754A38D53CE96517EC68591FC31DD8651C4E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:36:15:7f:fd:61:75:78:12:95:50:37:22:
4e:40:a7:47:f7:fe:87:76:43:cb:28:4e:35:19:fa:
49:99:6e:56:91:d2:a5:70:22:af:aa:e1:39:56:ec:
c0:77:c1:c7:17:9f:71:2a:32:1d:5d:72:86:03:b0:
c5:9c:01:88:56:91:40:99:fb:37:e6:dc:69:2e:21:
7b:c7:78:04:9c:29:35:94:ab:c7:d4:64:ac:44:ec:
3d:ee:88:61:df:1a:72:e8:cd:9a:5b:18:fa:e2:ca:
dd:28:62:ba:50:41:e7:fb:b2:f3:49:b7:7c:aa:eb:
24:5a:66:f0:78:9e:33:e8:e8:42:85:a4:f6:cd:af:
5e:00:7e:0f:67:8f:2b:e0:dd:97:dd:37:72:27:11:
c8:bd:c6:18:91:f8:aa:b6:58:19:03:08:f5:53:34:
57:8e:34:7c:87:c5:aa:ea:ba:5b:fd:78:fc:4b:30:
91:61:5c:5a:21:40:ff:62:45:7d:90:11:24:77:9a:
a9:46:8d:e6:cd:67:72:b4:ac:12:10:70:e0:59:07:
e9:80:23:f1:18:cc:3d:4d:4a:6d:9d:5d:d3:a2:34:
ae:78:27:4a:b9:8f:f7:3f:56:28:f7:e9:ef:da:f7:
0b:21:07:be:4d:35:a1:b7:13:60:d9:70:3e:76:60:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:17:54:A3:8D:53:CE:96:51:7E:C6:85:91:FC:31:DD:86:51:C4:E3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DRdUo41TzpZRfsaFkfwx3YZRxOM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
91:1a:33:d9:d3:1f:46:c0:0d:3b:72:c1:8d:65:05:99:17:2e:
a2:60:4c:68:02:eb:50:7e:d7:1d:fc:9a:b6:22:2d:3b:69:a1:
4b:7f:6e:ef:20:ab:96:c4:5d:1b:3e:46:f2:74:a9:3a:86:b2:
70:0d:63:5b:6b:b4:79:3c:09:26:36:45:4c:ae:17:5d:29:9e:
33:16:e5:d3:6c:14:4a:1f:80:0a:08:31:e2:ed:2b:de:59:b0:
e8:e8:67:f0:9e:8f:75:d2:fc:d4:a5:c5:a3:28:90:ba:b2:0a:
8d:95:89:91:3c:65:15:c6:fe:b9:61:ab:5e:ae:a1:0f:8c:96:
bb:32:89:30:49:2d:88:ce:75:bf:7c:78:d2:a3:84:a4:a4:d8:
59:08:c1:76:00:5d:9b:8b:bc:6a:a6:9f:3d:aa:a9:94:41:57:
bc:d8:5b:02:38:1b:e3:d2:be:58:e5:51:d7:e2:47:53:49:e1:
c7:76:2c:ad:7b:42:27:42:92:61:30:8e:b5:e7:8d:cb:b8:b8:
0b:10:33:2f:e0:49:e8:68:d0:57:60:f2:a2:e3:a5:63:49:9f:
ed:2d:7b:3c:c7:d3:17:d5:5d:8c:f0:48:1b:6e:e9:8c:8c:5c:
c1:d7:5b:02:54:c5:42:fb:4f:5b:8d:cc:97:aa:17:a6:2b:08:
d1:bc:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:04:13 2025 by rpki-client