Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/FeWfDX67ft3as9mMk8i0RB4S_R8.roa
File: FeWfDX67ft3as9mMk8i0RB4S_R8.roa (raw, json)
Hash identifier: mw4PCd/6WQAOO7Z5kGJptmabv2RDHTWaPha235S0C9Y=
Subject key identifier: 15:E5:9F:0D:7E:BB:7E:DD:DA:B3:D9:8C:93:C8:B4:44:1E:12:FD:1F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C21
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FeWfDX67ft3as9mMk8i0RB4S_R8.roa
Signing time: Fri 23 May 2025 06:08:45 +0000
ROA not before: Fri 23 May 2025 06:08:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3105 (0xc21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 06:08:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=15E59F0D7EBB7EDDDAB3D98C93C8B4441E12FD1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2b:55:47:78:3d:28:28:54:28:d5:7b:c0:c4:
ed:b9:30:18:b0:f2:89:93:31:72:17:54:7d:4c:46:
bb:19:fa:13:ba:8e:63:13:76:e1:08:3c:71:59:07:
38:17:67:c2:87:9b:76:49:c2:63:76:16:3b:2c:c6:
fc:4f:9c:f0:68:ed:eb:8e:37:62:e7:b4:3c:fa:7c:
bb:0c:05:5f:9d:58:f8:d4:a5:c3:61:16:d2:a0:ed:
f2:fa:5c:1b:93:f3:43:3e:71:bc:7b:6f:93:ed:d5:
47:ea:c8:1d:04:1f:b2:f6:8b:20:e1:9a:d6:2f:e7:
19:ad:f4:ce:79:15:fb:fc:5d:71:c1:eb:69:92:c1:
d2:28:ef:db:91:cb:47:59:31:20:0c:b0:d4:a3:f6:
18:2a:65:21:e1:f0:e9:e0:39:3e:96:2f:d1:c6:9d:
d2:6c:21:2d:18:81:21:6c:97:12:5f:2c:a0:9a:d2:
2c:22:ce:c4:a1:e9:59:b4:88:ef:34:d5:a2:18:da:
af:98:40:a8:e4:68:18:87:e7:2c:fc:0c:df:ca:10:
d2:b6:4c:d7:ca:54:9a:b7:0c:bd:49:7a:91:06:98:
00:f0:28:4e:f5:9a:63:3a:e7:23:4f:a7:11:84:49:
8c:f0:58:93:22:6c:7d:61:e0:31:f0:f9:28:47:57:
9d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E5:9F:0D:7E:BB:7E:DD:DA:B3:D9:8C:93:C8:B4:44:1E:12:FD:1F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FeWfDX67ft3as9mMk8i0RB4S_R8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:e5:a4:4c:bb:35:b0:0d:34:6f:02:19:95:26:67:6e:a7:20:
23:a6:08:4b:0f:1e:3e:44:42:01:85:bd:a0:b0:8f:74:96:b1:
99:58:f9:56:b0:f8:9e:e8:4b:04:df:28:59:f1:89:74:56:1c:
f6:de:c5:91:df:e5:56:b4:a8:0f:1e:1b:34:b5:0c:d0:5e:80:
1a:18:3e:9c:6e:f5:9f:87:90:16:5b:2e:30:01:16:a5:30:d5:
d8:a4:94:e0:91:38:ed:62:91:a9:e6:cc:24:d3:8d:82:31:7f:
7b:6d:e7:2d:df:cb:7d:61:a8:b1:d3:a7:ee:4e:22:59:71:e2:
f4:33:17:f4:3a:fd:6d:1d:a8:29:37:aa:aa:54:31:e1:af:f7:
31:0a:d0:d0:8a:c6:b2:23:93:71:c5:36:a5:f1:32:40:66:b5:
dc:3a:d5:e4:32:ff:28:f5:7e:50:53:d9:f5:b8:b3:b2:94:0e:
70:b5:be:d8:34:5a:b2:b6:f2:c4:e2:fe:75:06:73:8a:b4:02:
53:89:6c:41:e7:d5:37:d8:c0:f9:4f:31:39:99:1f:db:9f:bf:
5f:01:33:d1:2e:92:e2:7b:88:01:6b:54:5e:f0:aa:27:d6:e0:
65:12:94:59:94:90:9e:51:fc:7b:0f:0a:ed:58:39:60:8f:4b:
4c:70:37:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:15:46 2025 by rpki-client