Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/JSmRxR75jQN4iB_Pfb3SD_TFedM.roa
File: JSmRxR75jQN4iB_Pfb3SD_TFedM.roa (raw, json)
Hash identifier: Kbzy9t8C0+Ty2ZXE1QsEi2C+mDm8XtshqAawApimnek=
Subject key identifier: 25:29:91:C5:1E:F9:8D:03:78:88:1F:CF:7D:BD:D2:0F:F4:C5:79:D3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 20C5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JSmRxR75jQN4iB_Pfb3SD_TFedM.roa
Signing time: Fri 20 Jun 2025 06:08:25 +0000
ROA not before: Fri 20 Jun 2025 06:08:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8389 (0x20c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 06:08:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=252991C51EF98D0378881FCF7DBDD20FF4C579D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:62:03:c4:b3:98:31:a9:89:db:5d:27:55:
0d:26:51:e1:53:32:54:a8:9a:15:25:58:e5:1f:26:
5b:5d:7d:c9:cd:da:b9:3d:0a:a1:a1:f6:10:81:93:
d5:eb:50:d1:3f:66:98:97:8a:c9:85:56:78:b5:99:
4e:8f:fb:15:5d:4e:13:c4:25:01:68:2b:a7:32:7e:
9f:ae:9e:87:99:95:50:6f:b5:d8:b6:fb:8b:89:74:
5e:9c:a5:f8:04:c5:5d:76:50:58:88:48:73:fd:fb:
27:93:83:4e:b2:a2:ca:df:16:ea:a1:24:2d:1d:7c:
6f:de:c1:13:5f:43:45:01:ba:fe:bf:31:3a:16:c0:
cc:6d:3c:5b:f1:0b:e6:cd:9d:e1:8f:ae:a8:55:a1:
8f:45:8d:9d:04:87:00:07:ff:17:a2:29:4e:90:bf:
5f:75:ea:e3:fb:fa:91:27:ab:63:4f:df:e6:1d:eb:
30:ca:e8:fc:08:16:4d:66:14:39:3d:21:12:af:ad:
d1:be:1c:ec:e1:6d:24:9c:65:96:ec:66:18:2c:a9:
1c:79:a3:ac:4f:33:e6:00:41:5a:d1:df:81:52:bb:
33:9b:e0:f6:4a:70:34:78:4d:d8:6a:5a:e5:14:ba:
b2:1a:ca:a4:56:c8:bd:82:39:3d:dc:97:80:ab:11:
a8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:29:91:C5:1E:F9:8D:03:78:88:1F:CF:7D:BD:D2:0F:F4:C5:79:D3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JSmRxR75jQN4iB_Pfb3SD_TFedM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:a1:09:0f:6f:59:81:fd:54:dd:9b:01:89:f6:b8:85:d5:fa:
ba:a1:ab:89:82:b2:b7:41:30:64:11:b0:da:d0:5e:f8:0b:85:
0b:3a:c6:04:fa:72:43:ad:4e:0f:09:ee:35:18:c3:8a:6c:e8:
d1:e7:60:8f:63:38:20:de:78:46:23:54:5f:17:4a:4a:4d:5c:
81:08:db:1e:b5:c7:d4:7e:52:ca:88:77:5e:1c:a3:7b:93:6a:
72:bf:45:40:1a:34:8b:30:76:79:1d:93:cd:a3:ad:ee:82:0a:
77:56:50:8e:a4:c3:74:59:9a:4f:2e:24:1e:80:22:fa:3b:7e:
32:9a:61:c5:82:05:96:56:97:de:d5:53:ff:7b:7c:1d:87:f1:
c1:b6:b6:d5:fe:51:fd:79:3a:db:d3:7f:36:99:62:ec:22:dd:
c5:5b:f4:ea:85:88:02:aa:6b:0d:ff:dc:15:ff:a8:66:1d:de:
00:01:e5:02:ff:5e:f9:12:08:ac:06:4e:66:ef:8d:b9:6c:7c:
97:0d:8d:76:da:eb:c7:99:10:5f:c7:2d:d9:da:d2:51:c4:4a:
6d:17:5a:32:bd:f9:10:92:59:43:88:9c:0f:e8:ae:f6:6c:ef:
0e:19:50:3d:67:fd:89:b7:96:1b:ce:20:25:2e:69:c4:64:d0:
26:21:08:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:16:46 2025 by rpki-client