Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/K-d0-p0-5pxNYg8hlmy_VJiusyM.roa
File: K-d0-p0-5pxNYg8hlmy_VJiusyM.roa (raw, json)
Hash identifier: COcEm5JO9lavLwRSt0sPzNg2o4K4eET/8GVMN6rU2+I=
Subject key identifier: 2B:E7:74:FA:9D:3E:E6:9C:4D:62:0F:21:96:6C:BF:54:98:AE:B3:23
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2399
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/K-d0-p0-5pxNYg8hlmy_VJiusyM.roa
Signing time: Tue 24 Jun 2025 00:41:58 +0000
ROA not before: Tue 24 Jun 2025 00:41:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9113 (0x2399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 00:41:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2BE774FA9D3EE69C4D620F21966CBF5498AEB323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:11:f4:30:8a:ff:01:75:a4:90:55:96:9c:
71:df:05:28:5d:a3:d3:8d:50:bc:b6:3d:fd:51:b2:
8b:f1:93:e1:02:e1:26:00:88:38:62:3b:f8:57:13:
b8:3a:40:81:4c:8f:4a:2d:92:67:bb:29:02:4a:9c:
3b:1e:fc:99:d2:ad:f4:6e:53:55:4c:8b:f5:bc:76:
8a:8a:1e:fe:65:85:df:b1:2d:99:89:e2:09:1c:cb:
df:40:ac:05:74:80:c6:26:51:81:82:8c:68:a6:22:
d2:57:cc:7c:7d:8a:50:2e:fc:36:09:2b:53:8d:5a:
aa:24:45:1d:9d:f4:eb:58:2f:49:70:f8:57:09:42:
0c:a2:b5:c2:27:83:3a:c3:67:d2:21:69:55:0d:e0:
ce:02:93:3e:76:34:14:be:15:ae:5f:82:9d:99:70:
5d:d4:bb:1c:d6:88:c3:dc:0b:87:45:9d:b1:c9:33:
a3:80:41:3b:1d:06:77:d5:45:4d:0d:55:5f:e1:4b:
16:d0:61:15:d0:e8:06:a9:42:5b:e8:a0:9a:84:59:
60:76:b5:c4:7f:df:9a:e1:aa:3f:0c:a8:e9:18:0f:
7c:49:40:2b:bd:c8:91:7b:db:c2:c0:4e:18:e1:35:
d9:72:a0:c7:79:58:b4:c0:cd:6d:d9:1b:f1:20:d7:
d6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E7:74:FA:9D:3E:E6:9C:4D:62:0F:21:96:6C:BF:54:98:AE:B3:23
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/K-d0-p0-5pxNYg8hlmy_VJiusyM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:26:a9:43:0d:0e:01:7c:3c:93:54:c8:6a:5e:9a:8a:74:82:
33:7b:31:aa:4c:7e:21:a7:75:1d:05:32:8d:c7:da:1a:64:4f:
a5:a5:1a:85:14:bf:07:76:59:6e:c4:58:14:b6:c3:be:97:e8:
39:fc:b4:20:b1:4d:da:af:b0:37:3c:36:52:b1:fb:de:e2:87:
a9:95:00:ab:56:3b:4f:9b:d9:9a:45:67:6d:a3:67:db:ff:d4:
25:e2:63:05:67:c9:13:56:4e:7a:ab:39:32:0f:51:7a:ad:88:
c6:ed:f3:6d:a6:f1:fe:f6:57:7c:61:b7:8d:b8:0a:5d:40:3e:
3f:df:77:aa:a3:e9:20:97:fd:a7:5d:36:c5:88:1b:ea:2e:40:
15:82:9d:51:94:4e:81:20:f0:31:53:23:61:2a:6f:2d:e1:5c:
1c:64:88:d2:40:24:c8:4d:6a:9a:0e:7a:ff:fa:27:fc:44:4d:
7c:9a:4b:0f:3a:87:d4:1d:33:7f:80:8f:0b:55:fa:74:eb:ff:
32:7a:b5:af:24:31:38:db:0d:38:b3:25:b8:2a:f7:80:d9:63:
20:14:44:c3:48:44:9a:aa:4c:50:51:b1:f9:3a:28:16:b7:1d:
10:93:31:a6:2d:c9:54:2e:db:4c:ac:ad:bf:59:7f:df:66:30:
7e:7a:b5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:23:46 2025 by rpki-client