Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LZy8TOSzqoOXF_-mavDln8BY4OI.roa
File: LZy8TOSzqoOXF_-mavDln8BY4OI.roa (raw, json)
Hash identifier: e0rhNHT5kv2OXHLXI7I501c94FVFUfM0wvfKhcqisyw=
Subject key identifier: 2D:9C:BC:4C:E4:B3:AA:83:97:17:FF:A6:6A:F0:E5:9F:C0:58:E0:E2
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1F31
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LZy8TOSzqoOXF_-mavDln8BY4OI.roa
Signing time: Tue 17 Jun 2025 16:10:18 +0000
ROA not before: Tue 17 Jun 2025 16:10:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7985 (0x1f31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 16:10:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2D9CBC4CE4B3AA839717FFA66AF0E59FC058E0E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b3:1b:5a:0b:c7:0f:d0:7d:0a:dc:23:f3:92:
66:d1:d1:31:29:b1:d0:56:1b:33:be:18:ad:4d:fa:
80:ec:a6:a3:fe:88:6c:8e:ea:33:f7:d6:3c:50:bd:
50:cb:c1:e8:07:dc:71:d6:1a:91:71:e3:05:a9:02:
45:8a:83:d7:4b:6a:8e:f6:3d:86:77:b5:28:66:a3:
75:e8:73:ce:cc:5f:89:bd:73:ce:01:a7:09:40:25:
b8:75:9e:8c:20:e9:ad:59:02:40:09:95:b6:2a:f8:
c4:1d:98:9d:e5:fb:7b:34:21:cf:9b:1e:43:16:43:
d4:b5:d4:c7:22:19:01:43:58:e1:04:76:c1:17:0e:
05:9e:23:13:01:ae:a8:91:18:e7:80:29:ba:87:28:
fc:ee:2f:bf:6f:5d:8c:95:51:80:d4:7e:51:8e:da:
4f:d6:6c:9d:8a:61:34:73:88:be:e0:40:2e:6e:a8:
46:0f:38:7c:4b:40:d7:59:b6:91:c7:11:07:5f:3a:
b1:29:de:70:c8:8c:87:36:f7:80:8c:13:55:d0:f2:
a9:5e:35:d1:b5:37:a9:5c:81:ea:98:f2:6a:b0:9d:
14:0d:68:d9:f0:5d:57:d7:d5:03:ee:6b:e8:03:44:
2a:66:8b:87:38:5e:7a:94:b9:d7:86:94:a9:42:e8:
ea:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9C:BC:4C:E4:B3:AA:83:97:17:FF:A6:6A:F0:E5:9F:C0:58:E0:E2
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LZy8TOSzqoOXF_-mavDln8BY4OI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:0c:00:cc:63:87:a0:06:2a:4f:d0:e0:63:78:14:58:62:5e:
f3:1c:6a:d7:2e:94:ed:d9:87:21:78:b8:40:9f:10:36:fb:9e:
88:0d:81:c1:37:3d:8c:14:d0:a1:6f:a8:0a:de:75:6e:ce:81:
62:19:57:54:8f:45:7c:76:c1:30:f9:ab:15:9d:22:fb:1f:fa:
62:6e:fe:6d:8a:2a:17:74:f4:62:66:95:38:e1:19:80:02:77:
a3:e9:91:59:4d:21:c4:7b:6a:89:bd:7b:d6:f8:4b:26:44:b3:
71:32:73:7a:41:49:11:33:90:5b:04:b1:43:d5:6b:3a:5e:39:
0e:05:35:35:c6:69:cf:e9:f7:33:00:08:7a:8f:6d:bb:02:ac:
9e:95:b8:d0:62:c2:2d:6e:d6:9f:34:0e:75:f1:4f:fd:78:af:
a4:91:27:49:34:b5:e0:40:18:40:ff:dc:0f:0f:69:13:83:98:
f5:ba:dc:41:e9:36:d8:c1:6a:ec:28:be:d6:2a:89:39:00:9f:
b2:c1:4a:aa:b9:1e:73:6f:b7:ed:7d:b4:2c:69:1e:c8:17:96:
9c:38:f7:c5:b7:be:bd:bc:13:c3:3a:23:58:d1:2f:65:9f:62:
27:0c:87:b7:a7:c8:37:95:02:f2:11:53:2a:f6:bd:ed:bd:f4:
af:71:69:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:17:07 2025 by rpki-client