Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/N2iNOQS2CyXzPoQn_HyZHcqifaQ.roa
File: N2iNOQS2CyXzPoQn_HyZHcqifaQ.roa (raw, json)
Hash identifier: 0hhW7qnocCv1OQ9Y4BumwKj8OaEDgp7+rMmZ/nrUdbo=
Subject key identifier: 37:68:8D:39:04:B6:0B:25:F3:3E:84:27:FC:7C:99:1D:CA:A2:7D:A4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0931
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/N2iNOQS2CyXzPoQn_HyZHcqifaQ.roa
Signing time: Mon 19 May 2025 08:08:09 +0000
ROA not before: Mon 19 May 2025 08:08:09 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2353 (0x931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 08:08:09 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=37688D3904B60B25F33E8427FC7C991DCAA27DA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:36:cf:e5:78:a3:87:2a:fc:f7:c2:d0:d9:
b4:10:45:50:4d:e8:59:04:66:12:ac:a0:f8:f5:1c:
51:be:ab:d1:cb:69:01:24:9e:82:f9:25:79:ff:ac:
c7:3d:68:53:bc:e1:a2:69:11:a7:46:2e:f9:2d:ed:
fa:8b:e0:42:61:e2:bb:45:47:d7:0a:c6:d1:92:c4:
17:94:1f:e9:00:2a:4c:f7:38:9f:d5:67:ed:41:e0:
46:84:33:08:46:55:a6:5d:5e:ac:a3:8a:41:19:40:
87:33:83:3d:71:75:2b:6b:f0:b4:37:0d:da:f5:9d:
e8:0e:43:83:e3:24:ac:1f:be:12:33:74:20:77:1e:
ff:a9:a2:43:b4:93:98:4c:14:fe:9f:c9:b2:17:09:
90:68:a1:40:12:5a:e2:47:ea:b5:ec:00:99:85:15:
ff:70:9d:3c:21:3d:97:35:15:3a:d9:01:0a:33:cc:
76:28:d2:c8:a1:59:7a:12:9a:4f:0f:77:9a:e2:47:
1a:67:73:f8:38:de:50:66:38:50:be:34:be:17:5b:
cc:ab:36:7a:89:a9:60:41:63:0f:0e:b2:89:6b:84:
98:0b:8b:96:c3:01:be:09:a6:e0:66:c0:5e:66:7d:
61:d6:ee:e7:8f:5c:46:bc:fa:a9:76:cd:5e:ed:0e:
f1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:68:8D:39:04:B6:0B:25:F3:3E:84:27:FC:7C:99:1D:CA:A2:7D:A4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/N2iNOQS2CyXzPoQn_HyZHcqifaQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:af:5c:75:4d:44:88:0b:d8:f4:ee:6b:68:5e:18:f8:01:ab:
f7:68:7b:5b:19:d5:0c:a5:73:9b:e6:a1:84:62:02:7d:4a:ad:
98:ef:98:97:e1:a5:c0:6b:41:ef:45:a9:24:4c:3e:ea:08:90:
0d:c9:f4:ac:18:92:b5:03:52:14:09:8a:21:6b:88:69:41:cf:
d2:45:8f:5a:74:f1:b9:77:5e:a9:17:69:d9:88:cf:bc:48:5a:
25:af:c2:2f:52:3b:88:f4:29:db:95:08:78:2b:7e:60:06:43:
e2:bb:7d:cc:79:fe:99:49:09:76:f5:57:09:cb:96:55:a2:1f:
13:b2:70:85:fb:09:34:a8:c7:09:c6:db:92:c7:0b:8b:83:67:
14:15:ad:43:b5:52:16:f8:c7:88:95:6d:7c:6d:43:fd:d9:aa:
c0:fc:6d:6f:8d:14:1f:82:08:f1:cb:f9:98:e0:ba:9d:9c:41:
89:94:d9:93:5b:42:a0:98:ce:ff:a8:1f:f4:bc:80:7d:96:8d:
23:bc:db:f9:6f:c8:c6:1e:94:61:f6:c9:1b:8f:d1:cd:a6:8e:
2d:c3:62:fd:79:36:26:56:83:80:4e:38:1d:cb:14:4a:07:58:
e5:79:1c:3e:d6:74:e5:34:29:f0:fe:ac:c0:ef:5d:1d:75:1c:
f6:fe:64:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:18:05 2025 by rpki-client