Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/NGCRCXhvGZvdUzN3lTTCpnjc0uE.roa
File: NGCRCXhvGZvdUzN3lTTCpnjc0uE.roa (raw, json)
Hash identifier: sWSLmEE3ENbwxYrlyqch7e5BMqxgFTY7onfA/ygLMMk=
Subject key identifier: 34:60:91:09:78:6F:19:9B:DD:53:33:77:95:34:C2:A6:78:DC:D2:E1
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1DE9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NGCRCXhvGZvdUzN3lTTCpnjc0uE.roa
Signing time: Sun 15 Jun 2025 23:10:02 +0000
ROA not before: Sun 15 Jun 2025 23:10:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7657 (0x1de9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 15 23:10:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=34609109786F199BDD5333779534C2A678DCD2E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:b7:b6:03:3b:21:a5:49:39:62:61:34:33:
35:38:e0:f5:5b:7f:e2:4d:9b:5e:95:de:92:e6:de:
a5:5f:7e:da:95:78:49:cc:fc:75:37:f9:da:d6:e6:
ee:38:5a:80:bd:d5:ff:dd:a6:8f:3f:45:d5:7d:b3:
9a:3f:32:9b:a8:27:47:e5:da:d4:64:c9:dd:f0:3a:
9b:89:e4:6d:eb:aa:bc:dd:55:7d:a1:16:29:71:1d:
97:86:08:a7:0d:df:a3:bf:0f:34:2f:11:de:82:17:
47:53:a0:e3:02:e0:ea:45:15:15:01:5d:b2:e5:20:
19:1f:85:d4:69:6b:ac:78:68:ff:36:83:f3:02:3a:
8d:ae:f8:ff:af:24:8e:21:bb:ec:8f:48:5c:5b:42:
9c:06:69:8e:74:f2:38:bd:81:94:94:2b:83:2f:7a:
be:7c:ef:b4:48:3d:15:07:ae:9d:76:57:5f:07:54:
30:c8:f5:88:58:17:dd:15:01:a6:1a:7a:d5:e1:18:
28:39:b3:63:07:74:8f:28:c1:20:70:c3:df:1f:f8:
d2:6e:b0:f9:4c:c1:93:fb:a0:60:ab:43:42:01:8b:
59:82:21:1e:16:3b:43:16:fa:5a:df:be:0d:25:50:
74:e6:b4:4e:0b:7e:2c:60:e8:63:29:e9:31:43:27:
f6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:60:91:09:78:6F:19:9B:DD:53:33:77:95:34:C2:A6:78:DC:D2:E1
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/NGCRCXhvGZvdUzN3lTTCpnjc0uE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:e3:d9:54:2f:15:7e:e8:4d:bc:bd:32:17:59:34:80:20:7f:
cd:16:b6:e5:69:5f:4a:08:c4:a4:90:be:10:e6:1e:e9:e4:dd:
0a:93:21:85:de:80:e2:bf:22:df:ba:32:a6:25:1a:d1:17:47:
70:92:2b:d3:40:fe:5b:a0:49:23:3f:cf:35:75:36:d5:31:61:
47:96:19:ff:64:f9:26:10:79:79:e1:c8:87:71:ac:79:55:b0:
9d:f1:4c:c8:96:3c:8f:ae:40:ce:91:ea:fc:f0:db:f9:9f:e0:
5d:c4:32:b4:2c:ca:67:8d:e6:99:24:d3:7b:ce:ee:71:7e:fb:
3f:19:26:de:07:af:1f:87:63:dc:59:17:a9:08:29:d9:47:9a:
40:47:36:76:25:99:60:76:29:fb:ff:ca:ba:83:09:df:d4:17:
98:76:0f:6d:71:ae:32:d6:26:0d:cd:b8:c5:2b:8f:69:1e:64:
38:b5:ea:d1:5e:a8:14:76:b3:63:31:80:39:bf:3b:2f:74:22:
0d:7c:d4:2a:b4:4f:90:9b:bb:2c:94:ab:85:ba:d6:b3:cc:f5:
b9:68:a7:62:53:4d:0d:0a:ee:a6:c7:ea:6c:cf:9a:00:26:09:
2f:50:9a:70:39:b6:79:0d:b0:64:27:dc:1f:92:a5:f4:00:d4:
d5:f0:4b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:03:45 2025 by rpki-client