Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/OTn8W0ku7lDTNmRt2nlGUfl4MDY.roa
File: OTn8W0ku7lDTNmRt2nlGUfl4MDY.roa (raw, json)
Hash identifier: nzpjIfv5jcJ+M9ghgcN200tbkPdkusOS46+BQfkJR7Q=
Subject key identifier: 39:39:FC:5B:49:2E:EE:50:D3:36:64:6D:DA:79:46:51:F9:78:30:36
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1319
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OTn8W0ku7lDTNmRt2nlGUfl4MDY.roa
Signing time: Sun 01 Jun 2025 13:09:30 +0000
ROA not before: Sun 01 Jun 2025 13:09:30 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4889 (0x1319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 13:09:30 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3939FC5B492EEE50D336646DDA794651F9783036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8b:57:a0:8b:4f:14:a0:ae:3e:cd:c8:bf:11:
1b:e3:a7:76:1e:b9:ca:d6:47:cf:70:9d:e0:3a:5b:
7a:8b:63:b3:29:04:6e:cc:68:f0:13:42:df:59:7a:
e8:06:c2:a6:6e:04:27:f7:d7:1f:dd:9f:55:10:48:
f1:37:3c:6a:ef:66:49:b4:e1:b5:b2:50:44:04:6c:
f4:a9:d6:3e:bf:ec:b4:b0:39:9e:76:60:85:fa:bc:
18:24:d3:48:06:26:ba:c7:62:29:73:1a:7c:ff:b9:
b8:b0:b5:ed:82:c5:a1:76:19:0f:b0:06:a8:4f:78:
88:9f:66:a6:3b:42:11:b1:b0:1f:47:67:ef:da:9e:
59:8e:5f:ac:9c:fb:c1:6f:f1:45:d9:cb:f4:fa:c1:
27:d3:a5:9a:ed:1c:25:27:f2:ac:7e:d7:cb:fb:06:
40:47:fc:8a:ba:88:82:7a:96:65:eb:3f:c3:9e:29:
97:e9:ba:68:c6:03:7f:29:68:cb:9d:8f:ec:40:66:
68:8c:63:ec:a4:6a:18:96:7b:c0:45:f3:a6:4f:5c:
a2:a9:93:b0:70:05:84:a3:99:a9:47:cc:88:46:36:
1b:96:2c:28:4f:ec:0e:f3:39:4c:a4:2f:d3:a9:b7:
a3:ad:60:6d:8c:04:c3:04:41:81:48:4f:f4:a2:1c:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:39:FC:5B:49:2E:EE:50:D3:36:64:6D:DA:79:46:51:F9:78:30:36
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OTn8W0ku7lDTNmRt2nlGUfl4MDY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:af:56:3a:7a:9b:3a:80:63:2a:45:f5:dc:93:42:db:dc:47:
4e:4f:44:5e:38:07:23:ed:9e:be:d8:15:dc:c2:9b:60:2c:98:
f3:0e:bd:59:35:84:c8:be:5a:a0:36:e7:cc:86:42:8d:c0:f2:
95:27:f3:ab:72:dd:3a:b1:bc:9d:5c:97:93:5e:f8:69:28:66:
1f:fa:1f:cf:c4:95:33:92:3d:d8:36:0d:ce:ad:c0:e4:56:b2:
b8:9d:f0:09:ff:5e:76:59:1e:5f:c0:31:00:79:33:a6:2a:ee:
28:12:94:9d:60:b6:b5:87:e5:f4:73:66:23:b5:9a:d8:81:6e:
3d:a7:7e:db:d6:37:8d:6e:17:07:39:fc:ff:b3:54:60:17:2e:
ce:f2:28:0d:15:83:bf:df:bc:a2:90:54:9a:e5:7a:17:72:3b:
40:ba:91:52:f3:88:6e:ef:1a:97:d2:bb:c7:85:c5:21:dd:39:
9a:d8:fb:39:b5:1c:69:04:fc:ed:64:88:9c:74:88:d2:f1:22:
26:53:7f:8e:79:9d:32:8e:e4:ce:3d:28:19:8e:09:13:4e:26:
0d:16:0e:4b:cb:b0:77:d2:da:da:4f:86:61:13:7e:70:88:17:
34:4f:f4:c7:52:da:c2:4a:aa:dd:cd:95:cc:97:f5:76:2a:11:
1c:82:7c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:10:00 2025 by rpki-client