Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Q6CoeRwcRi6s8Zpzk1ZXx7oiazc.roa
File: Q6CoeRwcRi6s8Zpzk1ZXx7oiazc.roa (raw, json)
Hash identifier: DqCjgKMuQLuqaJlIOJlgm04Xsd5O7/qMnJJnkhh5LxQ=
Subject key identifier: 43:A0:A8:79:1C:1C:46:2E:AC:F1:9A:73:93:56:57:C7:BA:22:6B:37
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0F1D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Q6CoeRwcRi6s8Zpzk1ZXx7oiazc.roa
Signing time: Tue 27 May 2025 05:38:47 +0000
ROA not before: Tue 27 May 2025 05:38:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3869 (0xf1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 27 05:38:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=43A0A8791C1C462EACF19A73935657C7BA226B37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:46:6f:7b:19:b1:3c:c6:5c:d9:4a:01:cb:ea:
0e:78:35:ae:f2:be:9f:3e:e4:f3:c2:8c:2d:3b:a4:
8d:ed:0d:e1:8e:f9:66:32:90:bc:c7:11:a3:5e:cd:
8e:fb:b4:1e:a1:55:5d:ab:91:d5:d1:5c:24:4e:2c:
7c:f2:bc:f9:44:87:bd:0f:4d:8b:f5:66:c7:c2:0e:
09:50:5b:48:50:f3:42:4b:79:ff:87:b7:8b:71:48:
f4:62:d5:b1:fa:90:3e:57:2f:13:cc:19:c0:c9:0e:
c1:a5:b2:f6:c7:a1:ad:ea:f0:4a:c3:bd:63:ed:f8:
b3:62:8f:09:23:90:ef:e9:4b:56:4c:30:a1:37:bc:
2c:61:a9:54:60:a4:a3:35:e8:48:87:7d:e9:35:8c:
28:de:a9:1d:f5:47:28:1f:40:d2:8e:3e:6f:e1:59:
cf:b1:a6:83:bb:b4:2f:69:24:e4:42:44:16:b5:5d:
79:26:0f:cc:4d:9e:12:b0:04:36:fb:72:1d:c8:e7:
9e:cb:2c:cd:89:14:fd:20:e5:82:00:98:c0:02:e3:
88:49:65:5f:df:25:c9:b0:d4:31:df:44:1a:07:a9:
10:c7:21:0a:34:74:a3:3c:15:32:c4:91:16:70:0f:
78:9b:87:c4:2e:a6:11:6b:d7:08:88:03:d9:f3:99:
eb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A0:A8:79:1C:1C:46:2E:AC:F1:9A:73:93:56:57:C7:BA:22:6B:37
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Q6CoeRwcRi6s8Zpzk1ZXx7oiazc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:29:68:b6:6c:ae:f7:ef:1d:3e:1d:a7:36:d0:7b:5f:d0:b7:
6b:92:3f:4d:37:a8:6c:44:a3:66:07:d8:66:60:fa:3d:57:49:
e6:90:61:15:47:99:12:74:3c:df:e4:8a:1e:c0:0f:37:c9:77:
59:2a:9a:38:01:20:98:f7:a1:db:6c:ba:55:54:9d:5e:56:5d:
aa:ba:fc:2f:44:62:9b:a3:e0:5d:2e:e9:b1:3c:3a:54:7b:53:
a4:74:66:60:48:04:be:98:fa:5e:c0:c6:4f:0d:04:82:1e:ba:
63:86:31:48:bf:cb:75:1e:c1:fd:56:5b:cc:73:11:df:52:7e:
e5:19:a7:38:d3:cb:41:84:ec:3f:f6:8b:dc:e7:e8:56:f7:f2:
17:d6:cf:e4:b0:3e:b1:20:44:af:34:b3:46:b5:1f:6b:e0:50:
77:82:18:df:08:a8:51:b2:ab:ab:de:e3:4b:ae:ca:65:11:ee:
7e:c5:60:ca:1a:a4:a4:3e:30:de:c4:fb:99:5d:b0:ab:43:44:
9a:c8:be:08:e8:38:bd:10:d6:4b:26:0f:14:55:d8:b5:ac:ad:
7e:c7:23:51:b5:b4:c1:ab:71:7c:97:9c:33:7e:cf:32:8f:ca:
5b:6e:4a:f2:ef:af:60:d3:73:71:dc:51:9a:47:e3:f9:6b:d9:
08:af:39:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:12:08 2025 by rpki-client