Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/QmvlEUbu09tEBO_umpuYZ51Uawo.roa
File: QmvlEUbu09tEBO_umpuYZ51Uawo.roa (raw, json)
Hash identifier: 6h83GBwk4mJviOyyCfm+iNdOeeiSMbkUYnqiFSkCSfI=
Subject key identifier: 42:6B:E5:11:46:EE:D3:DB:44:04:EF:EE:9A:9B:98:67:9D:54:6B:0A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 09C5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QmvlEUbu09tEBO_umpuYZ51Uawo.roa
Signing time: Tue 20 May 2025 02:38:16 +0000
ROA not before: Tue 20 May 2025 02:38:16 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2501 (0x9c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 02:38:16 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=426BE51146EED3DB4404EFEE9A9B98679D546B0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:a4:26:1b:7e:a5:16:63:91:56:00:24:bb:
5b:13:4b:db:f9:ff:3d:51:29:56:29:a9:8c:47:72:
af:64:94:3f:bd:49:56:f9:fa:34:11:47:39:35:ab:
57:db:01:72:4d:09:97:26:36:4a:9d:98:10:7c:d6:
df:ab:0e:b9:ae:97:cb:33:7d:7c:ba:24:06:40:50:
b8:0f:a7:75:ae:51:9f:71:da:09:43:e4:2d:d3:63:
00:42:eb:41:66:c3:52:5a:94:c5:ae:9f:cf:6c:6b:
74:92:e8:0c:a9:18:c4:3f:ee:b9:86:98:48:fd:df:
78:2e:df:a6:6c:9c:79:1a:63:7d:9f:2b:2f:c9:fa:
5f:01:3e:a1:d9:a2:23:95:04:b7:07:50:69:f5:b8:
bc:32:d4:11:6a:eb:68:db:e6:7c:c3:96:41:36:28:
1d:44:30:9a:d2:0f:fa:aa:0f:21:d0:c9:c7:74:3f:
f0:ac:70:86:87:4e:56:94:34:db:21:e5:2c:99:db:
12:25:a4:ca:f7:1b:09:ac:b6:ab:fc:f3:5a:be:e3:
14:4f:2b:db:1a:c3:93:22:a0:81:0f:3a:e0:a4:8b:
91:31:bd:1d:82:5a:29:c8:47:64:40:a5:12:68:53:
1b:dd:81:64:fc:e1:56:80:ac:a3:33:b1:17:06:13:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6B:E5:11:46:EE:D3:DB:44:04:EF:EE:9A:9B:98:67:9D:54:6B:0A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QmvlEUbu09tEBO_umpuYZ51Uawo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:9d:7d:4a:af:98:39:e3:b7:3d:74:6f:7e:8a:67:fb:ab:35:
1f:72:13:ed:fe:09:b8:ca:ae:6b:90:ab:99:3b:a3:f9:9d:8c:
0f:c1:ef:b9:e6:05:8c:fe:b7:f1:70:55:02:50:ad:2a:52:70:
e4:fc:2e:16:89:f8:c8:a9:38:d0:90:03:24:44:52:54:e8:96:
44:9d:d9:a3:82:12:c2:f2:e7:52:02:82:20:f8:95:34:e9:13:
ce:eb:43:8a:a4:6c:5c:2a:0a:a2:9a:c4:fd:b7:34:eb:ff:54:
1e:65:48:1a:70:d2:0b:1d:ef:b6:3d:ac:01:2c:e1:39:43:89:
cf:5a:fd:6d:bf:b1:98:f6:9b:18:fc:e1:5f:0b:84:be:b7:ed:
57:c3:0d:16:33:0f:77:e8:25:3c:3a:39:d0:4c:0d:f0:08:88:
87:b1:f3:93:c2:f2:9b:54:3a:8c:23:63:2b:cd:e1:00:a2:0c:
da:3d:0a:c3:fe:f2:f3:7b:8e:9f:e5:21:09:ff:78:bf:fa:a7:
fc:fd:fd:66:ba:c9:a8:79:74:e5:6f:bf:ad:af:30:7b:6e:2e:
77:19:cc:7f:c2:5e:ba:79:60:45:d5:65:79:fe:2f:b4:9c:0f:
d4:c8:92:3f:ef:5f:a0:48:0e:35:5a:3e:6c:6b:d5:99:86:51:
66:47:36:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:00:12 2025 by rpki-client