Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/U2MRXcyWLY7gERjZ1ymrINziVKY.roa
File: U2MRXcyWLY7gERjZ1ymrINziVKY.roa (raw, json)
Hash identifier: iz+32ScmYpIOcGrdLK3ZLptciciuU0fdJBSBTOgRs0k=
Subject key identifier: 53:63:11:5D:CC:96:2D:8E:E0:11:18:D9:D7:29:AB:20:DC:E2:54:A6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1F45
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/U2MRXcyWLY7gERjZ1ymrINziVKY.roa
Signing time: Tue 17 Jun 2025 18:41:06 +0000
ROA not before: Tue 17 Jun 2025 18:41:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8005 (0x1f45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 18:41:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5363115DCC962D8EE01118D9D729AB20DCE254A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:a9:40:19:0f:ee:d7:74:af:c5:f4:37:a7:
b2:18:a3:23:b0:de:47:23:e9:7a:c5:83:b6:d9:12:
2c:f4:ed:3b:94:b1:cf:80:8b:70:19:3c:3b:34:69:
ca:97:0a:5a:77:90:2e:fe:ce:b7:b0:f1:9a:a8:cd:
d4:7c:09:86:f7:c4:d3:62:1a:41:6b:2a:04:de:13:
e6:1d:a9:f8:1f:44:8d:37:e4:01:22:ca:12:9e:a0:
f7:de:6f:35:ae:0e:64:b7:05:2d:d0:3f:70:30:07:
10:8e:ee:4e:66:59:8d:4e:6a:17:6b:bd:e2:0e:8e:
c3:56:26:4b:a2:9e:a2:aa:09:c9:18:e0:e4:73:96:
40:53:03:95:36:ef:ae:0e:72:33:28:ab:dc:af:01:
aa:8e:e4:76:6d:c1:9e:ab:99:cb:57:b1:20:b5:37:
da:5e:cb:96:bb:8e:62:65:09:c5:6f:32:2d:c6:14:
2a:33:79:9d:82:eb:12:3d:c3:5d:aa:c0:26:1e:59:
89:57:47:fb:c2:62:c3:6f:a6:10:18:0f:0c:09:3a:
a7:b4:e5:b4:23:a0:6e:b0:40:ee:a2:90:91:1a:2d:
5d:c1:e1:1a:58:8d:87:60:2e:5a:94:9b:46:45:8e:
d1:b6:04:a2:e1:81:60:f8:15:c9:3f:22:fa:a1:fc:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:63:11:5D:CC:96:2D:8E:E0:11:18:D9:D7:29:AB:20:DC:E2:54:A6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/U2MRXcyWLY7gERjZ1ymrINziVKY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:2a:ce:a3:6a:37:21:ea:a6:2a:49:5d:78:90:21:ba:77:13:
83:d4:9e:00:7d:40:42:c8:9c:fc:67:f9:18:4b:3e:5e:32:3d:
ae:2a:c3:75:22:6b:f0:08:7b:1a:21:9f:13:a4:49:8f:09:77:
00:17:a8:80:b3:b7:d1:0e:0d:67:2b:2a:27:3a:14:f1:56:2d:
f0:c2:c1:c2:4d:bb:a9:80:24:d0:51:f0:ff:67:83:c8:a2:4d:
10:bc:cd:da:cd:32:65:33:9a:3c:26:ed:64:b0:99:c9:f7:49:
96:44:eb:7e:ee:df:33:27:6a:8d:b3:08:56:cf:cc:e3:99:77:
7e:ae:7d:a7:51:e7:7b:7c:d1:6c:d6:fc:3c:7e:79:2b:4a:69:
12:39:b9:de:6d:d7:88:5d:71:1b:5a:28:bc:0e:01:68:04:01:
d5:ca:62:9c:d1:2b:4f:98:2a:e5:c0:fb:76:37:69:c8:42:1e:
97:61:31:e6:ef:cd:d8:e6:74:f5:d1:22:d7:c5:d2:25:17:98:
14:b2:93:f7:6e:92:cd:96:8d:50:ec:40:e0:30:2f:35:5c:8d:
a5:10:23:a0:38:fd:5a:cf:8f:d4:99:9d:ba:96:1c:f8:6e:a8:
a3:d8:7b:67:2c:c9:c6:21:6f:9f:4e:68:08:51:a9:3e:c0:3e:
9a:5c:2e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:36:12 2025 by rpki-client