Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/U9WGSEJCxj_2nCcoE7czr5brB-0.roa
File: U9WGSEJCxj_2nCcoE7czr5brB-0.roa (raw, json)
Hash identifier: trRxypR8LE59UO26+62jOvHlgRYM/KbzQIFODG0Ef1g=
Subject key identifier: 53:D5:86:48:42:42:C6:3F:F6:9C:27:28:13:B7:33:AF:96:EB:07:ED
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1DB5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/U9WGSEJCxj_2nCcoE7czr5brB-0.roa
Signing time: Sun 15 Jun 2025 16:40:00 +0000
ROA not before: Sun 15 Jun 2025 16:40:00 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7605 (0x1db5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 15 16:40:00 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=53D586484242C63FF69C272813B733AF96EB07ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:2e:3e:2f:4f:8e:93:e6:b4:6b:27:b3:54:
96:bf:fc:d2:74:83:4c:84:9a:15:01:55:72:2f:f6:
2f:c4:5e:e6:b1:88:50:e0:7e:b8:f8:25:d6:f3:30:
23:c8:58:57:ec:fd:ac:60:56:35:bd:09:a7:98:dc:
7e:83:42:e6:a9:8f:b0:b6:34:68:4a:b4:ae:24:54:
66:2d:82:1a:fe:a9:03:76:a7:52:72:09:39:03:54:
90:c1:96:32:f1:82:44:7d:0a:8b:1d:12:89:59:d8:
67:b7:52:12:0e:34:aa:a6:3c:76:7b:aa:60:0b:0a:
9e:52:d3:c2:94:96:39:9e:b4:da:80:bc:59:b5:d6:
a9:a7:8b:4a:6a:3e:7a:0c:d0:ce:b0:36:af:f0:5a:
c8:7d:64:93:f5:d9:73:13:56:48:33:e0:b2:ec:21:
fc:5a:57:d1:5c:49:fc:c5:97:26:e7:dd:8d:8a:79:
7f:2e:85:dd:a3:f3:cf:0d:b6:74:6f:ad:29:63:14:
9d:b0:b2:36:0f:64:f5:5e:d5:22:15:19:6c:10:13:
ce:9e:c4:ae:27:63:54:67:6f:96:c7:89:68:a0:b5:
2d:e9:23:8a:d7:9d:29:bc:c1:96:4f:2e:32:3e:d3:
7a:3d:11:50:ed:0b:89:52:6f:c2:c9:2c:3d:fd:3f:
8c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D5:86:48:42:42:C6:3F:F6:9C:27:28:13:B7:33:AF:96:EB:07:ED
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/U9WGSEJCxj_2nCcoE7czr5brB-0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:8c:24:e9:7e:43:78:2d:13:c3:1d:f6:5e:06:e5:7f:ab:70:
3b:28:57:8e:fc:15:58:ea:f6:e8:11:d7:b7:bb:e9:93:4c:21:
7e:af:bc:51:1d:d3:c7:79:f8:e1:b7:11:57:3b:1f:13:58:02:
f4:d3:b1:e8:09:f2:83:ad:bf:58:61:8f:f9:90:c1:d2:36:2e:
0f:54:87:64:88:8b:68:6c:3b:59:15:5b:51:08:f6:c4:2c:d6:
3c:f1:5b:cb:53:2d:f0:c9:97:e3:f1:05:e3:88:85:b4:fb:66:
74:ae:a3:ba:bc:35:7f:05:d7:fb:b0:fa:fc:2b:13:2c:a4:bc:
f3:6d:85:9a:b8:fb:08:65:05:a8:20:01:8e:7e:f4:e2:1c:6a:
eb:ed:45:d1:7b:41:73:b5:f6:16:47:38:07:ec:0a:8f:7f:cb:
c2:08:72:a5:cb:36:d0:ef:90:98:ce:23:df:91:6d:cb:6e:0b:
cb:19:f6:40:b9:3d:03:aa:71:4c:97:39:e4:9f:ba:d5:61:4a:
f2:d7:74:f1:3b:8b:24:77:e9:8c:76:e0:3f:d1:0e:06:c2:33:
0f:6d:d9:9e:7c:6b:65:4a:ae:5e:fd:8a:c2:38:8d:e8:e8:b9:
e5:c9:2d:4c:89:4d:35:5a:46:84:44:9e:34:f4:5f:aa:22:d3:
45:0d:52:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:05:03 2025 by rpki-client