Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/V7PKeKogOZzoiYVQLrD4Bawa9jw.roa
File: V7PKeKogOZzoiYVQLrD4Bawa9jw.roa (raw, json)
Hash identifier: qRl0PgImI+yNuYTRKUbEbmb3zjiTUPCvXyV81FZhtCk=
Subject key identifier: 57:B3:CA:78:AA:20:39:9C:E8:89:85:50:2E:B0:F8:05:AC:1A:F6:3C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0981
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/V7PKeKogOZzoiYVQLrD4Bawa9jw.roa
Signing time: Mon 19 May 2025 18:08:11 +0000
ROA not before: Mon 19 May 2025 18:08:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2433 (0x981)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 18:08:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=57B3CA78AA20399CE88985502EB0F805AC1AF63C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ab:53:48:77:67:ee:4a:5d:2d:6a:a0:ee:cc:
80:75:ad:b7:cf:df:6b:99:93:5e:f0:cf:8c:65:12:
2c:1e:43:df:8b:3f:0c:0e:bb:9c:ec:0f:2b:c9:5e:
56:bc:f6:a0:49:67:49:9e:41:b6:1c:a2:a9:b4:67:
7e:2e:65:9b:77:db:54:21:1d:7b:41:f2:e0:19:19:
13:53:f8:f7:a2:2d:aa:8d:ef:f2:87:0f:9e:db:38:
71:fa:bc:4e:a8:03:3c:70:88:da:73:43:04:89:db:
89:ef:ac:3f:04:a0:0d:eb:c2:7c:04:06:b1:55:7b:
59:49:70:75:20:01:5c:b0:6f:e5:ca:63:61:b7:ab:
ed:c0:bf:93:99:81:98:61:3b:f6:7e:d6:59:bb:76:
a1:5e:25:d8:1c:82:15:e7:bb:a3:49:33:94:81:90:
cc:02:a0:79:f3:79:8e:83:42:f2:84:33:ea:a5:e2:
ae:0a:eb:8f:92:a6:b7:06:52:38:84:e3:51:70:57:
bd:38:cb:07:52:81:4e:bb:f6:1b:56:1d:42:47:78:
39:41:7e:3a:30:e5:be:42:d0:d5:9a:ee:0d:76:92:
85:ac:c4:d9:53:4d:5b:ba:59:14:a8:5a:3c:ec:36:
3d:ba:1d:5a:2d:78:5d:fe:4a:b1:f0:a7:26:84:48:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B3:CA:78:AA:20:39:9C:E8:89:85:50:2E:B0:F8:05:AC:1A:F6:3C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/V7PKeKogOZzoiYVQLrD4Bawa9jw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:17:a0:28:cd:a9:f5:7f:c7:a4:93:f9:5a:c5:bd:69:d6:17:
86:41:fd:b5:cc:7f:2f:20:9e:04:b7:ed:30:42:89:33:ee:3f:
75:1e:02:e5:18:50:0d:09:59:b7:60:f4:de:22:14:1c:52:8b:
c1:2f:3f:7b:ec:4f:54:f5:3f:35:f2:a6:60:67:97:e2:a8:6e:
36:a4:b2:d4:84:fd:f6:2e:37:75:1b:c6:87:21:41:56:9d:0f:
ae:e9:c0:e2:f7:e4:9f:44:7e:35:ee:62:11:e6:95:04:85:88:
4a:31:50:85:a8:e8:8d:c0:f8:1a:9c:78:77:f0:4e:31:fa:61:
f2:8e:d4:48:71:60:80:f7:25:17:4c:7e:02:60:9f:72:be:d0:
6f:0b:9a:ab:72:bb:c1:fd:6b:d0:42:d6:91:60:50:7e:3e:cf:
ee:f9:50:81:ce:a8:a7:40:94:12:91:45:6a:35:e6:e5:dd:32:
d0:c3:e0:86:c7:4d:d1:9f:4d:ad:90:d0:4c:f9:b8:c5:94:f8:
90:2b:5b:87:95:c2:08:a4:ff:c7:b5:73:50:3f:8f:7e:71:97:
f7:c5:5a:46:1d:ac:14:c8:25:88:89:5b:d1:cb:1b:0b:6c:39:
0a:b3:99:23:4d:20:20:6a:48:d8:fe:77:d7:2f:36:ef:c2:d3:
3a:9c:33:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:00:27 2025 by rpki-client