Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/VC6oz5QhmYENFn1pSRfJ_ftjvkU.roa
File: VC6oz5QhmYENFn1pSRfJ_ftjvkU.roa (raw, json)
Hash identifier: Qdjeq7xg2dUpMKOqCus7+CFkf+/z7vokPRWMVkr/iAo=
Subject key identifier: 54:2E:A8:CF:94:21:99:81:0D:16:7D:69:49:17:C9:FD:FB:63:BE:45
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1D35
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VC6oz5QhmYENFn1pSRfJ_ftjvkU.roa
Signing time: Sun 15 Jun 2025 00:39:57 +0000
ROA not before: Sun 15 Jun 2025 00:39:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7477 (0x1d35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 15 00:39:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=542EA8CF942199810D167D694917C9FDFB63BE45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:ce:83:ba:7f:a4:36:47:76:69:bb:c3:9b:
56:63:09:8f:25:50:25:9e:4f:46:25:4b:0f:7b:2a:
6f:e6:75:34:2f:0c:be:51:e3:c3:d6:17:59:54:54:
96:db:1e:01:3f:8d:7f:9a:82:26:95:f1:1e:aa:5c:
fb:3b:cb:b3:76:c2:84:7c:29:49:c1:c3:ab:0d:c7:
25:41:ff:1a:9e:3b:53:00:75:6e:c7:91:6f:ac:f1:
cc:37:72:29:6a:5c:eb:85:7b:fb:b2:54:c7:90:2e:
37:fa:6d:10:0d:1d:4f:a3:21:6b:32:a2:2e:c3:54:
af:97:8e:11:3e:3f:1a:e6:6d:b9:12:36:39:07:83:
d7:35:04:e2:ff:ff:28:8c:cf:13:01:64:77:3f:15:
d9:d9:9b:9e:ae:15:c2:c9:db:4f:f1:d4:30:69:e3:
95:7c:01:ce:a4:71:21:2c:28:ea:90:39:92:85:0c:
b7:d7:cf:17:72:fc:09:51:03:0a:96:b5:5c:06:eb:
6c:0b:dd:d3:49:9d:4c:54:06:6f:62:eb:a9:1f:4a:
4b:44:9e:0f:be:55:6d:38:fb:c1:5f:33:94:7c:fc:
8a:02:bb:35:2e:75:83:19:8d:7b:f7:e6:0a:34:dd:
91:89:cf:eb:78:ac:db:7d:45:f7:55:58:40:07:c5:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2E:A8:CF:94:21:99:81:0D:16:7D:69:49:17:C9:FD:FB:63:BE:45
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VC6oz5QhmYENFn1pSRfJ_ftjvkU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:b6:90:81:6f:12:36:4d:ca:d6:1b:b0:e1:5c:59:83:27:9f:
c7:60:84:63:cf:87:49:3c:f4:49:a7:85:98:dc:d6:63:c8:42:
4c:a2:2f:26:6f:64:f3:78:0a:3b:e3:ad:d1:48:15:e2:8b:5d:
ab:13:6e:95:63:0c:e2:51:07:1b:8f:77:1d:5e:10:bd:32:a3:
b5:6d:22:3e:cd:e9:f7:1e:c7:46:3b:f5:6c:5c:5b:c0:74:ca:
18:fe:0b:84:e1:21:0c:9d:9b:ba:59:e3:26:6d:4b:a0:ac:b8:
96:e2:61:12:70:fe:eb:75:d6:b0:c4:5a:d9:2c:7c:2f:42:0e:
d7:be:db:80:65:5a:e4:9f:8b:cc:a9:a3:32:93:51:85:3a:99:
0f:db:f7:85:8a:6a:08:3e:23:a8:db:6d:1a:0c:e2:e2:9f:f6:
cf:da:56:ca:2b:67:01:ee:80:8d:f5:aa:9f:9d:46:7e:6c:0a:
24:4b:ad:e5:f6:c8:f6:68:0d:1c:61:50:ad:82:14:dc:48:be:
3f:ff:d7:a0:59:fd:e4:93:aa:53:ba:2d:36:91:bc:21:bd:ba:
98:6a:ea:51:21:70:cd:17:53:8c:0d:6a:1b:25:f4:29:92:f9:
8a:6f:57:e9:4c:8e:34:b8:f2:82:a8:ae:c9:1d:38:3e:d0:d7:
a6:55:dd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:17:36 2025 by rpki-client