Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/VXnYoTfEm_kuodUuC5EXLQNuJLA.roa
File: VXnYoTfEm_kuodUuC5EXLQNuJLA.roa (raw, json)
Hash identifier: eIwgSq0jK5H0fwBNaSlV3f0V8xcJl+VjkM/0WqsUQeg=
Subject key identifier: 55:79:D8:A1:37:C4:9B:F9:2E:A1:D5:2E:0B:91:17:2D:03:6E:24:B0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2351
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VXnYoTfEm_kuodUuC5EXLQNuJLA.roa
Signing time: Mon 23 Jun 2025 15:41:54 +0000
ROA not before: Mon 23 Jun 2025 15:41:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9041 (0x2351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 23 15:41:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5579D8A137C49BF92EA1D52E0B91172D036E24B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1f:6f:7e:fd:a4:ff:d9:36:00:a5:4f:b1:64:
12:f9:87:54:ad:f0:b8:cf:10:7e:3f:57:21:24:42:
62:b4:1b:40:18:59:f1:14:fc:c8:34:2e:04:45:7e:
c6:b1:14:ab:a2:a3:17:e7:e8:63:5d:8e:45:a3:57:
23:38:53:92:03:aa:67:12:88:f3:31:49:d5:f8:62:
83:cf:7c:37:4d:2e:56:2c:fe:77:ee:ca:c6:84:bd:
24:ee:80:89:c0:d6:93:8d:0c:5c:2c:d2:69:8f:4b:
d2:69:5f:a3:d3:01:89:b9:d0:35:71:e3:60:c0:42:
34:35:3f:04:0e:31:15:a2:ed:d1:6d:bd:d3:d1:62:
c4:b3:20:74:ec:dd:2e:a4:02:20:df:91:58:52:83:
46:4f:5a:30:21:90:36:0e:c7:ef:bf:b2:d1:10:c6:
d5:74:ee:b4:e7:2b:de:56:72:89:63:ae:93:ce:8c:
1b:d4:c4:b2:5d:ec:c4:18:31:64:ac:16:1b:bd:49:
5a:65:bc:87:e6:71:f6:a3:5e:82:e2:d7:26:8c:24:
fb:8d:8e:6e:26:18:d2:d0:f6:3e:ea:89:39:62:29:
47:6f:27:75:c7:7b:40:6f:97:49:33:b6:a4:63:32:
27:5e:4b:20:e8:2c:b1:99:ea:5a:21:40:d1:07:6f:
c6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:79:D8:A1:37:C4:9B:F9:2E:A1:D5:2E:0B:91:17:2D:03:6E:24:B0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VXnYoTfEm_kuodUuC5EXLQNuJLA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:65:e3:5e:90:e3:3a:23:53:bf:ef:26:e8:65:ad:9f:33:0b:
60:6c:86:93:4a:de:55:29:9d:84:f0:40:df:6c:5d:22:dd:aa:
3f:09:d6:48:94:49:44:e7:c9:5d:18:d1:d3:39:84:c2:0e:f2:
06:a8:80:34:f8:a6:5b:c8:9e:b1:58:0d:d1:de:21:8a:9c:96:
54:6c:ae:be:82:bd:9a:4d:be:64:c3:6f:a2:9a:59:61:59:6d:
a8:f5:b6:82:4a:57:56:f7:66:49:44:db:4f:90:e8:21:4b:17:
4d:8d:02:21:c2:07:b4:3e:2a:87:30:aa:2d:5c:e6:b6:2b:bb:
23:98:cd:65:48:f1:73:25:34:a2:ba:80:ff:98:26:32:99:fc:
ea:66:b2:3a:34:a3:62:fa:85:39:7e:6d:9b:d1:9c:f8:fa:1c:
89:7d:10:11:c0:cc:34:50:e0:dd:fb:99:d6:3b:d8:56:8e:df:
b0:79:9c:94:b7:c4:98:9e:4d:55:4c:b8:ec:f9:3c:b6:65:07:
9f:49:3c:0d:8d:a0:63:30:29:b1:5b:e4:97:9b:d4:e1:dd:71:
a6:93:41:59:9f:35:35:c0:8b:e3:61:51:89:6d:02:ae:23:13:
6c:9e:01:fa:db:ad:d0:10:bb:af:17:ac:20:4e:bc:3d:16:d5:
5a:b1:0c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:10:04 2025 by rpki-client