Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Z3cJj4lu2qablG0ydR_G0FlJgBs.roa
File: Z3cJj4lu2qablG0ydR_G0FlJgBs.roa (raw, json)
Hash identifier: lIzKnuLjmHBCY9zJiU8fZBa7TcDLiUib+pE+V7+1zy8=
Subject key identifier: 67:77:09:8F:89:6E:DA:A6:9B:94:6D:32:75:1F:C6:D0:59:49:80:1B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1AD1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Z3cJj4lu2qablG0ydR_G0FlJgBs.roa
Signing time: Wed 11 Jun 2025 20:09:57 +0000
ROA not before: Wed 11 Jun 2025 20:09:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6865 (0x1ad1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 20:09:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6777098F896EDAA69B946D32751FC6D05949801B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:51:af:20:77:76:8c:7f:09:b1:4d:b2:30:
33:d2:03:0e:97:a7:41:3d:53:7e:e1:c5:e1:fa:e7:
dc:da:9d:bb:51:d4:fa:88:58:ea:48:c2:a5:89:95:
a1:88:fb:e6:ae:5c:cf:f7:d2:ee:0d:50:26:78:c3:
bb:96:a0:97:6f:9c:01:58:f1:45:fc:d4:ef:b1:b5:
06:ec:32:2d:ca:a6:d2:44:31:a5:f2:c4:7a:19:8a:
f0:3d:6d:8f:27:d1:93:d9:ce:45:e2:bb:f5:3f:09:
94:1d:d5:76:1f:53:26:dc:8a:bf:d6:94:59:f3:00:
4c:1d:35:81:68:26:90:02:0e:0b:85:b0:f3:af:06:
07:8c:a5:4c:6d:07:d6:ec:25:36:4b:8b:ba:a4:01:
5d:c6:79:3b:41:aa:d7:4f:43:6a:db:ac:07:35:92:
27:30:46:3c:55:55:cf:6d:fa:63:94:3f:ab:54:8b:
e8:a9:cb:80:c5:16:a8:63:c3:fb:81:28:b2:8d:5e:
28:c1:88:bd:8b:70:fc:c8:be:7a:61:0b:9d:d2:ed:
f4:92:b7:ea:ff:21:70:66:7d:7c:51:f5:97:9b:cc:
61:82:7e:96:68:2a:fc:e0:fe:07:0e:49:3b:a3:8b:
22:90:f7:4b:c0:9c:d3:eb:ea:4f:3b:bb:a9:b3:36:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:77:09:8F:89:6E:DA:A6:9B:94:6D:32:75:1F:C6:D0:59:49:80:1B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Z3cJj4lu2qablG0ydR_G0FlJgBs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:37:d3:73:5c:3c:d2:33:dc:9e:53:d0:4e:dc:64:a6:9e:82:
0f:db:c2:18:aa:3e:29:be:59:f6:a7:2a:26:e1:07:43:78:4b:
a8:92:29:68:0f:3c:40:14:64:6d:b3:09:44:81:4d:b1:52:f8:
42:58:4d:64:4d:e9:2f:83:c2:b6:00:78:5e:6a:6b:79:bb:f3:
01:bf:ea:32:06:ec:a2:52:64:1d:2b:0f:aa:2d:6e:ef:f0:d2:
f0:ef:e3:fd:8c:b2:ce:b2:70:ab:e6:3d:6f:5b:4b:08:6c:7f:
de:53:69:21:75:e4:b2:5c:38:32:72:d7:b3:77:a2:a7:98:69:
31:69:e9:5f:e5:3d:75:ca:6f:85:df:fd:90:8b:9d:dc:2f:fb:
12:96:b9:63:39:de:b2:b0:af:10:dc:e8:f3:6a:94:09:83:d2:
d1:a1:a5:07:1f:8d:9d:b8:6e:28:9e:12:95:a3:4f:2b:e0:f2:
cf:57:b0:b2:80:73:fb:fe:f8:41:1e:c3:4f:f5:01:6b:b0:df:
dd:63:4e:c0:80:e8:b7:8a:f8:da:b7:7a:dd:4a:ed:a8:fc:01:
4d:e2:30:43:e2:3a:c2:51:fa:62:bd:b9:ca:de:39:86:8d:30:
ff:08:03:9c:ac:f0:f7:ae:f3:00:22:7c:28:d1:10:1f:37:f8:
9c:72:bd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:35:57 2025 by rpki-client