Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/_2_EkOIUMBXdzY9qQL7hqDAfmvc.roa
File: _2_EkOIUMBXdzY9qQL7hqDAfmvc.roa (raw, json)
Hash identifier: XrB1jcx4AChrLeDxgRjgFUZ+xgNVTuG9kCZzBpc4G4w=
Subject key identifier: FF:6F:C4:90:E2:14:30:15:DD:CD:8F:6A:40:BE:E1:A8:30:1F:9A:F7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2039
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_2_EkOIUMBXdzY9qQL7hqDAfmvc.roa
Signing time: Thu 19 Jun 2025 05:37:44 +0000
ROA not before: Thu 19 Jun 2025 05:37:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8249 (0x2039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 05:37:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FF6FC490E2143015DDCD8F6A40BEE1A8301F9AF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:21:96:ef:2a:aa:42:74:43:10:db:f8:17:
9e:4e:03:4b:63:37:74:df:ed:17:17:62:17:71:f8:
47:83:b8:98:54:d5:1f:93:76:ac:c9:bb:69:f5:ce:
a2:4a:9c:94:68:4e:aa:7a:11:f8:f1:f6:5e:b7:b8:
c0:41:a6:7a:96:5e:e1:9e:29:fa:8b:18:d0:f5:74:
ca:2b:53:5d:4d:c9:be:bd:b0:3d:38:83:d0:0b:53:
3d:a3:38:ba:e6:c9:f3:27:a4:66:ca:5f:bf:fe:7d:
17:2c:af:24:47:b5:aa:a4:51:eb:38:00:f1:ce:34:
7c:87:2c:81:13:1c:9a:bd:cc:ba:39:c4:e3:ef:6e:
f2:6f:34:92:c5:f9:f1:ee:4f:2f:77:c3:22:4b:9e:
fb:3a:26:b0:34:fd:94:52:bf:bc:c0:bf:f5:4f:75:
7a:f6:2c:8c:69:e4:71:01:10:41:f5:ca:2b:da:39:
fd:aa:0f:ea:46:cc:0c:a8:03:2e:58:65:fa:62:2a:
b7:ce:6d:ba:ac:cb:b3:11:43:3c:6a:8d:70:92:0a:
58:01:ea:16:31:a2:67:74:b8:d9:89:96:07:98:98:
b6:41:e1:6e:23:25:f3:3a:fe:39:cc:92:68:b1:d6:
1f:36:1d:ca:09:36:76:8c:20:27:2d:d2:de:df:da:
f9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6F:C4:90:E2:14:30:15:DD:CD:8F:6A:40:BE:E1:A8:30:1F:9A:F7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_2_EkOIUMBXdzY9qQL7hqDAfmvc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:80:27:14:3a:f9:b7:90:69:32:27:32:54:db:94:50:bc:d5:
2c:e6:1b:f8:12:75:b4:6a:10:44:bc:68:20:c8:16:b4:ae:28:
a2:15:55:94:70:62:a3:db:7f:4b:bc:1f:0c:cf:43:5d:3e:34:
24:c1:14:ce:60:c4:39:02:63:e7:8e:61:e2:ce:a6:d0:09:56:
94:27:00:78:c1:71:6c:b2:5e:64:81:a1:da:e2:a7:49:3f:37:
9b:02:c1:19:da:2b:6a:d0:4e:8e:e8:6a:3d:84:8b:e1:42:c5:
24:f1:59:de:7e:45:25:30:57:00:b1:63:70:57:e4:b8:d2:0c:
14:d2:bc:54:c9:82:7b:c6:a0:0f:66:da:b9:a7:9a:ef:f5:82:
28:6f:72:da:fb:d7:65:bc:3c:6d:c5:07:cb:a5:b7:5e:19:f9:
70:04:c9:44:f3:55:93:82:ab:13:d3:8c:73:04:3a:28:1f:42:
d3:35:5d:9c:f5:72:32:72:99:3e:5b:68:8a:6e:49:61:01:b0:
40:83:f8:26:25:1d:88:fa:23:47:46:d4:ba:e4:61:fc:af:7e:
29:e0:69:95:db:c3:4f:4c:73:f7:e3:f1:d2:3c:7c:f1:44:c7:
a3:69:27:b9:1c:1a:ca:76:43:9d:17:e4:3e:71:6a:78:0f:db:
e5:83:f0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:35:00 2025 by rpki-client