Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/bufvYpLoX7178JHfwO-ID1bcMRA.roa
File: bufvYpLoX7178JHfwO-ID1bcMRA.roa (raw, json)
Hash identifier: R2j9xss+d6KDhlwgGOGK09ap64pU5kRdZ0fSBiH2dBY=
Subject key identifier: 6E:E7:EF:62:92:E8:5F:BD:7B:F0:91:DF:C0:EF:88:0F:56:DC:31:10
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1385
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bufvYpLoX7178JHfwO-ID1bcMRA.roa
Signing time: Mon 02 Jun 2025 02:39:11 +0000
ROA not before: Mon 02 Jun 2025 02:39:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4997 (0x1385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 2 02:39:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6EE7EF6292E85FBD7BF091DFC0EF880F56DC3110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:71:ec:2a:7c:58:70:1e:ba:e7:cf:6b:76:
07:1f:c9:82:37:e7:45:b3:82:25:82:aa:92:28:8f:
fe:df:ad:f7:e4:c0:cf:83:27:97:5a:4d:02:fc:bd:
f6:d4:84:66:d6:45:9b:16:83:8a:39:59:01:07:f3:
2e:23:77:14:ac:0b:df:d8:73:62:14:f1:80:08:f6:
5d:06:41:e5:88:91:8b:59:d3:2d:55:99:38:e8:bb:
e6:17:2f:40:81:28:22:8a:67:0f:ee:47:d1:68:11:
d7:c2:31:ae:39:a0:c7:62:55:da:1a:94:37:77:c4:
b4:0f:da:e6:6b:d8:0b:4a:9e:16:69:a2:01:af:e8:
ca:93:3f:03:d8:6a:8d:10:02:2f:53:30:21:34:17:
fa:ac:c1:e0:0b:3e:4c:92:9a:92:8f:a5:74:37:96:
49:8f:99:c1:73:62:09:76:c6:4d:37:04:b4:32:0e:
5b:a0:34:c1:c0:94:ca:56:c2:2c:49:9e:d3:cf:c6:
42:c0:79:6b:fa:85:52:dc:ac:e8:ee:5d:25:b6:5f:
6b:de:72:5d:81:ef:4f:01:46:07:40:f0:0a:8b:66:
8f:5c:9c:54:a2:29:fb:ee:07:f7:c4:ec:20:3a:19:
45:d8:f3:09:86:61:df:cd:df:a6:f7:46:7d:59:62:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E7:EF:62:92:E8:5F:BD:7B:F0:91:DF:C0:EF:88:0F:56:DC:31:10
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bufvYpLoX7178JHfwO-ID1bcMRA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:53:ec:48:5c:53:7f:5d:1d:a7:34:3c:e8:a3:b1:fa:e6:ca:
ab:4f:79:0f:d5:a8:80:33:e4:67:12:8d:af:b1:b6:d3:1d:b9:
28:90:18:47:8d:cc:c3:32:a4:42:72:d4:42:c2:41:78:1b:e1:
dd:a1:43:4d:0d:56:9c:60:23:d9:39:44:d1:d5:ee:fa:f9:3a:
d8:fe:16:cb:9f:eb:02:ce:35:55:bc:1f:20:d6:a2:aa:b0:e4:
08:fb:92:f4:25:e6:a8:88:14:dc:e1:b5:a2:0e:b5:d5:c4:cd:
4a:02:93:f8:2b:2c:a4:1c:81:99:44:9f:7d:68:f4:ab:3e:57:
a3:fc:4c:4b:5b:99:25:fc:ac:9c:4e:a6:ca:ca:b2:27:30:de:
40:1d:07:3b:8d:72:27:ca:e5:c6:1f:b4:74:65:36:d7:05:b8:
e5:ef:85:84:d3:16:18:85:30:73:61:67:35:63:00:57:e7:19:
ef:1b:48:3b:27:8e:09:99:90:1e:ec:37:1a:ab:1b:f1:7a:9f:
2e:a3:c4:a7:c6:11:a5:6d:96:9d:2f:28:c6:34:36:8e:6a:55:
ce:a7:c5:cf:92:6b:97:a2:29:ba:98:00:f4:c8:56:d6:2c:51:
32:69:fb:7a:86:63:66:b2:87:87:c3:9d:35:df:fc:1b:52:05:
de:31:85:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:54:09 2025 by rpki-client