Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/cbPG3xren3E8XbZmchLL-AINMvQ.roa
File: cbPG3xren3E8XbZmchLL-AINMvQ.roa (raw, json)
Hash identifier: Syy0vcB7/VXBGnGNj5bSyG6i+v2HMy8JqvQi/QsTT04=
Subject key identifier: 71:B3:C6:DF:1A:DE:9F:71:3C:5D:B6:66:72:12:CB:F8:02:0D:32:F4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0BB5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cbPG3xren3E8XbZmchLL-AINMvQ.roa
Signing time: Thu 22 May 2025 16:38:27 +0000
ROA not before: Thu 22 May 2025 16:38:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2997 (0xbb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 16:38:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=71B3C6DF1ADE9F713C5DB6667212CBF8020D32F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:89:0d:79:28:75:51:01:e3:52:3a:33:00:d1:
26:64:99:22:10:87:b7:a7:90:6f:aa:d9:8c:b7:fc:
6d:b1:b0:3f:17:d1:97:af:55:27:a4:c2:ec:36:65:
14:cb:fc:20:25:03:4a:7b:9e:a5:4c:c7:a5:ef:72:
63:33:6a:6e:0d:c7:44:6d:6d:9d:1d:93:53:fd:4b:
cc:8e:dc:1c:1b:67:bf:80:4f:e4:d6:3e:d8:8b:87:
a1:1d:cd:90:49:8e:05:b2:88:15:80:a5:39:07:c1:
27:dc:fd:13:3b:ed:df:8f:ad:74:d9:78:ce:17:e3:
82:d6:95:d1:0c:3c:c8:6c:a4:5e:e3:c3:49:23:d1:
8a:6d:d2:a7:b8:3d:43:e1:0a:26:78:92:7d:ec:0c:
dd:35:17:28:a0:02:1d:98:af:87:2a:a7:d0:86:ae:
03:db:c5:fd:c2:68:1d:ba:00:54:e8:5b:2e:66:c1:
07:8a:36:ed:56:f4:bf:c0:9d:fc:f8:7f:af:ac:af:
75:ea:b0:2d:a6:7e:53:0b:c6:c9:93:10:33:70:f9:
29:b1:81:8b:5c:e7:fc:91:64:d0:68:0f:95:3c:4b:
7e:fc:df:9e:ec:82:b5:22:79:48:5b:9a:cc:15:45:
ad:f2:67:30:bd:9a:0c:ba:52:f0:67:01:97:51:33:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B3:C6:DF:1A:DE:9F:71:3C:5D:B6:66:72:12:CB:F8:02:0D:32:F4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cbPG3xren3E8XbZmchLL-AINMvQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:92:c0:e8:34:68:68:ab:7d:55:fa:50:68:cd:33:3f:29:6e:
40:88:c6:7d:26:54:57:04:53:26:91:cc:ad:67:b7:9d:d1:2f:
c7:d0:96:7f:c9:06:e3:f7:20:f2:92:4c:24:5d:e0:f7:a7:3e:
2f:4d:d5:bd:c5:b6:dc:e8:d5:4a:bf:c1:d1:6c:17:18:07:ce:
15:e7:48:5c:e7:0c:ae:9c:4e:5c:8a:0b:f7:6f:d3:c6:a2:fd:
94:03:95:29:98:d0:ea:d6:cc:d0:0f:e9:78:b5:17:01:a7:69:
81:ee:68:91:11:0f:14:4c:7a:43:88:5c:cd:8b:66:6c:51:c4:
22:cc:c9:17:fb:df:19:01:b5:5f:f5:3f:e1:ff:a8:44:90:00:
5a:ca:f0:00:98:f7:f9:95:7e:a8:44:46:36:87:07:00:28:f6:
d4:91:36:11:1e:e9:79:bd:b8:0d:fc:b5:1f:96:c7:f7:6a:29:
f4:7f:cd:e3:b5:d7:25:89:67:a1:e6:77:9d:03:a6:aa:e3:87:
cb:85:51:a0:4c:0f:c8:9d:71:46:4d:42:00:8c:5c:58:2e:b8:
33:ca:3d:18:60:65:86:4c:e4:24:cb:06:b4:c5:b8:8e:0a:e0:
2f:ba:a2:39:5f:33:2c:f5:9d:df:18:2d:4a:84:a2:1a:69:9e:
f2:78:ae:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:57:07 2025 by rpki-client