Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ffNATBTa7P89rUP66yDjL-cnorw.roa
File: ffNATBTa7P89rUP66yDjL-cnorw.roa (raw, json)
Hash identifier: +J81D4tF0TURulus8hBS0RId+sIXdO2iExAlrMBFP+A=
Subject key identifier: 7D:F3:40:4C:14:DA:EC:FF:3D:AD:43:FA:EB:20:E3:2F:E7:27:A2:BC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2469
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ffNATBTa7P89rUP66yDjL-cnorw.roa
Signing time: Wed 25 Jun 2025 02:43:34 +0000
ROA not before: Wed 25 Jun 2025 02:43:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9321 (0x2469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 25 02:43:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7DF3404C14DAECFF3DAD43FAEB20E32FE727A2BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:f8:0d:66:3c:cb:09:0f:89:7b:33:83:18:
93:dc:ac:5d:18:84:78:fd:17:86:02:4b:65:cb:9c:
5b:e6:c9:e1:e4:7a:c3:a1:f1:91:c3:4d:69:af:2b:
6e:08:c8:85:e7:05:b0:6e:45:5c:f2:7b:2e:8d:46:
e0:c4:43:a8:f7:55:12:d1:7d:b3:d3:68:a4:9c:e8:
cf:81:b1:13:42:e7:07:e9:90:a4:ba:23:6f:e8:24:
38:4e:07:46:63:4f:b4:22:2c:09:4d:54:c6:f5:8c:
d9:fc:89:f8:a4:dd:08:aa:f0:eb:c1:81:03:b9:61:
06:9b:08:99:49:87:40:1a:a2:2b:0b:bd:61:77:a8:
b4:d7:96:97:b0:4f:06:a4:d1:56:22:c8:80:67:ac:
45:c0:69:81:87:cc:68:6a:b2:87:f1:03:b1:db:8f:
03:4f:49:31:e0:1c:ea:ee:71:70:2b:9d:76:0c:b9:
ae:70:89:94:e9:19:6b:51:5c:59:11:c4:07:f1:43:
f8:e2:01:9a:62:fd:95:0a:8b:9a:4b:19:a8:5a:fa:
5f:61:dc:ca:3a:53:9b:30:f8:27:6e:81:43:91:27:
9b:64:d8:7b:63:58:44:f8:70:d2:5f:a7:16:e3:80:
7a:c9:95:37:b2:39:c4:1e:7e:b0:65:78:9c:05:67:
a3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F3:40:4C:14:DA:EC:FF:3D:AD:43:FA:EB:20:E3:2F:E7:27:A2:BC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ffNATBTa7P89rUP66yDjL-cnorw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:f0:78:8d:b7:8f:4a:07:65:df:9c:5d:36:c4:b5:5d:06:87:
26:08:9c:9f:eb:54:0b:cd:e2:dc:c9:65:78:ca:55:74:d0:d2:
b9:aa:6f:2c:56:08:56:0e:00:65:40:c4:1d:60:91:9f:a7:5e:
7c:02:62:a2:d5:1c:22:96:bb:a0:7c:14:41:e5:8d:4d:84:e3:
96:85:dd:c2:2c:01:53:aa:09:8e:8e:65:1f:0d:ad:17:e6:90:
06:d4:d2:2d:e9:78:c9:a4:5e:5c:24:2b:e9:b3:0f:c2:50:e2:
f8:69:87:a6:7f:e0:28:c1:af:ad:7b:05:c4:93:79:70:72:31:
35:1a:c3:36:10:e9:df:bf:07:b0:42:35:68:11:73:89:f8:f0:
a1:2a:16:7a:89:29:75:54:80:d3:cb:03:e4:ae:3e:a3:2b:05:
c7:1d:fd:39:45:7d:d5:a7:20:bb:1b:a7:eb:34:33:64:b7:bf:
17:a8:ff:f8:24:f4:18:d9:82:5a:d5:c1:c5:53:c8:f6:d3:d7:
b7:db:67:ea:3d:72:5e:f2:6e:6b:60:d5:fb:8b:a1:90:94:88:
c8:0f:ca:30:45:a0:ce:fb:25:a2:50:e6:97:33:4f:d4:9c:e8:
1d:25:a6:55:b1:c8:28:c9:bf:c6:64:4e:f2:1b:54:b5:f1:7e:
69:f4:1c:84
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJGkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MjUw
MjQzMzRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDdERjM0MDRDMTREQUVD
RkYzREFENDNGQUVCMjBFMzJGRTcyN0EyQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBzPgNZjzLCQ+JezODGJPcrF0YhHj9F4YCS2XLnFvmyeHkesOh
8ZHDTWmvK24IyIXnBbBuRVzyey6NRuDEQ6j3VRLRfbPTaKSc6M+BsRNC5wfpkKS6
I2/oJDhOB0ZjT7QiLAlNVMb1jNn8ifik3Qiq8OvBgQO5YQabCJlJh0AaoisLvWF3
qLTXlpewTwak0VYiyIBnrEXAaYGHzGhqsofxA7HbjwNPSTHgHOrucXArnXYMua5w
iZTpGWtRXFkRxAfxQ/jiAZpi/ZUKi5pLGaha+l9h3Mo6U5sw+CdugUORJ5tk2Htj
WET4cNJfpxbjgHrJlTeyOcQefrBleJwFZ6OFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUffNATBTa7P89rUP66yDjL+cnorwwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9mZk5BVEJUYTdQODlyVVA2
NnlEakwtY25vcncucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAFPweI23j0oHZd+cXTbEtV0GhyYInJ/rVAvN
4tzJZXjKVXTQ0rmqbyxWCFYOAGVAxB1gkZ+nXnwCYqLVHCKWu6B8FEHljU2E45aF
3cIsAVOqCY6OZR8NrRfmkAbU0i3peMmkXlwkK+mzD8JQ4vhph6Z/4CjBr617BcST
eXByMTUawzYQ6d+/B7BCNWgRc4n48KEqFnqJKXVUgNPLA+SuPqMrBccd/TlFfdWn
ILsbp+s0M2S3vxeo//gk9BjZglrVwcVTyPbT17fbZ+o9cl7ybmtg1fuLoZCUiMgP
yjBFoM77JaJQ5pczT9Sc6B0lplWxyCjJv8ZkTvIbVLXxfmn0HIQ=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:34:58 2025 by rpki-client