Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/i9deWZzRPmCVy9OytVUHcD4ygiE.roa
File: i9deWZzRPmCVy9OytVUHcD4ygiE.roa (raw, json)
Hash identifier: zunQDzIEdzTGmbd3N33cxOc/ZcghuBZ1HAr+e5GDiKs=
Subject key identifier: 8B:D7:5E:59:9C:D1:3E:60:95:CB:D3:B2:B5:55:07:70:3E:32:82:21
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2175
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/i9deWZzRPmCVy9OytVUHcD4ygiE.roa
Signing time: Sat 21 Jun 2025 04:11:52 +0000
ROA not before: Sat 21 Jun 2025 04:11:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8565 (0x2175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 21 04:11:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8BD75E599CD13E6095CBD3B2B55507703E328221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:13:81:1f:98:7e:91:d2:5f:56:3e:6b:b5:
82:cf:95:a2:35:27:6d:1a:34:79:18:22:32:15:ce:
87:42:20:9b:18:5f:1c:31:0d:cc:13:c2:be:99:13:
1b:20:f5:eb:cc:b9:18:50:c6:df:d5:5e:75:bd:69:
13:dc:16:06:1f:89:18:58:82:17:c8:da:6f:0c:b9:
8b:d4:30:e3:84:2b:f1:0e:64:0b:39:d6:4f:26:45:
73:ef:ca:c5:52:20:45:ac:13:2d:61:51:dc:f9:d5:
e2:67:a8:43:62:e1:74:fd:ea:05:cf:fc:9f:e3:8a:
ce:6a:9d:92:1a:22:63:fc:fd:75:d9:4f:f6:a5:fe:
bd:68:34:45:88:b2:a6:b2:2f:76:83:eb:03:8c:36:
59:3d:41:8f:6d:e4:05:55:be:a6:91:1f:5d:85:b7:
1e:d9:9a:0d:4f:d2:43:05:e2:c0:dc:96:c1:0c:b1:
e7:1b:6e:a4:11:f9:69:fc:58:dd:04:21:78:7c:7a:
d0:53:42:a3:e7:12:22:85:ec:68:36:d4:fd:de:94:
0e:14:c4:4a:f7:10:3b:e4:29:0f:19:af:a2:72:68:
1f:ae:12:4e:0d:06:ae:33:6c:6c:95:59:7c:d0:c5:
20:5a:33:00:74:a4:2e:3d:92:4c:2a:24:eb:65:87:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D7:5E:59:9C:D1:3E:60:95:CB:D3:B2:B5:55:07:70:3E:32:82:21
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/i9deWZzRPmCVy9OytVUHcD4ygiE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:1c:0d:6b:35:f0:a6:ee:af:d7:c7:7a:70:6e:98:0d:f8:15:
21:ba:fa:93:b5:00:8a:f3:5f:19:cb:49:48:b0:73:76:ad:83:
a6:03:27:e8:bd:3d:43:ee:16:ea:fd:37:58:94:af:a3:a2:c9:
3a:4d:ea:78:d6:78:3c:5a:6a:5e:78:78:e4:96:00:b9:23:f9:
81:44:e5:cc:49:4d:07:f9:59:b0:54:46:f9:78:15:c0:13:35:
5d:f0:31:09:20:25:aa:1c:29:fd:43:36:c5:de:5f:cf:2f:71:
a7:cc:23:3b:e3:17:26:df:1f:69:4b:8f:19:1c:9e:66:73:79:
94:3d:ae:fb:54:1b:b3:c6:54:48:f5:bb:40:e8:91:28:c4:28:
6c:1e:e5:41:0d:b8:bd:0a:5b:59:1b:2d:b9:3d:1c:21:5f:88:
25:8f:dd:6d:a4:d2:1d:d8:aa:55:cb:49:0f:4a:58:a0:5e:a2:
87:2f:f2:95:8c:64:93:9e:9a:d2:6b:3e:2b:01:bc:56:26:e3:
3c:40:5a:6e:39:43:b1:6e:e6:ce:d3:d9:49:bb:49:99:a9:03:
41:8a:12:a0:51:a7:73:2d:8a:1a:10:0a:01:1e:0b:1c:47:6b:
41:a0:9c:1c:72:94:5a:e8:3a:b8:e2:25:f0:69:f1:f0:0b:78:
29:08:39:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:38:43 2025 by rpki-client