Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/jdZZT1tPCFdGsXXB-849Yy894MA.roa
File: jdZZT1tPCFdGsXXB-849Yy894MA.roa (raw, json)
Hash identifier: t8e3ld0C4A97jOLKtJs6wWCgcyTMhwq8qXSqZ50nWTM=
Subject key identifier: 8D:D6:59:4F:5B:4F:08:57:46:B1:75:C1:FB:CE:3D:63:2F:3D:E0:C0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1E85
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jdZZT1tPCFdGsXXB-849Yy894MA.roa
Signing time: Mon 16 Jun 2025 18:40:01 +0000
ROA not before: Mon 16 Jun 2025 18:40:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7813 (0x1e85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 18:40:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8DD6594F5B4F085746B175C1FBCE3D632F3DE0C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:da:a8:63:27:9c:c3:79:24:08:78:f6:63:
10:bd:ad:15:fd:b7:fe:8d:9e:92:97:50:20:75:09:
ec:d9:ff:21:20:e0:82:ed:7d:d7:fa:ad:55:d1:c4:
ff:a1:ac:05:e2:50:0b:dc:fc:9b:9f:2a:4c:4b:08:
99:d7:f6:e6:ef:af:7f:48:dc:f3:30:dc:24:8f:5e:
21:6f:cf:c9:ba:50:b0:04:fc:42:f7:27:93:75:09:
ef:4d:a6:0a:58:88:38:80:d1:d1:58:43:92:c5:c5:
b4:15:1e:b4:34:3f:4c:13:c3:33:79:ff:82:3a:09:
c3:ac:93:c6:e0:f2:3b:af:c9:4a:e5:84:97:35:ee:
d6:bd:f7:28:cc:f5:1b:3d:32:c9:fb:e1:e3:4d:31:
56:0f:90:a6:31:9f:78:d7:5b:4b:98:bc:f4:af:4d:
95:b7:32:ac:04:a6:64:9d:f9:f0:9b:b5:3c:31:83:
5a:eb:88:ce:4e:07:4e:c6:38:44:47:f1:d0:be:5f:
d8:fc:be:bb:9c:43:0c:8e:e3:d7:97:dc:5d:57:f1:
82:a4:be:51:73:a5:12:a9:6b:9c:e5:c0:1f:14:d3:
c0:f9:1e:09:a0:1e:b3:79:6d:62:57:02:24:c0:34:
f8:ac:66:81:5f:66:00:a5:a3:fc:de:ea:07:59:93:
3d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D6:59:4F:5B:4F:08:57:46:B1:75:C1:FB:CE:3D:63:2F:3D:E0:C0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jdZZT1tPCFdGsXXB-849Yy894MA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:e2:39:7a:18:10:a4:45:6c:a3:10:88:f7:14:b9:52:2c:fa:
ae:a5:00:b9:85:15:4f:93:57:41:7a:82:90:df:a0:41:72:00:
0a:0c:66:b8:c3:03:40:c3:05:40:0b:b9:e0:b3:7f:08:c5:fa:
b7:df:ba:5d:af:85:fb:a7:51:1a:fe:5f:52:0c:2d:d8:04:7f:
df:08:dc:b8:bc:22:fe:d1:fd:cd:22:fe:e0:85:53:53:96:72:
ae:f5:23:67:30:9b:ec:de:72:75:8e:8b:2b:a3:09:0c:88:72:
22:94:cb:8e:e0:d6:35:ed:67:52:0c:7f:57:17:52:1d:06:17:
11:a7:54:5c:72:fb:a6:03:2e:f7:42:be:3e:38:27:bd:d5:c0:
55:05:68:ac:9a:7a:a2:b2:6c:df:a1:26:fe:1e:20:64:39:cd:
b3:d6:6c:cc:db:f7:8a:b4:39:50:f3:ef:f4:32:fa:57:27:da:
c6:af:59:a7:ad:99:91:fb:2f:6a:b5:b6:fc:17:00:32:ed:8e:
e8:83:0b:7e:72:29:c1:8b:fb:b5:52:42:78:88:f4:23:87:f5:
ef:a9:b0:da:ef:6b:3b:06:c3:ce:e7:30:84:43:e3:18:12:8e:
38:e2:d8:21:ce:33:46:9c:4a:b3:80:88:d2:59:29:88:1d:65:
58:e1:bc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:46:50 2025 by rpki-client