Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/kus5RGb3b0_RtkYINgRJTRlPVL4.roa
File: kus5RGb3b0_RtkYINgRJTRlPVL4.roa (raw, json)
Hash identifier: kKJ3+deWtFSanejIjyxeVziWKKsc5nasQvbP3ddE6XM=
Subject key identifier: 92:EB:39:44:66:F7:6F:4F:D1:B6:46:08:36:04:49:4D:19:4F:54:BE
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 12A9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kus5RGb3b0_RtkYINgRJTRlPVL4.roa
Signing time: Sat 31 May 2025 23:09:08 +0000
ROA not before: Sat 31 May 2025 23:09:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4777 (0x12a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 31 23:09:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=92EB394466F76F4FD1B646083604494D194F54BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:84:85:41:60:74:6b:04:0b:86:ce:bd:3e:a4:
84:60:83:e2:84:29:fb:5e:11:ff:28:0b:2f:db:14:
eb:61:7f:f8:91:36:f3:b5:1b:a9:d3:6a:bc:03:33:
28:cc:20:f1:03:54:5a:ab:96:36:e5:79:e9:88:21:
96:b7:f0:e8:6d:e5:30:c0:c3:04:f3:92:79:24:7d:
eb:2e:c4:49:b7:86:3c:88:cb:83:a5:62:fa:54:95:
ea:72:52:91:b9:ca:19:41:b8:01:86:9f:b1:77:c7:
81:38:6a:d9:4f:8f:89:15:9d:e9:e3:b5:ad:8a:1c:
58:2e:25:a9:12:0f:3a:90:23:94:2e:b6:f9:64:bc:
6e:50:70:b7:94:a4:d6:05:4e:ff:b9:4b:2a:e3:fa:
1e:c6:5f:ba:a4:b0:42:6b:bb:bf:a9:73:c2:fe:dc:
30:1d:d4:3b:43:c2:c0:23:60:d7:7e:7f:0d:6a:3a:
be:70:4d:2e:80:b5:82:94:d9:b0:ea:6b:4b:52:30:
86:0d:32:43:68:20:fc:5f:60:0d:1a:62:6c:e9:27:
ca:e4:55:7c:0d:39:4d:90:0f:a3:7c:e8:71:70:40:
5c:ea:94:3f:44:72:fa:b9:8a:6a:b6:54:43:27:c8:
1d:d8:f8:99:1a:da:38:73:2e:b1:c2:1a:7e:d8:26:
63:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EB:39:44:66:F7:6F:4F:D1:B6:46:08:36:04:49:4D:19:4F:54:BE
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kus5RGb3b0_RtkYINgRJTRlPVL4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:ef:19:90:38:a4:fd:f4:68:2e:7a:20:40:f5:e8:c5:1f:e2:
66:c6:8e:ce:95:3f:18:9a:33:94:c4:b4:88:d9:3f:e5:ed:cf:
67:cc:50:8e:ce:8e:0b:aa:fa:06:7f:1c:b1:a2:91:74:3e:18:
6e:9f:7a:ef:05:2a:b3:aa:3e:9c:50:2b:9d:25:0f:8a:fc:09:
e6:48:73:4a:9e:b5:31:63:a5:05:24:6b:cb:d6:ea:4a:22:58:
88:3c:cc:42:a6:af:3e:8b:83:f9:db:8c:54:8c:2e:2c:17:e9:
60:ff:83:ed:b6:8b:60:6f:b2:11:46:80:02:34:a7:41:6c:6b:
bc:c6:12:d0:5b:47:09:13:07:5d:d5:25:ab:eb:a5:29:df:bc:
0c:d6:23:27:0e:f2:7c:c7:59:49:f1:3d:e2:54:68:eb:3f:50:
fe:15:7e:bb:db:73:87:10:28:d9:61:57:0a:a0:d5:ac:4d:19:
e6:1c:a4:2e:63:1e:7a:97:17:cc:e9:81:61:4e:46:05:ee:ae:
01:19:0d:f9:6e:7b:58:81:2a:f7:2e:cd:30:b9:58:a1:9f:bc:
a8:fd:a2:20:fe:90:68:aa:18:54:43:7b:bd:cc:d0:0f:37:60:
6b:94:a9:82:92:d0:b2:fd:c7:de:34:c6:e7:c1:57:45:08:a8:
53:f0:2d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:58:32 2025 by rpki-client