Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/lLqhwij2j2nVkGZjAgCD_O8Mr58.roa
File: lLqhwij2j2nVkGZjAgCD_O8Mr58.roa (raw, json)
Hash identifier: uiUevL1JnKF1F1IAAUGqSSp5TX5B6MJcoeUPIzl5h28=
Subject key identifier: 94:BA:A1:C2:28:F6:8F:69:D5:90:66:63:02:00:83:FC:EF:0C:AF:9F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 23D5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lLqhwij2j2nVkGZjAgCD_O8Mr58.roa
Signing time: Tue 24 Jun 2025 08:11:59 +0000
ROA not before: Tue 24 Jun 2025 08:11:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9173 (0x23d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 08:11:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=94BAA1C228F68F69D5906663020083FCEF0CAF9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:c4:a7:4a:9a:38:49:87:e8:6c:17:75:01:
44:67:71:ff:b2:fa:c8:23:bb:e2:a0:88:42:f6:71:
f9:c7:c1:a2:b4:da:80:45:d8:7b:25:00:6c:bc:de:
38:d4:dc:17:df:42:46:2a:4c:8f:6c:08:1e:71:1d:
8b:ab:b6:7d:d2:d2:b6:60:11:27:4e:fa:fd:2e:3c:
b4:7f:7b:61:1e:4c:c3:e2:0c:fa:e1:40:0d:da:d3:
64:72:3d:6f:07:d2:4f:98:52:e5:c2:47:4d:f2:c9:
99:ce:ac:f6:01:3e:7f:e2:17:ed:96:27:fc:4d:8d:
d5:9f:b7:3a:97:b0:c5:89:ec:b4:d4:02:6d:f7:b8:
8f:29:96:4f:5c:39:2c:96:dd:04:c1:3f:94:ae:ea:
1d:b9:3e:91:a2:f0:a2:fe:ae:c4:bf:9e:27:e4:fa:
79:85:a8:37:df:52:4d:71:cb:99:d1:8e:6c:56:68:
ab:02:26:8f:0b:c0:3e:df:e5:9c:80:92:21:75:1b:
80:92:12:14:d0:6d:63:11:11:58:28:cd:77:c2:5e:
6c:75:c6:ff:5a:59:56:a5:14:7e:4d:73:c5:8a:98:
ff:fd:0f:03:82:5a:2f:ad:ce:0f:da:2d:80:b3:15:
4b:7f:c0:73:02:c3:6f:e5:18:56:ba:fc:9c:f1:bc:
21:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BA:A1:C2:28:F6:8F:69:D5:90:66:63:02:00:83:FC:EF:0C:AF:9F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lLqhwij2j2nVkGZjAgCD_O8Mr58.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:80:dd:c1:b1:3c:2d:aa:0d:40:a9:79:71:de:4a:3a:4e:ab:
5b:73:3a:f2:30:24:2c:d6:ea:c5:25:55:75:91:6f:26:de:b9:
cf:37:12:7a:69:00:ca:fc:79:a5:66:8d:94:23:bd:c8:24:8b:
dd:82:d5:f4:b0:02:fd:43:22:fd:78:72:41:87:92:56:e5:5a:
23:a7:b2:13:ce:f2:94:61:41:6b:b3:b7:31:67:4c:79:43:22:
f3:fa:d9:89:d8:96:24:be:8f:ea:32:7d:d3:56:a5:90:cf:5d:
41:e2:ae:bf:11:eb:42:9f:61:28:2d:c0:e4:ff:55:22:46:b8:
18:04:cc:8b:f1:c5:2c:63:66:21:1d:f4:2e:bf:17:17:60:8f:
12:60:f5:d6:c9:b1:11:0c:df:39:08:98:07:0a:7b:0e:b4:c0:
c0:69:50:9f:a4:a6:23:92:87:59:53:e8:bf:9f:ea:26:6b:d7:
22:b0:b9:1e:bd:c5:bc:a0:c2:7f:8a:36:2f:1b:2f:94:2c:2f:
e6:a3:e2:28:b9:62:ac:f0:08:71:72:d7:d7:f8:9c:89:fd:61:
9d:21:57:12:0b:f9:71:9b:57:27:7d:ad:a6:e9:6e:b8:fe:16:
07:59:63:77:2a:92:cc:54:2d:2e:40:17:10:b6:ad:c2:2c:2d:
ad:7d:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:37 2025 by rpki-client