Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/m1lAT48B56zMGldG4LEvLCBsMLw.roa
File: m1lAT48B56zMGldG4LEvLCBsMLw.roa (raw, json)
Hash identifier: cUc/bKM96szSgBA2c9pUTDM5bBC5Yf+GH2E1qpblBR0=
Subject key identifier: 9B:59:40:4F:8F:01:E7:AC:CC:1A:57:46:E0:B1:2F:2C:20:6C:30:BC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 098D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/m1lAT48B56zMGldG4LEvLCBsMLw.roa
Signing time: Mon 19 May 2025 19:38:25 +0000
ROA not before: Mon 19 May 2025 19:38:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2445 (0x98d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 19:38:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9B59404F8F01E7ACCC1A5746E0B12F2C206C30BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:29:80:1a:52:f7:57:fe:46:1b:07:d0:05:22:
6c:9d:5c:f2:b0:ce:ef:b5:17:47:ad:30:c7:e1:56:
37:55:f6:cb:f3:34:e1:62:e7:c3:5e:66:ad:1a:a1:
0d:68:02:30:a7:8f:24:ea:f2:de:ae:61:e5:b2:63:
08:81:19:5f:a2:ea:3d:be:25:a7:61:49:b8:55:8c:
55:2f:ca:a7:fb:17:da:e6:ee:e8:9e:35:be:15:a8:
77:ca:6e:b3:bc:67:32:b7:4f:67:2e:34:73:a0:1e:
f0:86:8f:2e:e6:80:21:a2:80:fd:8e:d3:3c:c6:a5:
bc:4d:81:c0:76:72:bc:93:b9:d8:9d:f7:54:d1:9f:
60:75:f8:4a:3f:d1:79:9f:b3:8d:a0:56:1a:b8:ec:
61:39:90:4b:f7:15:5f:aa:ba:95:80:26:99:91:83:
87:ac:3d:81:27:46:db:ab:60:f3:ab:61:fa:17:4e:
de:ea:72:ce:d5:64:2e:7f:b2:b8:dc:e9:c7:40:be:
5f:43:30:b1:26:28:a0:e0:0d:6b:cc:6a:04:f3:e9:
1a:d5:2d:b5:b7:f7:f8:9f:0f:75:88:8c:8d:55:07:
ab:ec:76:cd:bb:3d:00:69:42:23:b3:cb:97:51:b5:
ba:bd:8c:c4:f6:24:e2:82:0b:00:d2:e3:3b:3e:ab:
a8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:59:40:4F:8F:01:E7:AC:CC:1A:57:46:E0:B1:2F:2C:20:6C:30:BC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/m1lAT48B56zMGldG4LEvLCBsMLw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:77:e5:99:6d:22:89:5a:94:e7:ff:6f:a9:b6:96:00:b1:8f:
90:9d:0a:b8:6a:2a:16:ad:6e:61:8c:76:aa:de:af:a1:26:72:
81:a9:2b:b5:e0:ae:e8:2f:4d:0b:d7:8a:66:a0:4c:62:e9:8c:
fe:18:61:e1:b6:82:8b:93:8e:f0:5b:07:9f:a5:72:1b:61:25:
65:37:6b:66:bf:aa:23:1a:0d:f3:89:bf:ee:b3:85:81:b4:ba:
19:d9:76:71:97:fb:26:2d:c4:b6:6d:2b:07:31:ee:70:c9:27:
62:a1:0f:d0:7f:84:1c:83:24:e1:cf:06:24:b5:2c:f8:49:32:
19:56:f6:82:b0:c1:28:2e:f0:6d:31:06:aa:e4:7b:5e:76:b9:
a5:c6:b5:b5:51:c1:90:f9:d2:7d:61:cb:f1:30:f4:12:1c:5e:
ba:2b:55:39:8f:d6:8a:15:ad:dd:af:83:8f:b1:ef:f0:cd:b9:
6f:02:fc:fa:31:41:e8:30:1b:c4:07:20:c6:96:9e:6e:77:b1:
10:36:7c:46:e7:99:f0:38:5b:61:2b:b3:eb:20:7b:23:e7:fd:
47:2a:4b:d6:d9:2b:64:4f:8f:35:8c:70:14:db:c6:89:a8:60:
85:61:11:a2:79:92:55:8e:df:c9:f2:ef:2e:f7:2e:16:19:e3:
9f:d6:f3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:53:47 2025 by rpki-client