Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/nDVedcRPgkqYqdCWXFQB5WSVGZk.roa
File: nDVedcRPgkqYqdCWXFQB5WSVGZk.roa (raw, json)
Hash identifier: XjFjXMj4kNC3qHEQv8eKCFVIzWPsE9AaJLrx7T/3768=
Subject key identifier: 9C:35:5E:75:C4:4F:82:4A:98:A9:D0:96:5C:54:01:E5:64:95:19:99
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1E29
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nDVedcRPgkqYqdCWXFQB5WSVGZk.roa
Signing time: Mon 16 Jun 2025 07:09:59 +0000
ROA not before: Mon 16 Jun 2025 07:09:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7721 (0x1e29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 07:09:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9C355E75C44F824A98A9D0965C5401E564951999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:47:9f:74:55:37:1c:56:df:ad:25:ef:2b:
7a:7d:b9:e8:a0:a9:b8:80:fb:32:90:f0:8b:fb:04:
9c:2a:d7:bb:44:bc:6e:eb:76:8d:49:36:7a:0a:c7:
d6:bb:b5:95:a9:0a:64:1f:99:eb:8b:8b:af:10:91:
1f:64:79:d8:f2:81:e4:a2:a0:f1:68:2b:79:64:e9:
32:a6:55:f0:a4:d8:2d:2b:e1:9a:ae:16:b7:30:cb:
a2:68:e6:9c:66:35:f6:41:b0:6b:ca:09:e4:0d:dc:
30:3f:bf:24:c9:e4:3d:ff:6d:3b:6b:3c:e2:54:08:
e2:ed:e5:d7:04:73:b3:56:01:19:ec:b3:ef:c5:c1:
14:1d:31:af:56:da:54:ad:d5:94:6c:b5:77:d3:18:
74:a3:4c:c1:eb:23:53:cd:3f:7e:8e:0a:ec:83:f9:
70:0c:33:4e:42:ef:55:87:f1:c0:46:fd:3d:d8:ea:
c6:c7:d1:b5:4d:f1:1e:c9:f2:93:1e:35:bf:af:6b:
bc:45:b4:86:30:06:73:e5:51:da:c4:3e:82:d8:aa:
0f:02:a6:b0:a6:a9:f0:f6:7c:96:cb:70:61:79:d4:
03:61:66:e4:f3:65:09:9f:9f:2c:1b:ae:fa:3d:50:
fa:99:d8:7b:0b:32:18:d1:74:d4:ae:86:9e:8e:4f:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:35:5E:75:C4:4F:82:4A:98:A9:D0:96:5C:54:01:E5:64:95:19:99
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nDVedcRPgkqYqdCWXFQB5WSVGZk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:a5:86:34:db:4b:aa:c8:cd:49:45:6a:a9:2c:9b:e2:b7:5a:
bc:17:02:c8:13:4f:e1:f7:fa:ed:5d:77:f7:6d:a8:91:26:66:
41:21:a1:a0:c1:6c:6c:0e:f5:4a:62:4c:4d:87:17:9d:8f:35:
bc:66:bc:ef:d9:c1:f0:b7:9d:03:42:ff:06:5a:71:d3:4c:1c:
3c:c9:58:2e:f3:60:fc:27:9b:4e:b4:fe:0a:66:83:26:cf:5e:
35:47:8c:e5:26:d2:a8:c4:a8:a8:68:c0:0d:69:26:4e:77:1e:
14:c4:67:fe:bf:cb:45:48:f5:59:29:0f:7a:53:c1:4b:93:72:
d8:68:68:f0:c0:67:e5:c3:5e:41:4c:8d:46:82:15:6d:07:7c:
74:96:e5:cb:9f:cd:24:d1:37:89:13:d5:7d:1d:82:34:6c:23:
f3:2a:ff:d4:aa:c0:df:6d:b6:f1:00:35:82:67:6e:5f:79:3f:
31:01:b1:94:11:f0:bf:5f:ff:e3:b9:e7:0a:1a:24:aa:f6:13:
1d:43:41:57:39:66:1e:e6:be:31:1e:65:da:ae:7f:a7:26:bd:
cd:02:63:91:db:b0:37:65:a4:45:ee:de:bd:f8:cf:9c:e1:6a:
30:30:00:d0:40:a7:77:28:8c:94:b7:4e:2f:19:99:87:5a:32:
4f:a2:0f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:49 2025 by rpki-client