Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/o8cS8AosPok5iBbcvuxXaypq9F8.roa
File: o8cS8AosPok5iBbcvuxXaypq9F8.roa (raw, json)
Hash identifier: sVzqE80vH8+quMIscv23oghDC74fu+25vhpOgHGLS7o=
Subject key identifier: A3:C7:12:F0:0A:2C:3E:89:39:88:16:DC:BE:EC:57:6B:2A:6A:F4:5F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0BBD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/o8cS8AosPok5iBbcvuxXaypq9F8.roa
Signing time: Thu 22 May 2025 17:38:23 +0000
ROA not before: Thu 22 May 2025 17:38:23 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3005 (0xbbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 17:38:23 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A3C712F00A2C3E89398816DCBEEC576B2A6AF45F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b3:80:9b:b4:40:90:0d:b3:9a:50:e6:a1:ec:
a1:34:0f:dd:f9:7f:98:c3:61:d2:91:4b:91:8b:df:
b9:f3:c4:04:0b:aa:13:a9:34:c2:29:3e:d9:35:3c:
d1:7d:9d:fd:27:14:80:56:5f:be:e8:86:f3:53:5c:
bd:df:15:6e:46:30:59:d2:cc:25:3d:43:eb:79:8a:
86:e4:2a:2d:4a:84:3b:c5:6d:94:65:db:0b:1a:e5:
07:0c:9d:5e:2c:01:d3:6c:bb:d5:d5:71:78:19:c2:
d6:35:33:04:5d:9d:c0:ab:77:7a:99:c5:97:eb:ac:
e1:5f:ef:4e:af:c3:1b:03:2b:c0:ca:d6:2e:bb:67:
bd:bf:cf:2d:f9:73:34:33:ca:d0:d9:d9:a1:17:ed:
af:b7:ee:bc:e2:28:47:f2:df:a7:2f:f6:c2:3f:b5:
db:bd:e9:a1:00:d0:de:87:b0:47:6c:1c:d0:86:71:
de:e5:92:fe:02:45:8b:b0:1d:ca:f2:95:c0:8d:42:
d1:6e:a6:e5:f1:09:6e:8b:18:b5:50:64:ea:43:50:
b8:c5:12:50:59:95:3d:0a:c0:bd:c0:8f:b3:1f:bf:
2c:17:ba:ce:eb:58:75:21:7f:47:45:f7:1f:42:ce:
7b:da:30:1e:44:14:0b:32:15:7b:30:96:b3:de:94:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C7:12:F0:0A:2C:3E:89:39:88:16:DC:BE:EC:57:6B:2A:6A:F4:5F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/o8cS8AosPok5iBbcvuxXaypq9F8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:ea:a4:81:46:ea:81:7d:42:b8:4f:85:89:80:9d:6c:fe:6a:
bc:19:a5:bf:c7:2e:9b:92:8d:88:db:3b:1f:3c:11:60:9f:00:
60:27:85:5f:e4:dd:cd:7d:b5:33:89:7f:51:1e:c0:b1:77:db:
8f:98:ae:ca:d0:c4:b9:fa:9c:19:47:ad:f7:cf:ef:0c:c5:ad:
d7:45:20:b6:59:96:6f:0b:8f:e1:0a:92:99:e1:bf:ba:7f:ae:
6b:7b:87:b6:6d:24:d4:a1:1b:d3:d6:46:99:4d:ba:6d:42:b6:
53:ab:01:45:17:dd:b9:91:6c:57:a6:67:ec:bd:0a:f8:0b:a8:
aa:33:b8:de:c6:db:8b:35:6c:01:85:21:64:0b:0d:13:74:52:
84:91:ab:33:1d:19:5a:89:23:32:80:80:ed:53:3e:c3:74:13:
76:db:e3:5f:ed:a5:25:a1:6c:6e:97:24:57:69:0e:58:d0:2a:
31:b8:e4:b4:d4:6b:73:d6:cf:af:e5:51:b3:8d:9c:b7:2a:da:
15:e5:7f:7c:9e:90:64:14:04:84:38:c9:c9:51:33:62:da:d2:
ba:e3:9d:f4:40:1e:c2:4f:fb:44:70:32:03:33:16:14:f8:fb:
7b:f8:a1:d3:93:01:7d:17:5e:95:3e:50:0e:6f:fa:1d:a0:32:
1a:d2:88:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:52:48 2025 by rpki-client