Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/pKdtcAMl4z4gFjFx38bctQZ-Jtg.roa
File: pKdtcAMl4z4gFjFx38bctQZ-Jtg.roa (raw, json)
Hash identifier: xWvAThUfg6u8VyRVpdYESCebTUnmcbP6lOaCikWP3UY=
Subject key identifier: A4:A7:6D:70:03:25:E3:3E:20:16:31:71:DF:C6:DC:B5:06:7E:26:D8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1F5D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/pKdtcAMl4z4gFjFx38bctQZ-Jtg.roa
Signing time: Tue 17 Jun 2025 21:40:03 +0000
ROA not before: Tue 17 Jun 2025 21:40:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8029 (0x1f5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 21:40:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A4A76D700325E33E20163171DFC6DCB5067E26D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:86:de:ff:a7:2a:ae:72:12:66:06:87:7d:
e5:a5:fb:cb:12:a8:22:26:ae:d3:c8:f5:ae:4f:56:
2b:c8:24:2b:2e:e6:22:c5:6b:7d:d8:5f:13:c8:5f:
3b:81:1c:8a:53:18:96:09:b5:c8:be:a2:7b:e7:88:
46:22:6c:dc:28:b1:eb:67:8a:1f:be:82:e3:67:92:
be:36:3b:63:a8:f0:39:0f:83:1d:69:1d:42:69:bb:
c9:65:58:41:17:3b:76:3f:36:71:e9:61:b9:74:7e:
60:1e:d6:7d:da:76:13:99:48:39:3b:38:80:0e:ea:
57:bd:5a:7d:59:8e:2e:df:bb:c3:5b:0c:02:45:2c:
9c:ae:64:5c:e0:e1:b8:b6:2c:6c:f5:a4:81:f2:3d:
f5:f8:7d:45:90:10:75:2e:50:ab:00:1e:85:5e:55:
35:9f:ff:a9:c7:a6:a2:1a:9c:9d:00:63:61:08:e2:
0f:a6:05:30:7b:f0:aa:60:1d:97:cc:75:39:63:87:
00:cd:96:1e:ab:8e:91:fc:f3:2b:c9:5a:d2:29:d4:
c8:bc:16:97:c0:3a:68:1c:92:c9:f5:08:77:f9:e4:
0f:a4:8a:77:0a:9d:1c:43:1f:12:22:ca:7b:40:1f:
16:71:cb:b1:0d:7e:15:ba:2a:9a:08:cd:47:d7:9b:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A7:6D:70:03:25:E3:3E:20:16:31:71:DF:C6:DC:B5:06:7E:26:D8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/pKdtcAMl4z4gFjFx38bctQZ-Jtg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:d2:2b:df:0e:c7:31:fc:4a:80:85:f5:87:48:df:a8:4e:b2:
80:5a:e5:57:da:40:a0:94:8b:54:57:a1:5b:dd:d3:dc:a6:e6:
0d:f6:9b:4c:95:aa:fe:d5:04:e7:50:c4:df:10:25:ac:62:69:
38:00:36:66:68:53:8b:dd:f6:fe:89:38:68:48:55:8a:90:ca:
cf:1a:b7:75:94:d9:88:68:34:b5:98:51:bd:95:28:68:24:b6:
cc:5c:16:b5:e4:79:b4:b0:b1:27:e4:42:6e:74:0e:3c:d5:b4:
a2:b7:5e:e8:ea:de:90:45:26:c5:19:38:ba:71:7c:82:60:c0:
46:ca:3e:0c:b2:4f:d3:aa:90:a5:7a:e2:8f:b5:28:30:78:ba:
a4:f6:d2:68:f5:ae:e9:0c:22:ba:e6:6d:0a:3d:01:e4:48:91:
3c:fd:16:1b:52:52:60:6f:2f:9f:07:a7:a4:f1:ee:fc:15:f0:
2b:6f:cb:63:eb:e3:ef:5e:cd:ef:2e:3a:46:33:a6:0f:69:f1:
73:13:a0:be:5c:ce:7f:9e:9f:9a:e8:2c:fd:f1:b6:14:45:32:
50:56:02:4a:9f:be:ac:e7:3b:d8:62:a8:73:4f:be:d3:01:5a:
24:14:23:04:04:8e:f0:de:9d:33:d7:e0:5f:b8:88:2d:23:3d:
8b:c6:ac:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:31:43 2025 by rpki-client