Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/q0Xu7GVtoiH86f_MTo4AR0zVtgY.roa
File: q0Xu7GVtoiH86f_MTo4AR0zVtgY.roa (raw, json)
Hash identifier: j6aUphDgf/BDDpIIDLRVKNqEmG3Eo8Lfsp82nHP491o=
Subject key identifier: AB:45:EE:EC:65:6D:A2:21:FC:E9:FF:CC:4E:8E:00:47:4C:D5:B6:06
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1FC1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/q0Xu7GVtoiH86f_MTo4AR0zVtgY.roa
Signing time: Wed 18 Jun 2025 10:31:58 +0000
ROA not before: Wed 18 Jun 2025 10:31:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8129 (0x1fc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 18 10:31:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AB45EEEC656DA221FCE9FFCC4E8E00474CD5B606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:9d:6b:60:c7:0a:cf:e2:99:fb:30:5f:96:
f7:cf:eb:c1:f4:5e:56:f3:b7:28:74:96:0f:49:7a:
1d:52:75:09:4d:4f:21:9a:2b:42:ea:9f:21:11:9c:
0c:fd:10:f9:6b:fa:3c:bb:82:25:e8:e8:ba:36:9d:
9a:20:1b:26:0a:8b:3a:a2:8f:e5:ce:4e:1f:36:ba:
55:46:f3:39:03:4e:a8:cc:45:41:c6:10:ae:9c:4b:
96:67:43:65:dc:29:41:c5:34:73:52:3e:63:92:a3:
cf:4a:fc:b4:50:35:09:d6:1e:b7:37:24:eb:fe:84:
f8:8d:f4:07:19:fc:1c:34:1e:83:c1:17:98:c4:b4:
6f:1b:72:cb:f3:27:8d:f0:1b:af:a1:8e:c3:e2:13:
d8:89:c2:1b:c0:f4:6f:48:7d:62:34:3c:3e:7a:3e:
8c:a2:66:c8:14:bf:8b:71:f0:d8:92:79:5c:6a:d4:
fe:a9:55:ca:d0:51:92:25:47:d4:42:75:88:c2:62:
69:ee:ad:5c:0a:d0:41:60:f9:01:c2:8b:45:f9:37:
79:bb:b0:81:72:85:ba:a6:28:07:df:5c:3d:60:60:
5b:d9:c6:6e:7e:9b:80:67:4e:75:c9:6b:38:dc:95:
99:f3:7a:07:b7:3a:d5:f5:7e:1d:06:32:ae:46:25:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:45:EE:EC:65:6D:A2:21:FC:E9:FF:CC:4E:8E:00:47:4C:D5:B6:06
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/q0Xu7GVtoiH86f_MTo4AR0zVtgY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:ff:13:73:b2:a1:42:c4:98:9b:49:e6:b7:4b:46:ef:ec:3f:
8d:23:ea:fe:a5:ce:07:f8:12:8c:ef:01:aa:15:75:2b:b8:55:
13:30:eb:fd:16:45:d6:1e:81:be:45:b9:03:61:7d:f5:a5:ab:
a4:3d:38:95:23:5d:3d:ef:10:50:b0:d9:e2:17:b6:88:b6:54:
fd:ed:bb:5b:0d:07:9f:17:44:67:d0:c6:af:99:c4:86:af:03:
89:c8:2b:75:c6:a4:a8:df:8c:28:65:79:19:0e:d0:d2:e1:03:
82:32:30:90:65:16:11:fe:9a:93:27:4e:63:87:61:05:d1:50:
e8:f9:00:f4:1d:e7:87:2a:86:b3:c9:70:10:00:9d:25:a6:5b:
74:02:c2:45:5f:55:5e:3c:3f:ec:04:c5:60:4e:25:ae:63:cd:
be:90:a8:21:37:46:89:c2:97:d0:a2:86:cd:96:fb:fd:d9:5a:
6d:6d:c1:68:b5:be:55:04:e8:fd:f4:b4:59:ed:e8:3a:c5:a2:
7c:57:e1:24:23:24:a1:07:92:15:d5:2f:4c:f8:7a:46:f2:62:
a1:f8:fe:63:a8:21:df:a4:59:94:b4:72:fe:79:ae:9d:19:63:
0d:96:40:d1:71:89:3b:c7:b1:bb:8a:76:20:01:3d:84:b8:ad:
c8:46:11:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:42 2025 by rpki-client