Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/rouZ6xqE6nd_IQWmQAfVEqkpLjc.roa
File: rouZ6xqE6nd_IQWmQAfVEqkpLjc.roa (raw, json)
Hash identifier: RL3IwDBo5nW4abS61Q42SEiAIcYLBHRCm+5brPecuOI=
Subject key identifier: AE:8B:99:EB:1A:84:EA:77:7F:21:05:A6:40:07:D5:12:A9:29:2E:37
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C6D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rouZ6xqE6nd_IQWmQAfVEqkpLjc.roa
Signing time: Fri 23 May 2025 15:38:27 +0000
ROA not before: Fri 23 May 2025 15:38:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3181 (0xc6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 15:38:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AE8B99EB1A84EA777F2105A64007D512A9292E37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a4:15:b7:71:c3:0e:39:e8:45:21:b3:57:eb:
9b:b0:f9:1a:f9:64:e5:a0:bf:64:67:30:c6:8d:ec:
f6:28:2d:0f:ae:7e:e8:5e:b8:3e:10:2c:78:d1:77:
8e:0c:1c:3c:2f:83:ca:9c:bf:a5:be:6c:96:e1:48:
2d:b8:56:d6:dc:c0:c7:99:37:9b:80:4f:67:67:f4:
f6:d6:0c:4c:66:b8:20:ca:73:50:ec:91:28:f8:a4:
f6:b0:50:7f:b3:c2:36:33:3a:e3:73:60:2a:8e:1d:
21:33:0a:c2:69:28:05:47:b8:65:22:18:af:c7:40:
88:b9:67:12:f0:54:5c:c4:7e:72:bb:1e:11:c3:70:
11:4d:62:dd:ca:70:4b:51:d0:3c:66:46:46:a4:bf:
22:72:17:32:b9:4b:cd:13:3b:bc:39:22:60:27:b7:
95:c3:0d:8d:38:87:29:7d:47:4d:8f:8e:eb:64:2a:
32:9f:d5:31:f7:16:ab:6b:92:c1:b4:f6:4f:3e:ae:
7c:cd:28:64:32:79:aa:39:ce:89:ff:f5:d9:e1:4b:
51:b3:08:1b:b2:71:72:2b:a6:96:bd:1e:d0:c7:d5:
60:03:7b:cb:20:60:8d:4b:eb:fd:72:6d:e4:1d:7b:
4c:1b:8c:80:73:55:1e:b3:57:f7:bd:e9:6c:89:aa:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8B:99:EB:1A:84:EA:77:7F:21:05:A6:40:07:D5:12:A9:29:2E:37
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rouZ6xqE6nd_IQWmQAfVEqkpLjc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:b0:6e:36:6e:4a:df:74:bb:b3:d2:bd:17:64:5b:e7:70:81:
cc:72:1c:d5:b2:0a:d4:e5:96:c0:3e:ff:58:c5:f6:08:7a:1a:
da:e8:12:f9:73:c8:3a:d1:67:09:7c:22:d8:d3:9d:d4:c0:68:
d8:31:e2:a5:66:d2:f2:75:31:43:50:70:d0:22:2d:a6:b2:e7:
7f:58:75:37:7c:c2:eb:a7:3a:a3:2d:96:c7:82:7d:79:72:9b:
b2:03:50:7d:63:50:e4:34:e6:0c:6e:f0:3d:7a:b6:82:3c:16:
c8:df:e0:42:21:41:50:f7:da:dc:bd:cd:ce:63:0c:7d:9d:b4:
38:28:f4:67:9b:b9:12:14:29:76:a4:bb:b6:71:91:e4:fd:1f:
36:db:4d:bc:aa:12:e6:72:47:1e:a1:67:3b:fd:68:6d:f9:ad:
18:c2:1c:3f:d1:8e:88:e1:d9:03:51:86:c3:d6:f8:1e:da:20:
68:e3:64:e2:f6:70:b3:d6:9b:9d:7d:66:75:55:79:ec:c3:f0:
15:40:39:80:4a:b6:22:ac:99:46:9b:c7:90:72:d4:7a:21:12:
ba:6e:3c:80:9f:a3:3c:4e:4e:81:1e:cb:09:c9:3a:78:b1:cd:
94:ad:b3:61:9e:ab:fa:25:97:7a:4f:ef:4a:7c:c9:96:0b:48:
8a:a3:5e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:42:05 2025 by rpki-client