Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/sxxYDEEhiRiJX3UMNt8K_vblPTY.roa
File: sxxYDEEhiRiJX3UMNt8K_vblPTY.roa (raw, json)
Hash identifier: 7uRTr0JOLv75urrHhoHPRKNdGPalgRl2aLMpnKvQe1E=
Subject key identifier: B3:1C:58:0C:41:21:89:18:89:5F:75:0C:36:DF:0A:FE:F6:E5:3D:36
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0289
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sxxYDEEhiRiJX3UMNt8K_vblPTY.roa
Signing time: Sat 10 May 2025 11:07:51 +0000
ROA not before: Sat 10 May 2025 11:07:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 649 (0x289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 11:07:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B31C580C41218918895F750C36DF0AFEF6E53D36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:3a:f9:41:5a:ae:86:63:8b:28:9c:8b:5b:
88:4e:37:3f:44:b4:7b:2c:c1:b1:f2:9e:bd:c7:1e:
f2:84:48:35:b1:97:7c:ba:60:37:c8:0b:0e:04:1e:
a2:a8:53:b7:d8:a4:e0:1a:df:e5:3a:c4:fa:ec:8d:
ec:9c:ef:72:b6:3b:ab:3c:df:9c:a7:ae:10:21:30:
a1:ec:de:cb:15:33:55:32:18:c6:30:5b:1b:7c:ab:
51:58:a8:77:61:96:cc:e4:13:56:9a:99:32:dd:56:
7e:f9:91:3c:0e:bf:62:89:f7:9c:36:63:3a:44:34:
4f:ba:f0:bf:6f:73:e7:51:da:62:fa:30:83:f6:33:
f0:60:63:ed:37:f1:1d:4d:da:e7:05:99:20:3b:22:
ad:e9:fa:5f:7a:5f:60:45:e8:77:f0:35:ef:2d:7e:
1b:93:40:1c:41:b7:86:f1:af:a6:f4:f3:6f:94:70:
68:1e:47:3c:ac:10:fa:b4:28:63:b7:32:dc:c0:f9:
05:27:21:a7:e0:2f:05:3a:f2:4f:f1:b9:a5:37:dc:
23:59:09:ed:15:a4:7b:c3:23:e0:35:f4:fa:84:cc:
f6:80:7d:39:a8:56:5d:a8:97:94:59:92:7a:74:90:
ca:c3:77:cd:97:1e:42:70:ef:e9:cb:7c:78:70:d3:
3d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1C:58:0C:41:21:89:18:89:5F:75:0C:36:DF:0A:FE:F6:E5:3D:36
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sxxYDEEhiRiJX3UMNt8K_vblPTY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:11:50:1f:01:2b:c4:e5:77:1f:33:cb:11:84:a5:39:4f:2a:
83:ce:4b:21:fe:c8:5c:a0:96:df:66:e3:ef:f3:6c:dd:d9:7c:
db:f5:fe:0e:c0:74:79:9b:8f:e6:63:49:2c:2e:4d:8f:54:bf:
1b:c3:d7:4a:dc:cf:41:0f:e3:bf:35:7e:4b:65:8c:6f:db:fb:
92:3e:8b:6c:2b:aa:c3:53:5f:86:2c:64:f8:13:49:72:c9:46:
93:92:ac:8c:da:87:c2:ee:d3:35:43:1b:1f:6a:88:0d:c6:26:
83:80:e9:bb:92:2f:30:c2:4c:15:24:45:2d:d2:d9:60:87:16:
41:86:f1:11:f8:a9:6e:c5:bc:ce:c0:7d:9f:1f:81:0c:19:a5:
3a:9d:43:5a:1a:c5:44:79:3b:36:ec:67:4f:15:52:44:2b:d0:
7f:63:04:d5:d6:5f:1f:c6:41:2b:78:53:43:06:5e:5a:e9:98:
2c:53:fc:b8:92:21:4f:65:0b:52:99:af:7a:56:18:b1:b0:dc:
ed:43:26:e2:ab:24:8e:ce:b3:3f:ed:15:29:09:86:02:78:d3:
ed:f1:ef:ab:12:7e:37:00:e5:8c:be:52:26:5c:ce:e6:4a:76:
26:23:00:78:b9:52:6f:40:fc:e0:ad:4c:84:44:48:17:dc:aa:
68:89:0e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:19:16 2025 by rpki-client