Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/v5-aJ2eZyzfmwNDaMdtksJVdVmU.roa
File: v5-aJ2eZyzfmwNDaMdtksJVdVmU.roa (raw, json)
Hash identifier: 1wMgxYZFhAeXRp1TdzKgEBJ4FUfzGxJ3tJkptL+Wt6U=
Subject key identifier: BF:9F:9A:27:67:99:CB:37:E6:C0:D0:DA:31:DB:64:B0:95:5D:56:65
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1265
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/v5-aJ2eZyzfmwNDaMdtksJVdVmU.roa
Signing time: Sat 31 May 2025 14:39:11 +0000
ROA not before: Sat 31 May 2025 14:39:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4709 (0x1265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 31 14:39:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BF9F9A276799CB37E6C0D0DA31DB64B0955D5665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:ae:8d:15:9f:a4:5a:20:05:86:3a:74:20:
6e:0c:b9:89:d9:2f:d3:7e:59:e7:12:a3:dd:2d:be:
21:5e:2d:66:b6:c7:f4:f4:e4:64:1d:ce:d2:9f:c4:
d0:52:8c:5b:77:7b:cc:86:da:03:88:06:1c:3d:e3:
b7:20:7a:c2:1c:c1:93:6c:5c:ca:54:53:fb:f9:ef:
7d:9b:a5:b2:a5:3f:f7:05:2d:dc:f7:a7:6f:ef:72:
3c:0c:45:fd:a9:36:bf:49:58:ac:1d:20:e5:52:47:
ce:8d:61:74:dc:4d:62:25:c1:be:1f:5f:85:5a:eb:
36:c4:5a:48:f6:54:bf:8a:e4:32:82:a1:28:3e:a8:
d0:24:84:ad:ce:76:3e:2f:01:80:d7:8f:de:9e:9e:
e7:b2:c2:80:56:dc:85:3e:d7:44:94:5e:77:7e:0a:
05:1d:d3:6b:06:09:ac:e5:61:e1:ec:d4:18:d9:ad:
10:c7:54:18:32:89:ff:72:e6:09:d2:e6:9d:83:63:
f9:24:6d:d4:e8:53:4c:03:3f:9a:a3:c2:57:2c:31:
1f:df:00:9f:a0:82:2b:ad:9f:c3:3b:18:b3:bc:0e:
23:6a:df:fc:fe:8b:b4:3f:94:b9:6e:63:b6:88:0a:
de:5f:81:ab:7d:f6:6e:97:94:3b:59:80:ef:47:d3:
a0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9F:9A:27:67:99:CB:37:E6:C0:D0:DA:31:DB:64:B0:95:5D:56:65
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/v5-aJ2eZyzfmwNDaMdtksJVdVmU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:91:5b:d6:9b:7c:02:ab:00:fb:1a:9c:f7:45:f6:1c:1b:08:
c1:7d:e2:c2:11:9d:a6:3e:fb:63:73:b6:0f:8d:82:13:38:93:
69:88:cf:2b:6e:a2:24:55:7c:d1:ab:7f:bd:53:a4:85:4c:62:
0d:2b:b0:63:e1:09:f6:85:4a:a5:35:21:97:27:69:af:e8:72:
42:11:84:3f:1d:74:2c:32:f7:9c:f3:b2:de:7d:66:e0:c9:25:
47:70:7a:35:2d:fa:c8:af:b9:6d:0d:3f:5f:34:99:1e:26:85:
18:7a:b4:44:ae:a5:2f:38:35:11:ec:c6:f1:ab:8a:64:c4:ff:
79:ab:ae:cf:d0:51:7a:06:b9:c7:ab:23:cd:b8:27:05:51:d8:
a6:0e:17:ab:a3:4e:e6:07:9d:73:14:08:84:08:ea:d2:b5:3a:
d3:a1:87:1b:fb:d0:4b:8b:ef:5f:3d:93:40:86:2a:fc:b9:e0:
61:10:8c:ae:1c:aa:fb:86:70:15:51:e1:73:bc:04:a9:ab:fe:
94:f2:ed:0e:ea:c2:b2:7e:d4:83:b9:80:98:8d:86:60:0e:1c:
7d:ff:ee:e6:ef:b9:aa:c1:d7:6f:e0:a8:8a:cb:5f:57:1e:26:
bb:e5:2d:cb:3e:0f:6b:19:8a:00:f8:12:de:61:06:85:23:ac:
e4:b5:82:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:32 2025 by rpki-client