Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vuOwE8JRYEfLenwCHrGFNHqYGdY.roa
File: vuOwE8JRYEfLenwCHrGFNHqYGdY.roa (raw, json)
Hash identifier: 1WMdWOceBn85zZMQ0rWWKErYaSvtpnai8ZgBKdhORtY=
Subject key identifier: BE:E3:B0:13:C2:51:60:47:CB:7A:7C:02:1E:B1:85:34:7A:98:19:D6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 22CD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vuOwE8JRYEfLenwCHrGFNHqYGdY.roa
Signing time: Sun 22 Jun 2025 23:11:58 +0000
ROA not before: Sun 22 Jun 2025 23:11:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8909 (0x22cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 22 23:11:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BEE3B013C2516047CB7A7C021EB185347A9819D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:17:30:52:ea:7f:d2:a4:af:18:89:03:1c:
5b:bf:8b:4a:58:41:17:d2:00:ca:75:c8:2e:e6:14:
cf:24:b7:13:f9:b1:45:9c:06:9c:36:35:44:4e:3c:
e4:ff:50:56:d9:44:b4:09:1c:89:41:47:e6:a7:4f:
18:1c:2d:bc:7f:83:dc:79:2b:ca:21:e9:89:88:d2:
f9:64:3c:e1:7e:1a:c5:7f:47:14:e6:b5:49:ce:7f:
bb:0f:56:19:5a:89:73:b6:f8:1e:3e:d4:66:0f:7e:
42:52:4c:67:db:54:5f:05:3e:f5:34:62:cd:98:fb:
61:0f:0f:45:2d:ca:54:1d:48:a4:d7:9d:95:5a:a1:
0b:7d:03:29:32:a2:59:d3:30:75:a8:e1:6e:cc:28:
21:9e:ac:50:84:5f:19:bb:2a:c5:8f:7b:70:8d:9a:
be:a9:0f:d2:d2:55:80:de:79:f5:fa:ef:6d:10:8a:
39:b0:74:c2:cf:48:f5:fd:4b:f3:81:96:8e:53:b7:
a0:27:50:8f:0e:48:ac:64:e6:5c:57:76:af:9c:75:
b8:15:d1:2f:2c:ca:c8:a9:0b:42:9e:81:c5:cd:11:
94:60:5c:ca:86:4a:a0:62:87:4f:70:d2:b1:51:f0:
73:bb:46:10:a0:a5:66:d1:6c:b1:29:c9:3e:e8:19:
ba:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E3:B0:13:C2:51:60:47:CB:7A:7C:02:1E:B1:85:34:7A:98:19:D6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vuOwE8JRYEfLenwCHrGFNHqYGdY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:8b:68:2a:9e:c0:a1:5e:85:18:6c:a7:6d:a8:68:9d:d5:ee:
1b:ab:a3:c1:95:98:a7:3d:43:99:7b:91:0d:c6:e0:38:e9:ba:
df:d9:c6:f1:97:94:b1:95:3b:08:c2:ff:49:df:86:af:d5:05:
9c:d0:37:f3:55:01:95:20:9c:b0:ae:e6:07:f9:74:0e:28:34:
76:36:5e:df:e3:42:c5:39:7b:1b:d6:af:1d:f6:00:b3:e3:8a:
15:25:d0:b6:15:c7:b1:10:7b:3e:0c:fa:27:28:6c:83:bb:3b:
3f:f5:8a:88:5d:50:a3:a9:56:07:6a:82:c3:3b:0a:cf:1d:21:
7a:83:71:1b:2e:5a:f1:b6:47:6e:d1:46:c2:f3:ac:a3:d2:41:
19:22:54:ca:dd:eb:78:91:ae:f3:5d:ae:f0:92:c3:ba:f1:92:
6c:1f:ff:6d:2c:e1:d0:38:00:5d:82:e8:7a:2e:63:55:e0:c7:
71:26:ab:3c:3e:fc:e5:8a:de:5d:1f:ed:08:34:0a:a1:0a:0a:
71:d8:0e:6b:87:65:4c:ed:20:7b:fb:e9:cc:ab:f2:52:d6:e1:
53:b4:8d:1f:d0:b8:e6:11:4b:a6:fd:4a:e0:67:e5:5a:f3:37:
53:0a:e9:0e:50:0d:76:2c:18:37:13:fc:0d:5e:0d:8a:c6:03:
59:e7:ee:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:51:22 2025 by rpki-client