Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/201hFsPrguWj-_3CQ47vqnTFu44.roa
File: 201hFsPrguWj-_3CQ47vqnTFu44.roa (raw, json)
Hash identifier: kbatvBtWgu5cKzvnM3mUI58Di3x4mDt1Hpp+XSzKw3k=
Subject key identifier: DB:4D:61:16:C3:EB:82:E5:A3:FB:FD:C2:43:8E:EF:AA:74:C5:BB:8E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04F5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/201hFsPrguWj-_3CQ47vqnTFu44.roa
Signing time: Tue 13 May 2025 16:38:02 +0000
ROA not before: Tue 13 May 2025 16:38:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1269 (0x4f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 16:38:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DB4D6116C3EB82E5A3FBFDC2438EEFAA74C5BB8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e1:fe:73:ca:d3:69:d6:e7:bd:52:8f:26:73:
9f:b6:ac:ce:30:a5:c5:26:56:c4:fa:e0:8a:8e:e3:
47:76:82:d8:07:8a:48:33:18:a3:df:08:5c:6d:17:
a4:ac:7e:43:6e:8d:df:63:e9:e0:6f:5c:2f:65:db:
90:68:7b:ed:d6:71:d3:5f:87:d3:de:3a:d7:24:99:
34:e7:99:b6:f8:4c:18:07:57:a4:67:e3:82:91:43:
22:96:e7:27:a2:ac:2a:ff:11:10:7a:13:1d:b0:e1:
dd:02:0d:58:33:3b:f7:c8:ac:1d:b0:70:04:5d:04:
a6:48:a9:be:80:18:2b:56:48:4a:e8:47:26:c6:55:
b9:fe:51:cd:49:d2:55:bb:b0:7b:9c:b4:79:c7:50:
c7:c1:84:83:17:47:b2:bd:2d:72:ec:6b:ca:b2:e9:
fc:a6:d3:a9:72:4c:73:2a:90:f8:3e:cd:83:ab:a2:
42:a6:62:cb:7b:f8:bd:87:93:96:64:4f:df:92:54:
df:8f:0d:b7:5f:42:bf:4d:49:80:e9:f7:6c:e0:fe:
ee:9e:c5:8d:98:3f:81:2e:5b:15:ed:9c:78:91:8a:
6d:cd:9a:b3:b7:d0:77:95:83:74:4d:c6:75:f9:be:
ed:fd:a7:ce:93:dc:a8:e2:58:83:1b:18:68:e5:a3:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4D:61:16:C3:EB:82:E5:A3:FB:FD:C2:43:8E:EF:AA:74:C5:BB:8E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/201hFsPrguWj-_3CQ47vqnTFu44.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:f2:94:29:2f:19:78:56:4a:73:59:21:54:f3:98:26:e9:9e:
ff:40:50:9a:d5:2d:9d:c6:57:44:21:72:1d:dd:4a:4e:e8:1e:
82:d2:3e:2a:5e:19:0c:0a:96:7b:34:c9:93:a0:c1:d4:94:8a:
cf:f5:55:8d:14:20:c1:b5:53:90:50:f4:35:6c:19:15:5b:0e:
40:ed:40:ba:be:9a:ea:7c:cf:98:df:fc:c5:cd:bb:a3:25:0e:
2c:ab:0f:ef:d5:e4:6a:68:b0:aa:35:ff:02:b2:e3:23:b5:92:
42:ab:e6:a8:bf:f2:90:c0:a4:06:a8:99:57:44:34:39:05:79:
71:5e:af:58:40:c2:33:50:80:50:62:16:26:fe:66:bf:b8:26:
b7:9b:b3:4e:0c:a2:ae:cf:93:c9:83:37:02:30:42:d8:8f:09:
c5:b5:e1:5f:b6:b5:9d:68:67:5d:d7:9a:35:e3:33:dd:12:3f:
c1:24:5c:8f:75:c5:40:b0:b1:16:e3:c2:e2:e9:c4:ed:c0:c1:
b0:8e:4c:f7:c3:72:6c:1a:51:9f:a8:04:a1:5f:a4:b8:f7:be:
e6:c1:23:76:e6:18:32:d9:6a:8b:16:3f:90:2f:8b:c0:53:9c:
95:69:a5:5f:80:83:73:95:4d:07:a1:fe:f8:5f:10:91:89:de:
e8:ee:50:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:48:01 2025 by rpki-client