Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/7OjrEKQctDGQleId-SMU6svkQTo.roa
File: 7OjrEKQctDGQleId-SMU6svkQTo.roa (raw, json)
Hash identifier: JMnpKKvhAvpSh+BeZJnknpIo1+RJW7mh6+asxzwlTxI=
Subject key identifier: EC:E8:EB:10:A4:1C:B4:31:90:95:E2:1D:F9:23:14:EA:CB:E4:41:3A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0115
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7OjrEKQctDGQleId-SMU6svkQTo.roa
Signing time: Thu 08 May 2025 12:37:42 +0000
ROA not before: Thu 08 May 2025 12:37:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 12:37:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=ECE8EB10A41CB4319095E21DF92314EACBE4413A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:ca:28:04:f0:ab:a9:57:a9:f0:83:d7:f5:
b6:d4:bc:de:37:98:4e:eb:de:84:be:95:d0:d4:7c:
cc:ac:da:11:90:cb:dc:a6:ae:0f:0d:91:ea:7b:fc:
b6:1b:81:8a:db:12:b0:44:45:df:81:56:04:e8:a6:
9c:73:cb:cf:e2:e6:ab:cf:89:a8:46:54:59:20:b8:
b8:07:11:c0:59:fd:32:2a:ed:0f:54:04:1f:ef:4a:
83:cb:38:e8:bc:9c:92:f6:b8:3e:7c:29:d9:90:12:
d4:22:39:50:a1:dd:12:15:2a:fa:10:e1:2c:74:2b:
01:cc:1d:02:78:9b:37:17:ed:48:22:e7:18:1a:6e:
d2:54:ed:f4:88:32:4c:9c:47:65:fc:5f:5a:3b:d3:
63:1d:d9:cc:59:d7:a6:50:34:b6:9e:72:a8:f3:9d:
d8:34:cf:50:7f:c9:fc:45:b0:d2:c6:a7:ab:83:35:
39:b3:ef:54:5d:68:62:fd:76:28:85:97:e2:94:f7:
53:1f:f1:ff:76:f1:74:30:8d:ee:b6:57:2e:53:57:
f0:e0:17:ec:61:08:8a:44:0d:91:1f:5f:ec:34:a7:
84:c4:43:92:ac:74:a4:a3:a6:5b:2e:48:5e:98:94:
92:a2:ca:0d:b6:5d:ab:7a:25:8b:23:b6:a8:a0:a1:
a9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E8:EB:10:A4:1C:B4:31:90:95:E2:1D:F9:23:14:EA:CB:E4:41:3A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7OjrEKQctDGQleId-SMU6svkQTo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:db:4f:46:f9:18:85:cf:a4:c5:88:3d:17:df:19:7e:ba:71:
9c:ab:49:dc:a1:07:4e:61:e6:83:27:79:9d:b1:7d:db:d0:d3:
ce:7d:f7:c2:f0:14:fd:be:98:38:67:38:66:03:d9:1a:0d:1a:
6c:de:87:70:03:d6:b5:3a:bd:19:7c:f0:40:12:29:a8:e0:56:
0c:ad:10:6e:e1:68:dc:1f:05:d5:f2:40:b2:b9:bf:3e:d5:c1:
da:66:8e:b5:8e:bc:b1:aa:98:16:4f:6e:03:53:36:9b:68:9c:
e4:01:8a:4b:e5:75:76:05:30:ae:c2:f9:19:3d:32:a8:3d:2e:
64:02:75:bc:3d:e2:c4:e2:25:fa:fe:b0:ec:5b:27:c8:8f:23:
d0:d9:3b:28:d1:1c:c4:a3:38:1a:7d:b9:1c:56:a6:fe:24:3c:
eb:db:cd:25:39:05:a0:ae:b5:a9:be:a4:38:e5:ce:2e:86:c0:
07:05:77:bb:87:15:d0:8b:06:fe:69:29:1d:0e:47:73:54:7d:
b7:8c:13:cc:b3:ce:92:09:e5:f9:7d:20:a0:8e:fc:a0:df:96:
68:b3:cd:96:cd:9c:cf:24:34:84:08:8e:96:c9:2a:cd:1e:39:
36:3f:a3:cf:d5:25:0f:70:8c:bb:ec:00:ec:8c:4a:58:2a:f6:
5f:98:7d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:44:12 2025 by rpki-client