Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/E7qSbPfN6Rs1Ckvcc1RxRh0T0A4.roa
File: E7qSbPfN6Rs1Ckvcc1RxRh0T0A4.roa (raw, json)
Hash identifier: LYla5ygN9JuQ3doPq2SpKTs2KRpQYUdkLuRqLhnAMyg=
Subject key identifier: 13:BA:92:6C:F7:CD:E9:1B:35:0A:4B:DC:73:54:71:46:1D:13:D0:0E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0665
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/E7qSbPfN6Rs1Ckvcc1RxRh0T0A4.roa
Signing time: Thu 15 May 2025 14:38:09 +0000
ROA not before: Thu 15 May 2025 14:38:09 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1637 (0x665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 14:38:09 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=13BA926CF7CDE91B350A4BDC735471461D13D00E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:f7:f4:6a:28:ee:02:33:33:e5:68:71:26:
4a:2b:1b:9d:d1:47:74:d9:c7:68:26:3f:02:43:b3:
71:93:ef:31:72:9f:0f:e2:30:e2:a9:a0:0e:02:7b:
a6:3a:7b:71:c5:87:d2:fc:23:61:fd:d1:1b:f9:86:
f9:8a:8b:30:38:5b:2a:e2:cc:94:ab:2f:21:83:ff:
f7:38:6e:b6:9a:a2:4d:00:d7:b4:02:96:f6:3c:b6:
a5:f7:cf:32:2c:b3:f0:e2:ce:fd:d3:df:c1:2c:cc:
fa:64:11:e8:dc:fa:f0:8b:ca:cb:f0:0b:7e:3b:0b:
c6:28:5a:8c:d9:94:ce:ed:a6:34:a9:1c:f2:15:87:
62:c9:ed:f9:4c:2f:74:ec:22:08:e8:00:cf:c0:99:
80:24:61:f9:25:95:4c:d5:f3:42:90:f2:aa:37:81:
6a:64:b4:05:61:2d:5d:22:e2:ba:38:cc:dc:d9:41:
bf:d2:58:6a:31:c6:83:11:a8:6f:7d:a0:20:02:30:
cb:91:4f:c7:3c:e2:48:04:33:fb:51:41:d4:22:04:
da:83:82:69:f7:ba:f3:8d:9b:01:40:c9:46:00:39:
7c:5d:97:0a:88:4a:91:3a:cb:e4:1f:4e:c5:5b:ee:
dc:8f:2a:85:42:9b:5b:cf:df:07:42:35:2b:ce:0a:
60:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BA:92:6C:F7:CD:E9:1B:35:0A:4B:DC:73:54:71:46:1D:13:D0:0E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/E7qSbPfN6Rs1Ckvcc1RxRh0T0A4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:4d:cc:a2:44:4c:1a:02:24:b2:b4:99:34:99:cb:cc:c0:cd:
e3:6a:08:ba:8a:fe:49:e9:f7:79:ce:09:96:30:ff:91:41:73:
f4:dc:74:83:b7:e6:5b:d8:8c:02:ad:d8:d1:2b:ae:38:86:d2:
8d:5f:4a:4d:ac:bb:76:a6:fe:3b:c6:f2:51:6d:6d:5b:55:b6:
0f:a0:58:5f:cf:eb:b0:13:3c:fa:9f:bb:da:1d:a6:37:4a:79:
e6:f2:ce:c1:10:28:7d:a4:32:ea:28:78:50:0b:c2:80:c5:01:
5c:66:1c:46:9f:a1:93:62:2f:ab:1a:7d:82:7a:63:05:c7:e4:
b3:ad:4f:c8:86:0f:89:a2:33:6c:e2:5e:66:0f:e2:ef:53:00:
bc:3d:96:a9:95:68:e5:81:49:e2:8d:ab:fa:c8:b4:49:58:3f:
e4:0c:73:d7:d2:eb:4f:61:93:a7:ed:c5:29:e0:cd:eb:2b:3e:
e2:f7:f0:84:60:6f:ae:7f:ab:23:8b:1e:e3:4f:26:ba:7d:07:
8d:1e:aa:03:0d:f7:77:d7:fa:bf:4d:89:6f:6f:c9:01:b1:cd:
e6:22:2a:34:a1:b9:c8:31:6f:d1:fc:9b:34:32:4e:f3:8e:0b:
60:69:7e:c3:91:04:e4:c3:26:05:b0:26:f3:36:35:96:45:c5:
03:44:b9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:25:56 2025 by rpki-client