Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/OUKKNpiPtYZNn2ffCqe94YzHB8s.roa
File: OUKKNpiPtYZNn2ffCqe94YzHB8s.roa (raw, json)
Hash identifier: 3FfArC7mpQHmn0mKiUrXM3MhffekdLb4pXd2NnSv0P8=
Subject key identifier: 39:42:8A:36:98:8F:B5:86:4D:9F:67:DF:0A:A7:BD:E1:8C:C7:07:CB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 017D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OUKKNpiPtYZNn2ffCqe94YzHB8s.roa
Signing time: Fri 09 May 2025 01:37:45 +0000
ROA not before: Fri 09 May 2025 01:37:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 01:37:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=39428A36988FB5864D9F67DF0AA7BDE18CC707CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cd:97:a9:25:85:a5:8c:c0:dc:b1:54:38:16:
95:58:1a:3b:23:d1:5c:69:07:2e:96:04:c8:23:23:
77:d2:33:61:d6:59:6e:af:91:80:b7:1d:60:ae:4c:
38:e8:dc:20:99:f6:cc:69:63:7e:13:8a:fb:8a:f0:
d8:02:44:2e:d4:00:75:12:f9:05:47:64:78:09:4d:
90:88:3d:3b:d7:d0:0c:18:86:47:a5:20:9e:5e:a2:
cb:de:87:b5:33:fd:0a:60:a4:cf:22:1e:49:ea:5e:
5e:3f:b2:45:13:2e:c7:32:f7:44:1e:8d:d5:08:4c:
ed:ac:37:f8:f4:65:16:b7:4d:9a:62:47:42:73:03:
7a:b3:f1:1c:46:e8:d2:e9:d8:bc:61:80:67:af:03:
df:f4:bf:80:00:81:69:58:ff:be:41:24:bc:83:97:
18:60:f9:59:81:f3:2b:f3:2a:e6:04:83:45:1b:04:
58:e0:35:44:eb:c3:1a:81:b8:33:ee:56:7c:ce:a9:
40:f2:d3:1d:b7:bb:3e:1f:59:52:0c:43:47:e7:0f:
d7:07:a4:cb:bc:20:46:17:f1:3e:17:8c:81:88:49:
2f:0c:aa:13:57:1e:be:e7:bf:14:11:f5:c8:e8:9d:
bf:2a:70:6f:7f:47:bd:7a:49:c4:44:0d:2a:be:35:
f1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:42:8A:36:98:8F:B5:86:4D:9F:67:DF:0A:A7:BD:E1:8C:C7:07:CB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OUKKNpiPtYZNn2ffCqe94YzHB8s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:69:c1:78:91:89:9a:36:eb:5a:f3:4f:06:26:87:b0:5d:50:
32:62:cd:64:a9:6b:93:5f:e0:fa:47:18:32:8e:0c:0a:1d:84:
5f:af:ff:11:a1:e2:e1:7c:09:63:7b:c8:37:7e:99:e4:60:2a:
60:c4:28:79:2a:27:95:d3:e3:4b:11:ba:b0:08:9e:4e:aa:eb:
3e:db:8f:8d:1c:01:8d:c8:65:89:f2:8c:85:c7:01:6e:de:2b:
7e:4c:de:ed:b6:95:4a:fd:5d:5a:c5:76:04:f1:6c:9d:86:02:
5e:fb:ca:a3:fb:d7:d4:07:92:8f:f3:d3:71:c1:8a:5c:a7:4c:
49:60:b4:28:b3:76:ad:00:1d:d5:cb:29:59:e6:bf:02:cc:d3:
62:9a:e5:20:82:2f:62:90:7c:7e:ca:b2:cb:bc:b6:0e:01:03:
fd:2a:86:5c:4c:0c:c6:0c:02:a0:7f:c9:a2:a0:fd:b2:dc:88:
1b:ec:19:f8:26:ce:0e:22:45:b9:61:bd:17:4d:89:67:be:a3:
e2:ee:a9:26:bc:0a:7b:4c:0e:2d:d2:66:e3:cf:30:a7:c7:ca:
a7:b9:e3:09:65:f6:97:e7:a3:05:e4:fc:db:b3:ca:9d:18:12:
e6:2d:33:c6:c5:e8:e3:b0:e3:de:3d:92:50:e0:2a:a1:55:d6:
81:67:a3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:39:59 2025 by rpki-client