Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/P0VZGmM7PnIU-rEnq5e2MZb7cUs.roa
File: P0VZGmM7PnIU-rEnq5e2MZb7cUs.roa (raw, json)
Hash identifier: zrNTG+LIdg/NTKE1e/hLa3G1rZXlv8MRfjiYvPFH7oU=
Subject key identifier: 3F:45:59:1A:63:3B:3E:72:14:FA:B1:27:AB:97:B6:31:96:FB:71:4B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0785
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/P0VZGmM7PnIU-rEnq5e2MZb7cUs.roa
Signing time: Sat 17 May 2025 02:38:07 +0000
ROA not before: Sat 17 May 2025 02:38:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1925 (0x785)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 02:38:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3F45591A633B3E7214FAB127AB97B63196FB714B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:e9:3e:1f:70:7c:b5:12:00:47:f4:a3:9a:
29:30:ef:7a:6c:26:a6:ea:d7:dc:48:c0:2a:97:84:
72:f1:ef:20:d7:9e:45:50:62:a8:bc:ad:ff:59:a2:
de:d8:ac:1b:27:c3:50:3a:bd:57:1f:50:24:f5:86:
ee:c4:4f:7f:74:c6:a0:c7:fb:73:62:fa:1b:8f:08:
d5:4e:e7:aa:d5:93:15:9e:d5:90:31:f9:f2:3d:c3:
07:05:89:5e:12:e1:89:5c:08:1e:53:c4:a1:a6:14:
ea:91:ec:de:01:21:ca:da:d6:db:cf:7a:f5:41:4b:
7e:a7:22:21:e6:26:45:ae:b0:41:ba:5e:b5:78:3e:
05:fc:af:9e:de:48:26:32:ba:d5:9e:83:b9:c9:ac:
5d:f7:61:c7:30:5d:33:cf:4a:a3:75:f4:c4:0d:77:
60:cd:06:7a:ed:47:4f:a3:34:68:86:d0:52:ba:0f:
aa:10:ca:c1:a7:5a:30:f1:1f:08:62:c1:8c:44:3e:
8f:80:3b:9d:ba:a1:1d:32:a0:b6:5f:dc:c3:03:8a:
fb:86:0d:09:30:19:84:d4:4e:09:f8:33:2d:2d:6c:
0d:f0:50:72:8e:a0:6e:20:ab:7b:5d:e9:2d:33:06:
e3:bf:90:c5:f3:cc:d4:1f:ac:e4:7f:52:fc:73:d9:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:45:59:1A:63:3B:3E:72:14:FA:B1:27:AB:97:B6:31:96:FB:71:4B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/P0VZGmM7PnIU-rEnq5e2MZb7cUs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:2d:7c:a7:d5:74:98:91:32:fb:05:2a:77:c4:36:a1:ee:e1:
ff:a0:b7:1a:c6:e2:30:2e:11:a0:73:de:85:42:10:63:00:a7:
39:01:0a:d6:f3:df:fd:86:6f:de:f1:b7:f5:5f:24:0c:13:8c:
9d:7a:5f:82:3a:3a:33:be:69:78:ef:28:f8:dd:b5:0d:d0:5d:
bc:43:1f:52:cc:e2:aa:a0:ee:98:5c:0f:97:80:6b:f4:a5:fc:
59:97:f8:4c:56:7c:ed:df:20:92:fc:aa:a2:1b:81:c6:c9:e1:
34:77:0a:00:1b:31:6a:f1:51:f8:a4:ba:24:53:40:a9:5e:f7:
fb:e5:1e:0d:77:82:4b:30:9e:1b:a1:5c:b9:09:e1:3b:4b:36:
42:e5:33:09:9b:d0:7a:ae:58:49:87:89:4d:b0:7b:ae:40:d4:
01:e5:9c:d7:84:31:a3:af:ed:19:67:1c:d7:d2:5f:26:da:1b:
01:8e:64:cc:91:09:d3:fa:02:ad:19:49:d1:89:90:dc:1e:f0:
dc:ec:27:ec:bf:b1:91:3c:19:4f:d3:06:dd:9a:9b:08:dd:90:
28:67:59:92:19:0f:30:11:ed:61:10:26:80:93:44:98:69:06:
a8:56:8d:7c:e8:47:03:2f:00:27:f3:82:a9:d2:1e:99:a1:fa:
f8:a0:70:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:42:19 2025 by rpki-client