Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Td7Zhgn6n0HOS7guMbB9rnze4ag.roa
File: Td7Zhgn6n0HOS7guMbB9rnze4ag.roa (raw, json)
Hash identifier: WxfBJQPALhxR47o19KuIz6roggTBLOXk5JUId/0KMIk=
Subject key identifier: 4D:DE:D9:86:09:FA:9F:41:CE:4B:B8:2E:31:B0:7D:AE:7C:DE:E1:A8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0469
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Td7Zhgn6n0HOS7guMbB9rnze4ag.roa
Signing time: Mon 12 May 2025 23:07:57 +0000
ROA not before: Mon 12 May 2025 23:07:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129 (0x469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 23:07:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4DDED98609FA9F41CE4BB82E31B07DAE7CDEE1A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:1b:35:54:2e:09:f0:13:18:24:99:1f:0c:
29:3f:01:9c:19:bc:ba:19:a6:4c:94:a1:94:e0:ce:
3e:b5:01:01:0b:81:ff:1d:99:2b:a3:dd:98:28:42:
94:a1:bd:c1:c4:23:bf:90:5e:c7:a5:ec:91:8e:4a:
9f:97:2d:d3:4a:0d:22:0b:40:a4:08:df:6f:92:65:
ba:db:9e:c5:29:ff:2f:bc:3d:30:31:dc:1e:f9:f5:
75:fe:de:9e:e7:ed:a6:09:b4:c3:e0:e8:ba:9b:86:
35:9a:74:95:2f:08:62:b3:f4:33:89:1b:39:49:e8:
1e:aa:03:a6:2e:cb:7c:4a:15:60:d9:e7:46:0e:8e:
53:45:9b:9a:6c:4d:25:c0:7c:41:8a:5b:81:3a:1d:
d5:65:e4:da:02:4b:d1:85:c2:55:01:0f:b5:8f:6f:
b8:0b:82:95:c6:dc:36:22:ae:c6:82:78:49:95:d3:
c4:75:a0:27:f9:b2:62:88:e3:07:5f:08:30:0a:d4:
ea:08:0d:bf:c9:0f:e8:58:8c:71:dd:5d:21:49:e0:
d1:14:26:15:48:d0:cb:b1:75:15:c0:54:33:65:f8:
37:40:d1:f1:f3:2b:e3:f7:66:4c:a1:e4:09:23:e7:
46:dd:fb:28:05:83:50:1e:e8:33:cf:50:a3:5f:2d:
de:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DE:D9:86:09:FA:9F:41:CE:4B:B8:2E:31:B0:7D:AE:7C:DE:E1:A8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Td7Zhgn6n0HOS7guMbB9rnze4ag.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:18:a7:ca:5f:36:c5:40:39:12:79:00:53:10:13:8f:53:12:
89:18:7b:47:a9:3c:5c:c9:44:60:c3:55:b8:5d:1d:3a:9d:d2:
a2:fa:12:c5:b7:37:f1:09:b7:cb:da:e6:9f:a3:ac:fd:37:e8:
8d:f9:d4:6c:06:4e:92:4d:69:c9:f9:4a:86:93:a2:66:69:55:
20:48:7a:59:e3:0a:81:f1:de:94:70:f6:6d:91:05:51:b5:5d:
18:08:35:c8:32:42:f0:40:f6:d2:0e:86:22:4b:96:5b:b5:fa:
fd:3f:0f:b2:7f:c2:30:a2:85:b6:30:9c:13:b0:cc:a7:8e:c7:
a9:15:40:b6:a5:39:d2:f8:d1:14:67:bb:2e:a3:c7:a2:43:a8:
b1:cd:18:07:77:a8:5c:40:61:21:bb:50:79:8d:5b:2b:29:e7:
3b:11:31:52:cd:f1:b2:19:5d:1d:8a:47:15:91:e9:f0:29:dc:
14:87:4e:2c:6e:0a:27:be:85:3f:70:29:da:ee:22:cd:87:13:
ff:b6:9e:fd:40:20:7a:c5:99:bd:34:d3:46:96:66:2d:de:cb:
56:20:65:92:d9:13:0a:ae:c3:1f:3c:0a:1d:e9:9a:ac:96:40:
6a:21:ee:01:d4:cf:76:9a:92:98:68:80:f1:8e:e7:43:46:86:
a1:0a:ac:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:38:45 2025 by rpki-client