Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/uNPIt2TXS0hUgIaDM-A51LcGA9k.roa
File: uNPIt2TXS0hUgIaDM-A51LcGA9k.roa (raw, json)
Hash identifier: 1tvgp4F/BMyLu4837c/81wWJVPDTx1CG3oBT8jqyLjY=
Subject key identifier: B8:D3:C8:B7:64:D7:4B:48:54:80:86:83:33:E0:39:D4:B7:06:03:D9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 05B5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uNPIt2TXS0hUgIaDM-A51LcGA9k.roa
Signing time: Wed 14 May 2025 16:38:03 +0000
ROA not before: Wed 14 May 2025 16:38:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1461 (0x5b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 16:38:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B8D3C8B764D74B485480868333E039D4B70603D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1b:0c:56:f9:9f:fd:18:8b:90:7e:16:64:4c:
e0:f9:98:ec:89:ab:31:65:fa:73:75:43:f2:9d:b5:
7e:f3:07:c7:55:cf:68:73:27:ee:08:d7:62:7f:a5:
2c:64:f1:a9:75:6d:87:b3:5a:bf:7a:b6:99:ef:d2:
bb:77:f3:f0:fb:a0:e7:e9:00:23:5b:9b:ce:cc:e8:
fe:0d:9a:ef:bb:d3:d2:e6:e4:09:0c:1f:ea:c8:81:
ce:7f:cc:8f:43:ee:09:fe:81:e2:07:5f:e1:91:71:
76:6c:8e:f1:a8:35:54:e7:8f:d6:cb:45:52:70:87:
94:44:a5:48:d4:90:a2:b1:65:98:93:7b:51:df:4f:
c3:b9:91:f7:f2:75:cb:9a:39:b2:da:da:d6:3c:c1:
8c:ca:ef:f5:a8:49:99:4d:94:f7:ea:aa:19:11:9b:
88:ae:31:98:3a:af:c1:3c:38:da:9a:42:d5:2a:74:
02:6d:49:32:67:3d:0f:9b:2d:4b:a9:64:38:5b:5d:
05:cf:22:ab:25:ee:db:54:f7:94:e7:bb:9a:d4:bb:
5a:93:25:65:94:0f:99:7b:ba:d6:9e:ce:d2:f8:af:
c6:4e:d8:66:ad:3c:6a:ec:a9:35:74:46:ac:21:14:
46:33:b9:e2:0c:fb:3b:a0:96:1e:c4:f0:06:c4:1a:
b2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D3:C8:B7:64:D7:4B:48:54:80:86:83:33:E0:39:D4:B7:06:03:D9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uNPIt2TXS0hUgIaDM-A51LcGA9k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:62:1e:f0:e7:29:ff:c7:59:dd:02:11:db:d8:a8:9e:82:5b:
cc:df:42:a9:fc:80:e6:97:a7:5f:6f:31:59:65:25:ab:b1:2b:
96:ac:af:3b:eb:50:a9:b5:e8:e0:96:3f:22:46:8f:87:ed:48:
6a:3c:ee:dd:9c:af:5e:3b:4d:d2:be:3b:ee:7a:01:ef:9f:44:
39:2a:a0:90:f1:b4:8a:53:ce:5b:dc:bd:79:7a:2a:5f:00:60:
d9:c2:e0:6b:27:d1:d8:cc:76:56:96:56:9e:7e:d8:11:f3:be:
5e:0c:a0:d8:66:00:97:a4:71:2d:fe:a9:6c:f5:49:2c:3f:e5:
70:c8:ee:81:de:5e:60:6f:31:66:72:8f:ee:87:d0:61:57:56:
2f:4a:eb:20:1e:a5:3f:e3:86:6c:1c:d0:2a:78:71:e2:b1:bc:
7b:22:c9:73:fc:69:a5:da:bd:a4:08:c3:6c:e8:ea:f0:28:8b:
7d:b5:d7:ba:f8:08:1d:c9:20:02:1f:ca:7b:ab:7a:44:bc:f3:
c8:f6:76:26:7e:c0:ff:36:a6:8b:ba:c9:96:1b:a2:a6:48:e7:
e4:74:49:60:d3:6a:2c:4e:ac:1d:05:bd:be:d8:4d:cf:c4:20:
80:38:18:54:f9:b7:5a:33:3b:4c:81:20:61:d6:d3:56:2e:dc:
12:95:6e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:25:53 2025 by rpki-client