Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/uwdddcNgjtbf1n17ne7BbJpBsQE.roa
File: uwdddcNgjtbf1n17ne7BbJpBsQE.roa (raw, json)
Hash identifier: m2KGUcxQlsWa7MGNftrd8Q+0edPuwnR+QlIMk1bU+as=
Subject key identifier: BB:07:5D:75:C3:60:8E:D6:DF:D6:7D:7B:9D:EE:C1:6C:9A:41:B1:01
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0711
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uwdddcNgjtbf1n17ne7BbJpBsQE.roa
Signing time: Fri 16 May 2025 12:08:07 +0000
ROA not before: Fri 16 May 2025 12:08:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1809 (0x711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 12:08:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BB075D75C3608ED6DFD67D7B9DEEC16C9A41B101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:e7:9f:ed:bf:06:38:52:38:74:cc:88:3d:
81:7d:d0:dd:92:95:42:68:91:36:df:21:9f:9d:c5:
b1:42:cc:fc:99:10:b0:04:39:34:8c:e6:f0:c8:87:
70:30:6a:5c:21:0f:f5:bd:f7:9f:d9:9f:88:7e:0c:
b4:ea:dc:e7:cf:5b:62:79:ad:38:dc:bb:fb:31:6a:
07:50:d7:e6:a9:ba:d7:49:e4:a5:fe:26:13:a3:bf:
dc:72:3e:21:52:5c:d9:22:05:ba:80:0d:32:7e:f2:
1f:41:52:fe:51:37:ea:27:9f:94:5a:b5:a9:95:ec:
23:a8:86:9a:58:90:49:0c:bc:2e:b4:5a:8b:3d:44:
7f:8c:60:bf:b1:46:8f:b8:67:8f:5d:ea:d8:3e:4d:
67:4a:a8:e0:16:b4:2b:5d:6b:e6:c3:f3:aa:35:69:
30:73:6e:2b:a2:ee:d9:9e:bd:31:c1:bb:7b:8b:a4:
ad:0f:ec:9d:9d:49:cf:e3:05:fc:9f:a3:68:05:fc:
47:b6:bb:e0:ff:f8:f6:13:ee:6e:4f:02:b6:b3:46:
11:83:59:10:92:3c:30:67:2e:32:b8:09:13:86:8d:
7d:0a:59:db:45:e3:7f:f8:52:6d:76:df:75:ba:60:
bd:47:3f:c6:eb:c1:f9:e3:75:10:24:f0:2f:9c:99:
80:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:07:5D:75:C3:60:8E:D6:DF:D6:7D:7B:9D:EE:C1:6C:9A:41:B1:01
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uwdddcNgjtbf1n17ne7BbJpBsQE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:d3:7f:5f:a1:07:0e:83:89:fa:59:0e:6f:db:1d:fe:fb:c9:
ba:89:4c:f3:f5:37:2f:4d:78:ae:f2:0b:31:94:df:29:cc:99:
75:9f:80:31:e6:1b:11:a5:f4:cd:45:41:7a:84:03:a5:82:b2:
8a:34:8e:19:b9:a7:5c:38:69:d3:d6:e3:e1:a2:5d:5a:80:bc:
eb:96:d5:85:ae:cd:0b:6d:cc:65:5b:d9:d9:48:b8:20:f3:b8:
65:97:cc:b9:d2:a1:70:c7:8b:04:ad:e4:6f:4d:74:8e:22:b2:
98:12:dd:3e:1e:b9:e4:30:9e:de:b1:a2:6f:e9:00:11:b8:c3:
23:db:22:f8:6d:67:9b:3e:d6:a4:fa:a2:03:36:40:55:29:8e:
0e:8a:cd:15:2e:d6:c6:69:bc:03:b2:5a:f2:07:50:19:6e:2e:
14:69:fe:63:02:af:d8:90:36:b4:31:0d:f6:c1:32:d6:74:c2:
b1:d5:83:53:4e:38:82:7c:6e:31:54:3d:79:54:f7:cf:fd:ca:
63:33:3d:94:88:b1:f1:e1:38:ab:2f:92:90:a6:64:f1:9d:15:
b3:d0:d1:49:f0:9d:c9:44:1d:27:2c:75:2a:b5:3e:eb:2c:c7:
41:ad:4e:43:57:8a:4a:ef:29:11:22:ab:c3:b8:d6:31:19:ee:
2a:e4:3b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 00:13:33 2025 by rpki-client