Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vXEr-y03zWI0gAMe5xhWvW4IJ44.roa
File: vXEr-y03zWI0gAMe5xhWvW4IJ44.roa (raw, json)
Hash identifier: vIGJNEMRiCHes+b5MFoca74gMOAWZx1lJaKaaiMEja8=
Subject key identifier: BD:71:2B:FB:2D:37:CD:62:34:80:03:1E:E7:18:56:BD:6E:08:27:8E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0505
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vXEr-y03zWI0gAMe5xhWvW4IJ44.roa
Signing time: Tue 13 May 2025 18:37:58 +0000
ROA not before: Tue 13 May 2025 18:37:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1285 (0x505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 18:37:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BD712BFB2D37CD623480031EE71856BD6E08278E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:49:5b:be:a5:ca:e4:83:ad:41:fd:a2:62:
8c:85:7e:0e:26:b9:07:b1:85:23:0d:ce:ef:54:1d:
6e:78:92:83:bc:1b:0f:95:7a:e7:10:93:f3:bc:72:
fd:da:38:9c:f1:46:22:af:e8:9a:39:b1:e1:f5:a9:
75:25:4a:ce:20:d6:74:24:1e:56:2c:52:d3:2f:ae:
40:12:f5:85:6d:b9:cc:2f:ee:3d:dd:61:b1:f8:70:
97:bc:6f:5c:63:63:55:28:ae:fc:cf:e8:36:69:bb:
87:c1:b7:f1:49:da:7f:66:d7:d7:61:90:1a:7e:63:
9e:af:51:fa:b9:d6:e3:4c:10:4c:98:ee:58:59:c4:
91:d6:3f:ea:6c:be:92:c5:1e:8b:cc:0f:d6:5b:6f:
b0:7c:ef:27:c9:da:51:20:43:42:ca:ca:11:fa:d5:
90:73:ab:1a:d3:e5:25:38:ab:c5:08:72:a3:6e:25:
ac:e8:df:fc:76:7a:24:fb:04:13:a7:2e:be:d3:2b:
46:21:3e:d5:20:ce:e4:a2:4c:84:00:9b:10:6e:69:
ff:66:9b:bd:7b:c5:5e:78:2f:75:32:6e:08:c2:09:
2c:27:bf:43:fc:ce:d2:a1:ec:ea:6f:9b:63:0f:72:
d7:f1:95:87:56:1c:1a:86:38:8b:bc:c6:44:44:b1:
ae:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:71:2B:FB:2D:37:CD:62:34:80:03:1E:E7:18:56:BD:6E:08:27:8E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vXEr-y03zWI0gAMe5xhWvW4IJ44.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:c0:e6:46:96:8b:22:c1:c3:96:e9:35:cd:9e:6d:4f:83:f0:
c9:af:5b:29:b2:fe:a3:e4:4f:b5:e8:41:b5:03:21:10:6e:48:
c1:27:51:3b:69:2f:04:95:9f:30:be:d9:b7:a0:5a:af:c3:35:
14:be:ac:c1:e0:c1:ef:63:a6:26:71:0b:67:eb:1c:2e:d5:a1:
e5:50:9e:85:98:cf:43:b6:3d:ae:08:5e:51:c8:66:c9:b8:6c:
00:ec:4d:b9:bb:40:a6:de:10:8a:a8:84:61:97:6e:68:40:01:
12:b7:77:ee:f0:0a:8c:39:b3:6c:d3:8f:36:e8:39:e7:90:77:
78:eb:bd:84:ea:79:fc:a9:54:25:f8:21:88:57:9f:80:37:df:
02:f5:d0:d8:0c:1f:9a:57:b1:78:b9:b0:32:75:d0:43:f8:0d:
b1:14:6f:25:f8:85:41:cb:fe:cd:8a:ae:f9:25:ee:d0:35:a7:
78:73:25:2e:7d:f8:c6:9e:6b:0b:62:f8:08:48:9c:28:14:c9:
dc:60:27:11:2c:60:e5:5a:05:69:cb:0f:17:64:41:f0:44:4b:
1f:e9:bd:b0:e3:d0:fa:71:c6:89:3f:b2:bc:0b:05:25:f6:1c:
c0:f7:40:9a:7e:1b:b6:80:0f:ad:09:1f:04:07:c2:cb:cf:67:
20:d7:bf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:46:00 2025 by rpki-client