Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/1FhhntILNiMZ-kpQ7tdPL6Okjko.roa
File: 1FhhntILNiMZ-kpQ7tdPL6Okjko.roa (raw, json)
Hash identifier: 4Tdh+/gZurVkpQW2YNzC1/ryYyr824mkj9TR7KZPCBs=
Subject key identifier: D4:58:61:9E:D2:0B:36:23:19:FA:4A:50:EE:D7:4F:2F:A3:A4:8E:4A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1AC5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1FhhntILNiMZ-kpQ7tdPL6Okjko.roa
Signing time: Wed 11 Jun 2025 18:39:47 +0000
ROA not before: Wed 11 Jun 2025 18:39:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6853 (0x1ac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 18:39:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D458619ED20B362319FA4A50EED74F2FA3A48E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:40:e8:a9:cc:70:43:34:2b:92:32:9f:c6:
1f:be:97:1d:ef:af:a1:60:7b:85:63:49:6c:95:ae:
99:75:8a:c5:14:06:f3:05:f4:2e:15:73:82:5d:83:
82:3e:29:ae:53:1d:d3:dc:04:5c:f3:8b:80:c1:d0:
b8:94:0d:8b:b3:7d:46:ec:a4:fe:2c:63:4b:ef:61:
15:0f:b8:9c:09:15:53:1c:1e:2d:10:5a:f4:17:55:
93:de:07:df:35:51:ef:1f:9f:06:52:54:9e:da:df:
9a:e3:d4:f9:b7:d6:13:f2:0b:f5:e8:05:bb:6b:cc:
82:02:3a:7e:85:04:c5:58:b8:b6:e0:68:e5:c5:96:
38:22:39:4c:e0:00:3e:1a:3f:83:56:10:87:19:0d:
a7:fc:6b:9f:aa:86:92:3a:0c:8b:ea:8f:6f:75:c1:
94:08:4e:69:60:ff:73:19:9c:22:e4:7f:c3:2c:df:
0d:cc:a4:8f:73:a5:53:1f:00:f3:a6:a8:f8:69:cd:
f6:db:2d:a2:47:c1:08:5b:dc:f4:94:d6:69:dd:18:
fd:30:45:f8:23:19:5e:38:3e:4c:fc:ee:b6:eb:3c:
14:21:c0:7c:9e:d4:97:71:1f:4a:bd:b6:1e:73:66:
32:29:06:c2:9b:e4:55:ce:38:e7:3e:03:08:5b:30:
b6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:58:61:9E:D2:0B:36:23:19:FA:4A:50:EE:D7:4F:2F:A3:A4:8E:4A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1FhhntILNiMZ-kpQ7tdPL6Okjko.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:cc:8c:24:e0:5a:4d:09:e8:89:da:3d:d6:56:5a:ca:48:79:
c2:7a:b8:e4:ae:2a:1d:28:d5:51:f2:c7:cf:cd:a2:c1:10:23:
90:e1:eb:22:24:b9:75:69:40:95:00:c2:20:89:06:9e:e3:a9:
0d:2c:4c:1c:f6:94:8f:e3:27:72:91:51:cd:bb:ec:9c:e8:51:
25:a7:b2:09:5c:c3:bb:5c:e2:ce:95:62:7d:c1:94:b4:7c:04:
a4:54:6a:8b:8f:51:21:cc:59:c6:e4:0b:31:fd:87:28:d9:9c:
84:1f:d5:77:37:14:02:43:23:dd:6f:56:e9:8e:ea:c1:f0:cb:
e6:84:78:78:72:a5:cc:37:7a:34:5b:60:cb:bd:d5:50:9f:a1:
16:65:a2:0f:2c:ab:29:01:44:a9:56:12:ee:8b:92:05:ce:95:
71:cc:5b:d9:a8:99:db:8f:b7:9d:fe:80:5b:7a:57:0c:83:4a:
8b:cf:79:ec:a0:1e:bb:04:89:0f:a6:6a:cc:e4:08:d6:47:3e:
4a:2b:62:50:eb:5e:ac:59:00:25:5c:66:1e:85:ec:36:b5:6b:
16:88:8a:3a:23:13:85:cb:a3:94:0e:b9:03:76:9b:0d:83:c0:
cb:21:b1:a5:63:b9:4b:03:99:39:4c:45:69:ff:42:56:ea:a6:
16:ac:cc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:01:06 2025 by rpki-client