Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/BAn4rTm_hEFYHbPeQ-9N2YBA6As.roa
File: BAn4rTm_hEFYHbPeQ-9N2YBA6As.roa (raw, json)
Hash identifier: GK+k2TPI/ELmq9A0rePJV7+onqYBsl9c4+Red1X8BYU=
Subject key identifier: 04:09:F8:AD:39:BF:84:41:58:1D:B3:DE:43:EF:4D:D9:80:40:E8:0B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1EAD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/BAn4rTm_hEFYHbPeQ-9N2YBA6As.roa
Signing time: Mon 16 Jun 2025 23:40:02 +0000
ROA not before: Mon 16 Jun 2025 23:40:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7853 (0x1ead)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 23:40:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0409F8AD39BF8441581DB3DE43EF4DD98040E80B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:e5:31:5a:42:bb:d7:bf:4f:51:54:55:3f:
18:c2:84:d7:49:4c:db:4a:ed:af:5e:4c:3a:f9:f7:
6c:09:ed:7a:c9:da:c5:d3:2e:17:ec:1b:3a:f9:ed:
d4:4d:3d:08:ac:b2:60:5e:0f:34:a7:bb:b3:fe:6d:
ea:6b:fd:26:20:c5:e5:67:35:f0:d8:e0:2a:c5:39:
6e:c9:04:53:c5:db:15:67:94:db:26:f5:e8:5d:72:
2e:37:f3:5f:af:27:dc:b8:a4:b2:b6:01:6b:e8:d7:
bf:0e:59:be:18:d2:a3:bc:f4:ed:2c:00:81:25:3f:
01:a7:44:14:40:e3:67:71:d9:19:a3:a5:f2:5f:98:
e0:1b:08:6c:eb:85:95:f3:5c:6b:a3:04:21:6a:51:
dc:9d:1c:fb:24:18:aa:82:62:76:d7:1d:bd:c4:cd:
9f:fd:b2:d7:72:18:9a:f4:3e:08:e8:77:52:00:7e:
d1:b3:5b:c0:0f:67:69:2f:7f:68:c0:5e:f1:66:5f:
94:56:e4:90:d6:c1:df:04:f3:f1:87:7f:fc:35:b4:
9f:20:56:43:05:47:82:13:eb:72:8f:be:a9:35:5f:
c2:97:cc:ce:d2:29:80:f7:0f:a7:f2:df:47:b8:b0:
6b:e1:88:73:d5:9e:46:41:5d:82:e2:ac:5b:20:12:
01:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:09:F8:AD:39:BF:84:41:58:1D:B3:DE:43:EF:4D:D9:80:40:E8:0B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/BAn4rTm_hEFYHbPeQ-9N2YBA6As.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:c3:7f:1e:50:c3:01:65:03:54:9d:92:02:fe:07:1f:c2:0d:
86:be:ad:50:9d:d4:c1:eb:e0:5d:b4:e1:33:61:a3:2c:75:15:
60:5b:f0:4b:f7:e2:35:f9:85:ae:31:14:88:05:0a:f0:76:95:
56:a9:02:a0:1c:34:c6:2d:ec:81:a0:e1:e2:d5:a5:9d:f7:bc:
3d:f4:71:93:69:41:57:5a:3d:72:65:ce:fd:60:7f:64:c0:13:
31:19:af:ff:e4:ac:bd:75:2d:21:7a:ea:60:d2:c2:97:2b:c2:
09:88:dc:eb:ed:fa:82:bb:6b:4b:69:99:82:e0:eb:04:89:94:
f0:46:15:0f:c1:c6:cc:18:99:54:7c:e2:5b:05:2c:2d:6a:02:
f4:62:3b:b5:38:bd:8e:a3:26:e2:c7:0a:0a:98:c7:bc:d6:3e:
5e:a0:75:4c:52:2b:6e:f4:05:70:36:1d:49:dd:04:c4:2c:d2:
87:1b:0d:29:b7:1d:ca:b6:df:7b:4d:b5:b0:a4:58:5c:12:9b:
ac:77:f4:52:98:9e:2d:da:41:4f:42:b2:f7:c6:20:a7:60:d9:
65:d9:e4:6d:76:3f:c1:15:c2:fe:ac:90:38:aa:4a:bf:2f:2f:
bf:5e:c8:85:a6:0f:b9:b7:dc:85:74:b2:2a:dc:e4:4f:37:77:
0e:97:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:05:43 2025 by rpki-client