Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Fi9G440ls_bjHtciRxxxaTyP4Fw.roa
File: Fi9G440ls_bjHtciRxxxaTyP4Fw.roa (raw, json)
Hash identifier: oOzPh5G0aYdXkzaftQp0dpjwJJmOO10k7a/LWeEl53c=
Subject key identifier: 16:2F:46:E3:8D:25:B3:F6:E3:1E:D7:22:47:1C:71:69:3C:8F:E0:5C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2081
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Fi9G440ls_bjHtciRxxxaTyP4Fw.roa
Signing time: Thu 19 Jun 2025 17:15:36 +0000
ROA not before: Thu 19 Jun 2025 17:15:36 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8321 (0x2081)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 17:15:36 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=162F46E38D25B3F6E31ED722471C71693C8FE05C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:70:43:8c:58:85:81:78:0d:ee:75:14:8d:
11:a5:06:d6:de:55:f4:d9:7c:c0:38:85:d4:88:75:
19:df:43:7e:1b:b0:d8:c4:04:9f:8c:8a:92:8e:81:
e6:6d:63:f3:64:e0:53:37:d9:95:0a:7e:df:bf:16:
78:62:77:25:1c:7f:d0:55:df:c5:22:81:b6:66:80:
09:49:c6:c2:59:1a:b3:f9:f0:54:ea:40:f1:2f:4d:
48:f0:21:19:cf:54:64:5c:a6:f1:79:38:e3:61:a5:
d3:5a:27:a7:9c:d8:9f:5f:0e:6f:5e:65:e5:46:a1:
c5:fd:70:25:c9:a5:26:be:5d:4b:26:22:43:70:57:
6d:52:75:d5:db:40:e9:de:33:25:14:3e:b0:47:69:
df:29:4a:06:90:a1:27:83:d6:9d:30:5d:2c:6f:f2:
76:05:70:6c:82:0a:1b:c1:03:94:74:49:db:d9:fd:
6e:0c:20:82:5d:2f:93:74:17:f1:da:90:d6:86:5a:
2f:70:36:e7:0b:76:f2:fc:f6:00:84:b2:57:14:64:
27:e6:f0:7b:83:c2:2c:f8:dd:0e:8d:4a:56:de:1b:
5b:98:fd:78:0a:1c:b3:62:82:3d:63:27:60:6d:85:
45:71:2c:f1:ea:cd:75:14:c1:ea:f9:28:ab:16:5f:
40:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2F:46:E3:8D:25:B3:F6:E3:1E:D7:22:47:1C:71:69:3C:8F:E0:5C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Fi9G440ls_bjHtciRxxxaTyP4Fw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:43:41:bf:30:8c:1e:7c:38:b9:fa:d1:c2:d4:91:61:69:b0:
1b:93:87:77:b1:a6:f8:01:a6:6b:63:35:78:7d:fe:e1:e6:41:
44:ae:98:ee:e0:d7:0c:4c:99:73:16:cb:ec:ac:9c:2d:64:e2:
4e:24:77:cd:6b:e2:45:fd:04:56:bf:7d:da:40:82:81:01:9b:
29:14:62:4c:1e:14:7c:88:9b:fa:a0:5c:44:f9:03:9c:f5:74:
01:53:a6:4d:8d:61:42:99:ee:95:ce:4d:d6:cb:27:50:51:3d:
b5:b8:b4:96:3c:de:86:48:ce:e0:08:ee:12:5b:6f:4b:bc:5b:
29:15:5c:14:27:3c:91:17:e2:cf:e1:9a:e4:c2:0b:3a:b5:b5:
63:9f:66:2f:f8:11:bc:58:5c:9d:66:12:9a:b5:8a:69:1b:e9:
6f:e9:ec:65:e3:ed:c9:31:6d:f5:3c:7a:61:16:7a:60:03:98:
fc:d4:4d:30:84:96:d5:73:b1:16:a3:ce:89:53:31:10:49:36:
45:8d:0a:5a:85:dc:a2:05:bf:04:1a:79:92:bc:0b:2f:9c:51:
5f:12:62:8c:44:61:3f:d4:d2:68:92:5b:7f:23:5e:64:bf:38:
69:d8:90:79:a5:68:ea:67:26:92:27:9c:9a:2e:26:08:44:32:
32:b7:02:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:21:12 2025 by rpki-client