Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/H1Aei0i1liBS7FjEynMi1oPx-VU.roa
File: H1Aei0i1liBS7FjEynMi1oPx-VU.roa (raw, json)
Hash identifier: gMlyiBUpphI9qRbR+Qm6ws1SsdmikeWuA0hkvazgU9U=
Subject key identifier: 1F:50:1E:8B:48:B5:96:20:52:EC:58:C4:CA:73:22:D6:83:F1:F9:55
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0BE9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/H1Aei0i1liBS7FjEynMi1oPx-VU.roa
Signing time: Thu 22 May 2025 23:09:06 +0000
ROA not before: Thu 22 May 2025 23:09:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3049 (0xbe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 23:09:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1F501E8B48B5962052EC58C4CA7322D683F1F955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:d1:f9:40:9c:12:5b:13:66:c8:a5:85:18:
9d:ab:d5:e0:b6:09:36:6e:34:8a:3e:50:4a:41:94:
95:d1:8d:33:84:92:f2:97:b9:c7:98:79:04:48:b4:
fc:7b:ab:1b:24:23:1d:82:ef:9f:1d:a3:b7:48:4f:
4e:29:28:55:d2:3f:41:02:cd:25:e1:6b:50:73:4b:
7d:e2:fb:dc:9f:b1:49:3c:74:3c:d9:8a:bd:ef:92:
51:d6:d0:b7:9f:85:2c:79:64:b5:5b:bf:2a:53:2e:
71:8a:c8:0c:d7:50:8b:9c:a8:66:49:ec:c5:83:21:
55:c4:c6:e0:fc:59:d1:77:89:e7:f1:7c:e8:44:e4:
ec:d5:d2:13:97:cb:d2:93:b6:ce:88:7e:97:35:5f:
bf:76:58:22:cb:81:8f:90:fb:d3:4e:2f:1c:82:44:
56:35:00:1d:e8:b5:d5:1c:a4:cc:6d:64:ec:6e:e9:
5b:ae:e6:cf:9e:78:b5:2c:4f:fe:50:71:31:6c:23:
08:83:76:31:df:4c:8f:a3:9e:41:9f:18:6c:df:1d:
dd:fd:70:00:af:45:e6:a3:10:61:d5:b5:54:1c:21:
49:6e:93:b8:a4:2a:e4:24:28:c5:c8:e6:44:91:18:
31:ce:a2:1a:0c:e9:7b:9c:0a:a8:1e:8d:33:1a:6a:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:50:1E:8B:48:B5:96:20:52:EC:58:C4:CA:73:22:D6:83:F1:F9:55
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/H1Aei0i1liBS7FjEynMi1oPx-VU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:3f:0e:ee:49:0d:ca:3c:b1:cc:ca:ab:55:0e:ca:a7:a7:13:
4c:14:4d:55:2e:cd:50:96:8f:9c:8c:52:cf:b6:6f:bc:ea:5d:
e9:a3:51:e8:5d:56:03:49:9e:2c:07:63:a7:d2:77:0d:25:00:
d2:5c:3e:de:5f:37:6a:32:cc:6b:2a:44:67:ae:0c:12:26:4c:
63:16:85:4e:1d:70:de:2e:b4:34:63:3c:40:03:a0:15:3e:8e:
66:68:4a:ae:3f:8b:d7:88:bd:1d:41:22:fd:09:11:78:52:87:
d0:cf:ab:a3:61:d6:24:54:c5:c7:66:4f:3a:f5:70:20:81:cb:
c0:e1:fc:6a:80:fc:15:36:6c:eb:c9:67:ce:24:10:cf:23:91:
7e:be:68:6a:4d:2a:1e:a0:fc:ea:21:21:d6:e8:c3:3d:0f:41:
92:be:42:64:0e:49:e7:af:d0:63:3d:cf:fa:d7:1e:89:82:fc:
cf:a1:e9:88:c9:54:21:6f:30:1e:33:02:ed:4b:b3:f8:42:16:
29:de:f1:1a:7c:1e:e4:b1:3c:01:dd:5e:b9:e4:33:99:00:41:
b7:0d:58:89:04:47:a8:96:d0:c1:52:64:9c:eb:a3:25:ac:f9:
e2:08:b4:79:65:cc:9d:b0:35:e3:25:3d:ac:da:21:56:e9:47:
a2:cd:53:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:29:48 2025 by rpki-client