Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/HE7iAVJN2DPKIi7tT_W9dfpNjKE.roa
File: HE7iAVJN2DPKIi7tT_W9dfpNjKE.roa (raw, json)
Hash identifier: NtxdNvLYHGMJmbUJpmCg+V9EnPJmUkL0rvAsHyfl82g=
Subject key identifier: 1C:4E:E2:01:52:4D:D8:33:CA:22:2E:ED:4F:F5:BD:75:FA:4D:8C:A1
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: E1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HE7iAVJN2DPKIi7tT_W9dfpNjKE.roa
Signing time: Thu 08 May 2025 06:09:22 +0000
ROA not before: Thu 08 May 2025 06:09:22 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 06:09:22 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1C4EE201524DD833CA222EED4FF5BD75FA4D8CA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:96:8e:1c:14:48:28:a9:57:95:04:e0:5e:
39:60:0d:7c:3f:b3:07:a0:5b:f8:e1:b7:58:af:67:
17:76:fc:7c:e1:df:ed:82:c9:e5:05:15:cf:3a:9c:
10:f4:24:1e:16:ba:9d:b6:69:7f:74:bf:cf:ec:f1:
d9:9c:3a:d2:1f:06:81:c0:67:99:57:b0:a3:0a:cb:
06:e8:6d:5f:d9:9d:69:f1:aa:7a:4f:a2:c7:6d:3d:
21:ca:0c:56:c5:1a:61:e7:fb:f3:0f:2b:a7:80:d1:
e2:11:e3:c2:13:fa:c3:99:b3:20:4f:0c:ad:09:e7:
15:b7:a3:28:ba:9c:a3:f1:61:2c:35:98:bf:d5:9e:
0d:fe:4c:dd:10:7a:9d:c8:69:69:c3:ae:4e:0f:3a:
54:62:35:8b:f7:f2:2e:d9:46:bb:da:19:62:f9:fa:
c6:d2:ee:cb:b7:b8:63:a0:de:a3:5e:53:ff:31:32:
97:a3:3d:1f:82:11:cf:49:65:92:64:c8:f7:09:c8:
fe:19:3e:3b:59:0f:32:c5:45:3d:5a:1b:a3:09:af:
f6:6d:1a:92:86:70:a9:f5:b9:b1:c1:15:c5:25:63:
26:2e:be:a9:6b:3a:ed:d8:86:52:3b:a5:0a:29:10:
e5:f7:65:02:1a:d9:f2:6f:0a:d8:02:8c:48:44:59:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4E:E2:01:52:4D:D8:33:CA:22:2E:ED:4F:F5:BD:75:FA:4D:8C:A1
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HE7iAVJN2DPKIi7tT_W9dfpNjKE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:0f:39:17:9c:76:8d:0f:57:ae:db:ae:d2:5d:a5:47:08:be:
2a:0b:e0:fc:25:b3:ac:da:e5:e7:b3:41:bb:c9:0e:b4:31:45:
0a:c8:6b:99:17:22:97:f7:5f:90:6f:e1:88:1f:a4:67:97:a7:
5c:07:cc:3c:43:39:29:e8:f3:fe:33:5c:e2:5e:ff:ed:4e:ae:
27:1a:94:16:31:85:66:bc:fc:74:bc:14:a2:ac:d7:3a:93:a2:
78:57:25:d7:d5:a3:eb:27:4d:e8:e9:05:b9:8b:c9:9c:ce:b6:
88:9d:00:e2:c1:6e:30:6f:4e:50:d0:ce:6c:1e:c7:a4:7b:25:
9a:af:f6:01:91:fd:85:45:7a:28:f4:4e:f2:65:e1:f5:18:ff:
ab:7d:70:45:25:82:81:39:99:21:6a:da:b7:25:b6:49:40:04:
37:7c:cf:14:a5:5a:e4:e0:f3:b4:f6:db:52:19:45:b4:3a:b7:
b4:fc:f4:2b:ed:0d:27:0e:2d:d0:f9:26:79:13:31:74:df:1f:
60:56:c7:80:d9:0b:78:8b:61:e5:d5:9c:95:3a:81:10:42:74:
3b:25:74:89:3e:1b:4c:55:35:e2:87:d3:bd:9e:3e:64:b6:51:
71:76:ab:2f:ac:2f:b2:d9:12:8a:68:c9:fb:ba:02:ff:f1:a2:
eb:c3:70:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:10:31 2025 by rpki-client