Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/HbyA5Y_wZJS-Yzibm3f3y505d_g.roa
File: HbyA5Y_wZJS-Yzibm3f3y505d_g.roa (raw, json)
Hash identifier: dqea3Lxl/nOGkwYVk0xG13hH5ztDzK47QELbAu3Pdz0=
Subject key identifier: 1D:BC:80:E5:8F:F0:64:94:BE:63:38:9B:9B:77:F7:CB:9D:39:77:F8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2265
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HbyA5Y_wZJS-Yzibm3f3y505d_g.roa
Signing time: Sun 22 Jun 2025 10:11:50 +0000
ROA not before: Sun 22 Jun 2025 10:11:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8805 (0x2265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 22 10:11:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1DBC80E58FF06494BE63389B9B77F7CB9D3977F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8c:d8:e5:18:b2:1c:3a:2c:19:12:6a:10:14:
3f:1b:ae:49:d5:4e:02:4b:54:7e:f2:f1:0c:b7:cf:
1b:54:bc:f7:1b:39:db:3c:00:0b:ee:35:c6:a7:f7:
65:a9:38:1c:2e:42:8a:48:50:41:49:e2:5a:62:0e:
e8:9c:d8:f1:05:3e:bc:79:95:f5:6e:9e:d1:e2:ab:
f7:31:7b:af:ba:1f:7a:6b:0c:4e:f0:0f:82:73:2e:
02:b2:12:ac:d8:1f:84:0b:ba:80:24:16:3c:25:f0:
d0:0f:8a:08:76:31:6d:64:2f:9b:ca:45:99:f0:6c:
cd:4f:98:02:bf:cc:42:8a:22:41:50:32:b4:75:40:
dc:69:f3:5c:a6:26:a7:a2:32:e3:f1:65:35:f2:25:
62:22:d8:21:d4:a0:87:7b:78:45:cc:ae:62:1d:f5:
68:5b:99:63:e2:a1:32:65:56:1f:ef:1f:3c:05:28:
f5:fc:7f:4b:02:23:6f:08:12:e1:5e:13:29:09:aa:
94:1b:76:71:05:f6:fe:16:d1:f6:3b:3a:05:91:f1:
b0:fc:92:f1:9f:a0:59:1c:7c:9b:93:8e:a7:c9:0f:
87:b7:4a:03:68:ad:12:27:7a:c6:4d:5e:dc:4d:da:
dd:24:96:2f:dd:53:d4:35:4e:45:12:ef:27:5e:77:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BC:80:E5:8F:F0:64:94:BE:63:38:9B:9B:77:F7:CB:9D:39:77:F8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HbyA5Y_wZJS-Yzibm3f3y505d_g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:c7:9e:f7:63:a2:c2:45:2a:d6:8d:ae:ce:f0:4f:0d:0a:37:
bb:eb:b8:58:69:6f:19:5b:29:14:62:b3:00:d1:46:8f:54:61:
38:3b:4a:92:65:56:1e:25:cc:90:d6:bc:9e:3f:de:c6:06:2c:
a4:03:31:21:24:bf:67:d2:8b:06:f9:16:0b:77:8c:ad:67:50:
a9:1a:85:38:99:8b:1b:53:28:fc:3d:3f:4b:1a:23:c0:a4:cc:
2f:c4:76:14:70:8d:11:69:06:f8:94:19:fd:d0:2d:9d:25:df:
10:b5:09:0d:fc:6e:32:e6:22:c3:02:ce:20:cd:6e:20:db:fc:
a7:cb:ff:db:21:2a:d2:c9:41:07:46:a5:56:cf:b1:30:99:9d:
d6:5f:98:8e:f9:22:2f:d4:cd:e2:3a:f6:78:5f:55:18:9d:ad:
89:fa:83:9f:6a:56:f8:52:ef:a2:c6:fc:ca:41:e1:0f:71:40:
f3:54:90:51:13:51:b1:8f:8d:6c:15:7f:ec:09:4f:91:4b:de:
89:97:ec:fc:70:df:c0:53:45:08:90:2a:26:bb:a5:96:4a:1c:
40:94:97:b9:89:be:9d:8c:34:cf:e2:fa:6d:ea:2f:d1:b5:e9:
4e:d8:c0:4f:de:0b:a9:11:17:ec:c6:fe:82:17:f6:9d:22:85:
3f:09:96:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:14:24 2025 by rpki-client