Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/HeA8k0B0mtPHYbvpb1O2cYoFTFY.roa
File: HeA8k0B0mtPHYbvpb1O2cYoFTFY.roa (raw, json)
Hash identifier: AE9iaFUDXlfRTpKOANvUZNuyg1afdjEwJ6DmmotDl20=
Subject key identifier: 1D:E0:3C:93:40:74:9A:D3:C7:61:BB:E9:6F:53:B6:71:8A:05:4C:56
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0345
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HeA8k0B0mtPHYbvpb1O2cYoFTFY.roa
Signing time: Sun 11 May 2025 10:37:51 +0000
ROA not before: Sun 11 May 2025 10:37:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 837 (0x345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 10:37:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1DE03C9340749AD3C761BBE96F53B6718A054C56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:ae:89:3f:9c:a8:0d:47:bd:de:88:b7:90:
75:47:14:48:09:bd:61:30:04:36:b3:ca:4d:83:68:
a8:03:60:27:45:d8:d3:29:99:f7:d5:b8:be:f5:6a:
2e:70:02:14:65:9f:83:4b:ed:7f:5b:89:df:08:0e:
5b:33:b3:dd:95:ef:6f:c6:d3:d4:37:dc:7c:37:ea:
11:6c:06:91:a1:64:58:bb:52:bf:4b:31:30:e7:b8:
03:54:8e:25:e7:89:41:40:69:2b:21:cb:6e:29:4f:
78:45:e6:af:77:35:78:00:6b:89:37:4c:05:22:11:
b8:a2:c8:86:ec:39:40:d9:78:bf:3c:5d:c8:2e:7c:
3c:31:df:7e:20:e5:5f:4a:8e:7c:ee:61:2c:b7:87:
62:61:1c:eb:37:e9:09:31:d2:29:5b:3a:72:eb:8b:
21:6a:01:09:22:a3:ec:46:1c:de:76:7e:2e:3a:63:
26:44:b0:c3:61:9a:a9:a4:1b:67:a7:c0:f9:22:6e:
83:bd:72:de:37:dc:9c:22:cf:ca:0a:5e:cd:af:76:
68:8b:0b:94:93:a7:0e:92:34:73:42:85:1f:ab:d9:
81:ca:a7:fd:3a:ff:19:64:c3:fc:43:3d:d4:2d:5d:
5c:26:dd:55:7e:2b:21:80:43:d5:9e:a7:88:35:90:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E0:3C:93:40:74:9A:D3:C7:61:BB:E9:6F:53:B6:71:8A:05:4C:56
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HeA8k0B0mtPHYbvpb1O2cYoFTFY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
35:8d:76:fc:d7:5e:8f:0e:8b:6f:ed:71:b4:c2:39:21:d7:07:
ff:f5:b9:10:a4:55:65:1a:80:53:dd:57:c6:50:00:17:11:75:
4d:7a:e4:69:f5:ad:fc:35:b0:41:90:4a:8a:66:c0:ec:a6:78:
13:4e:8a:73:34:5e:e4:c0:4c:4b:ff:6e:8d:90:da:66:24:12:
e8:0a:c2:bc:91:8a:c4:8e:a8:a4:5f:ed:05:6d:6c:7e:32:39:
56:8c:d1:76:3d:ca:04:18:c7:22:e7:ed:8f:35:0e:24:e9:1a:
08:25:7f:92:98:a7:2c:c4:18:78:d6:8d:71:a0:db:93:4a:39:
d2:16:18:7f:3c:25:c9:4a:4f:d3:7c:d7:4c:1d:fb:d7:2f:7f:
7a:25:68:b9:75:72:53:67:5e:0c:8b:a9:16:6e:51:15:33:04:
dd:1f:fd:74:5d:4b:93:e9:49:28:61:a3:f1:c3:fd:10:8b:8b:
6b:d1:b6:65:e4:43:04:45:18:54:02:1f:97:2b:19:f7:72:cb:
dd:5b:d8:13:48:c3:73:87:70:74:53:f8:d0:eb:75:2c:55:cb:
39:bb:0a:56:4b:6f:3c:21:1a:88:1f:e9:eb:3d:3f:48:ba:45:
5f:18:9a:56:5a:77:50:72:7f:b7:b3:7c:53:de:18:48:fc:47:
59:0c:89:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:56:59 2025 by rpki-client