Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/IXmHSsswp9s00CCU3Yuz0lle5hU.roa
File: IXmHSsswp9s00CCU3Yuz0lle5hU.roa (raw, json)
Hash identifier: maZiCLd/aEOJCNudoL9xO76Ea2ziJpjWlfQep6B2ed0=
Subject key identifier: 21:79:87:4A:CB:30:A7:DB:34:D0:20:94:DD:8B:B3:D2:59:5E:E6:15
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 20D9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IXmHSsswp9s00CCU3Yuz0lle5hU.roa
Signing time: Fri 20 Jun 2025 08:41:39 +0000
ROA not before: Fri 20 Jun 2025 08:41:39 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8409 (0x20d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 08:41:39 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2179874ACB30A7DB34D02094DD8BB3D2595EE615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f5:c8:36:c2:07:4d:ce:c4:cb:bf:88:84:f9:
bc:d1:20:35:5d:68:13:09:76:ab:c3:39:27:64:03:
03:53:8f:44:6b:00:16:5a:89:e0:6c:63:7f:b4:60:
0e:77:89:d4:74:55:4a:dc:29:a8:7f:df:58:26:4c:
4a:92:fd:43:ba:93:5b:5b:18:94:f1:40:4c:83:15:
eb:75:1e:ad:60:1a:95:b0:86:5f:e2:32:d7:f7:c3:
55:b3:19:34:3f:c8:f6:8e:37:f1:98:14:4c:83:17:
a4:05:27:b6:88:e4:64:df:d0:2b:21:06:28:45:fe:
9c:11:9c:f0:cc:1d:87:1b:42:54:df:a9:b6:c8:70:
be:53:89:5e:61:3c:43:e2:2e:08:b5:dc:ff:ad:5c:
b1:f9:f4:95:85:45:1e:d4:1f:13:fd:00:31:8b:39:
f7:f1:88:8c:41:e4:11:3d:47:03:3a:9e:d7:ab:2f:
97:38:ac:b6:f2:d1:78:be:89:93:ab:b3:fb:ff:40:
29:20:40:66:0e:59:92:dd:42:05:b1:f1:62:52:53:
4c:ec:12:fa:b3:64:9e:7f:8c:e3:bf:a4:19:4e:8b:
ea:49:db:4d:87:32:51:a7:64:c2:a1:3f:46:3a:3f:
c6:cf:26:88:40:aa:74:21:4a:d0:06:12:71:60:80:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:79:87:4A:CB:30:A7:DB:34:D0:20:94:DD:8B:B3:D2:59:5E:E6:15
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IXmHSsswp9s00CCU3Yuz0lle5hU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:50:50:c0:1b:81:da:64:0a:6f:89:25:72:1f:3e:78:d3:44:
21:ce:f9:30:50:db:2a:ff:4b:55:16:98:2c:cf:54:73:ef:ac:
9f:d9:15:14:55:9e:41:16:15:cf:12:e7:1f:a8:82:2e:f9:23:
2e:f3:ef:03:a5:09:e7:e4:57:a8:bb:88:df:84:f8:6e:f8:05:
09:02:8c:2f:cb:92:09:23:b3:8d:cd:24:ca:bb:82:74:ae:5e:
3d:f9:d8:01:4b:c3:db:06:86:59:fd:a9:9d:b1:b4:84:d8:41:
97:63:09:b5:79:7a:0d:3f:64:fb:e1:fb:3a:96:25:4f:c5:b0:
cc:be:ec:50:1c:b5:11:9d:53:a6:95:4a:eb:0b:1e:93:93:52:
78:80:fd:be:bf:11:c7:ca:2a:57:0f:3c:e6:75:c5:e7:a0:0c:
bc:4f:f7:1d:a0:f4:77:fd:99:ce:8b:1a:1b:76:cc:12:9f:d5:
39:1c:0c:44:31:43:3e:c6:e1:30:24:af:e6:fd:f4:bc:a5:b3:
d4:05:2e:f7:f3:78:65:f0:94:dc:c5:1b:5b:cb:ba:83:c2:e9:
77:4b:55:33:d3:28:fb:e9:2d:a1:25:db:0d:ea:07:8a:37:04:
6f:18:b7:73:f3:a3:2b:7b:4d:5b:84:81:61:31:bd:47:d5:f0:
c8:ae:50:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:08:55 2025 by rpki-client