Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/zH1Fm643sLp2Al6owwTdJtQBzDY.roa
File: zH1Fm643sLp2Al6owwTdJtQBzDY.roa (raw, json)
Hash identifier: hBzGHDVgLdABxMswBkOU6Em1AzFjlx9K0PwHHKNc1OY=
Subject key identifier: CC:7D:45:9B:AE:37:B0:BA:76:02:5E:A8:C3:04:DD:26:D4:01:CC:36
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 056D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/zH1Fm643sLp2Al6owwTdJtQBzDY.roa
Signing time: Wed 14 May 2025 07:38:01 +0000
ROA not before: Wed 14 May 2025 07:38:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1389 (0x56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 07:38:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CC7D459BAE37B0BA76025EA8C304DD26D401CC36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:06:85:cb:cd:df:8e:7b:e1:6e:72:97:3d:c4:
cd:47:20:d1:70:79:1a:96:6f:e8:bf:23:1f:b8:3e:
7d:2a:9e:33:b8:31:2d:a4:3c:33:c5:9a:e1:8d:80:
4b:24:cd:6f:1a:98:4e:b3:ad:b8:69:67:cf:9e:50:
8c:26:80:6f:12:92:28:19:d4:a2:68:1f:ec:2b:dc:
c0:a7:ad:f7:d0:cb:5e:de:bd:d1:62:84:30:a0:52:
17:2e:3f:ff:05:62:75:64:50:2e:3f:25:d6:a3:14:
d7:24:e5:30:1a:ec:1d:99:02:dd:13:f2:14:a2:b6:
b5:03:42:2e:ee:95:27:11:8b:7d:dd:91:82:48:98:
4f:1e:a1:a1:49:ec:cd:ee:90:87:5a:5e:62:f2:f6:
0d:e3:4a:1c:6a:46:f4:f5:0d:2a:98:54:b6:df:43:
8d:f2:df:68:9b:ad:1a:15:f4:cd:9b:91:5c:80:1e:
24:72:45:41:6d:b5:b0:9d:24:b2:58:c9:44:b3:f6:
92:9b:6a:d1:a3:d4:3d:8e:76:d8:a8:63:52:88:79:
44:8c:c0:cf:b9:e5:28:f1:73:a0:f9:cb:53:70:b0:
00:e8:8b:8a:df:e3:58:ef:be:49:ad:8d:08:04:a2:
e7:14:33:78:e2:90:df:1e:60:61:ac:be:e3:42:28:
01:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7D:45:9B:AE:37:B0:BA:76:02:5E:A8:C3:04:DD:26:D4:01:CC:36
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/zH1Fm643sLp2Al6owwTdJtQBzDY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:d1:9c:d7:7a:71:cf:4a:08:2f:f6:ee:5b:27:b6:06:47:fb:
b7:47:18:12:a0:ac:d0:15:a0:78:2b:af:0d:47:75:8c:3c:2c:
5f:03:34:59:fe:04:8f:19:6c:9a:69:2b:93:d3:b5:27:b1:e3:
4a:87:51:72:6c:3a:f0:5f:9c:48:8c:e7:9e:a1:7e:e3:6d:a9:
fe:b9:39:bf:ba:26:71:24:3e:9c:28:85:5b:e4:2f:db:78:a2:
f3:d2:be:a4:ea:de:0b:59:d7:09:3e:e1:87:39:52:83:ed:0a:
a2:2a:6b:a9:a5:36:cf:24:6b:25:3e:2d:df:53:fd:ec:80:26:
07:dd:42:17:1a:1c:12:ac:e1:f4:da:9b:a4:83:c6:aa:03:2d:
9a:e5:d6:62:47:ab:0f:c9:50:dc:c7:d6:bc:95:69:a8:4f:b2:
a5:95:d0:14:98:be:1b:52:ea:d9:61:d9:e5:21:d2:0e:44:53:
54:fd:f5:0a:de:8a:6b:90:c4:4c:8a:15:8b:25:f1:1c:5b:0f:
a8:22:62:e6:26:5a:c8:17:00:7c:d5:d3:c2:9e:b9:47:dd:ee:
18:0a:05:4e:90:ef:f0:3b:fd:28:ce:52:1a:d8:ba:a1:0c:5d:
4c:2a:cf:ee:8c:5d:c4:cd:46:58:e0:10:86:3d:3a:c0:b8:e7:
82:09:bb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:31:05 2025 by rpki-client