Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/H3WRrhtGMVKQpl66dhAbaeNkHGo.roa
File: H3WRrhtGMVKQpl66dhAbaeNkHGo.roa (raw, json)
Hash identifier: pJWy4ddIIKmV8lYAeFp0IthAz3WhMaMx3rBc07CdQ7E=
Subject key identifier: 1F:75:91:AE:1B:46:31:52:90:A6:5E:BA:76:10:1B:69:E3:64:1C:6A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1639
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/H3WRrhtGMVKQpl66dhAbaeNkHGo.roa
Signing time: Thu 05 Jun 2025 17:09:25 +0000
ROA not before: Thu 05 Jun 2025 17:09:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5689 (0x1639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 17:09:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1F7591AE1B46315290A65EBA76101B69E3641C6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:2a:aa:e2:16:6a:43:a5:8d:3e:ac:ce:9d:
56:e5:04:47:31:78:18:5b:e5:f8:8e:6c:61:14:7c:
4c:c4:e5:3a:4d:5f:17:6f:bc:77:3f:4e:eb:ad:5a:
98:62:34:06:fa:84:aa:08:02:85:11:13:9a:5c:af:
62:4d:9d:f4:37:62:03:0d:c7:62:fe:94:ae:76:7c:
cf:42:d3:61:21:35:27:ed:90:6f:0d:4d:12:e3:bb:
34:6c:64:64:28:4a:79:9d:8e:e2:d4:a9:ed:93:6c:
bc:98:9a:d7:09:ae:7e:99:89:df:27:b7:52:ee:98:
de:50:d4:d3:7e:7c:7b:6f:d2:fa:55:3a:48:7f:4c:
9f:6c:8d:13:b4:9f:a3:cf:93:ab:de:e7:bd:38:54:
67:af:eb:d3:b8:eb:6b:d7:f2:dc:da:ec:6e:9b:da:
18:b7:32:91:6b:64:19:b2:b7:7f:40:54:5b:a4:70:
2b:d0:67:5e:f8:8b:9e:7e:9b:93:f3:ae:99:47:ac:
01:6c:5d:3a:58:f7:da:d0:5d:93:71:ad:d1:cc:0f:
d3:5d:48:eb:73:67:b9:64:c2:03:57:5f:b3:38:c0:
de:fa:34:51:4c:ac:4d:19:af:b5:4b:9d:53:1e:2c:
51:c7:2f:fb:65:63:e2:62:3e:e3:10:b9:b5:74:d6:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:75:91:AE:1B:46:31:52:90:A6:5E:BA:76:10:1B:69:E3:64:1C:6A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/H3WRrhtGMVKQpl66dhAbaeNkHGo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:34:a2:5d:64:2b:84:64:d9:aa:8f:d4:9a:71:c6:a3:bd:17:
d5:cd:fa:a5:c7:d9:9f:23:37:e7:5b:8a:0f:a7:f2:b9:ad:b5:
88:f3:d9:a1:ae:cf:05:94:af:26:71:ce:6c:15:ed:fa:c3:0d:
da:5f:9c:fb:de:da:32:94:d9:92:05:d6:20:dd:ab:8e:ea:43:
81:91:ff:9f:d1:7a:b9:e2:1e:64:7b:c3:49:75:44:0c:c5:58:
74:c7:47:a0:db:ec:42:26:93:76:38:44:7e:16:d9:5b:e9:9d:
fa:70:6a:0f:d0:11:80:55:bc:21:2e:5f:ba:c3:2b:fb:bb:ae:
22:33:59:15:89:6f:09:2b:98:09:3d:1b:9a:0a:28:af:57:fe:
d5:bc:c1:9b:cb:87:d9:bb:57:0d:44:6e:5a:6b:2c:3d:b8:be:
dd:c6:3f:5c:2a:0f:a3:7e:f1:60:8c:70:2b:a3:84:55:4d:d2:
7a:f4:91:ce:b5:47:15:44:4e:20:b8:29:70:09:04:1f:52:30:
19:8b:bd:d7:cf:45:7d:49:0c:44:93:96:76:e4:9d:28:bc:41:
90:85:b4:6c:44:bf:8d:5e:4f:d0:e2:c8:06:a1:ff:bd:a5:ac:
7d:1c:e8:51:7c:88:3a:48:ad:74:e7:bb:47:89:02:bd:95:d2:
16:ba:e7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 20:03:18 2025 by rpki-client