Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/HDXzkKWnH4sKB5MGGHXeu0Ag2hg.roa
File: HDXzkKWnH4sKB5MGGHXeu0Ag2hg.roa (raw, json)
Hash identifier: uzQzpfuBkppZJsJvsekGVVJ9NzFxvPoFhuhaN0/Vy+M=
Subject key identifier: 1C:35:F3:90:A5:A7:1F:8B:0A:07:93:06:18:75:DE:BB:40:20:DA:18
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0EF9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HDXzkKWnH4sKB5MGGHXeu0Ag2hg.roa
Signing time: Tue 27 May 2025 01:08:46 +0000
ROA not before: Tue 27 May 2025 01:08:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3833 (0xef9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 27 01:08:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1C35F390A5A71F8B0A0793061875DEBB4020DA18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:f0:eb:a6:b5:88:b0:72:e2:34:c2:1b:da:
97:2c:68:45:15:74:12:55:9f:0b:b4:04:d4:54:71:
39:ad:35:7d:69:2d:22:ef:60:cc:03:79:9e:f8:42:
bb:f4:90:85:cd:a3:b9:e6:d1:c2:8c:68:9f:db:93:
0d:1c:1c:a7:a2:93:b0:a0:48:59:bd:b5:4d:bf:a7:
15:71:12:56:08:1c:80:89:58:ac:6a:c4:20:6f:18:
ed:66:fd:84:67:b5:36:1d:b0:da:6c:f1:d0:22:e3:
62:db:77:e1:18:3c:49:58:03:af:75:c0:86:9c:ec:
dd:ce:64:69:ec:35:ad:2b:16:02:7a:32:d5:84:03:
84:3a:2f:df:77:4d:da:97:65:47:c6:48:74:63:0d:
95:cd:48:21:5a:0e:8e:30:49:c6:2b:2b:35:0b:2b:
75:04:56:77:4f:4f:50:2c:b6:d8:3e:3b:39:b3:1e:
8d:f3:e2:5a:81:d8:5e:d8:11:00:cd:e1:ad:8f:cc:
d0:47:67:58:be:73:99:f6:f1:04:4c:83:64:8d:0f:
fa:fe:f7:ae:24:83:d4:70:6f:8e:5f:d9:21:1e:21:
90:77:95:58:ef:c4:2c:e9:d5:66:92:83:73:5c:47:
91:f8:79:e7:27:f0:7a:86:72:3b:10:c5:b6:de:90:
f1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:35:F3:90:A5:A7:1F:8B:0A:07:93:06:18:75:DE:BB:40:20:DA:18
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HDXzkKWnH4sKB5MGGHXeu0Ag2hg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:20:88:9f:73:aa:ea:0a:be:7e:97:4d:9d:7d:7c:2a:9a:30:
f1:39:70:6f:19:b7:ff:10:e2:15:23:ca:07:ba:44:93:ad:48:
dd:58:76:71:ba:b2:f1:6d:3c:14:f7:f8:7a:9c:d5:44:dd:e5:
c1:fa:65:a1:dc:f2:07:d1:aa:08:05:d8:61:49:05:ae:ef:ff:
57:18:9f:9b:c3:09:16:08:8a:cb:00:d7:4d:17:bd:bc:8c:b2:
26:f3:97:d0:af:03:36:f4:13:2a:06:2d:f0:74:f0:8f:5b:dc:
a1:94:f1:72:8b:ba:c3:76:3e:22:b3:75:53:a2:d2:35:3b:62:
4f:1a:5f:f4:f9:f0:bd:ea:4b:d0:dd:f7:f2:b8:bf:73:aa:7d:
3e:bc:71:be:ff:6d:a6:00:56:fc:2a:3b:c0:d1:30:42:2d:5f:
3d:bd:66:67:dd:bf:8e:fd:7d:a4:8a:74:27:47:15:1b:ed:27:
8b:99:a6:4c:a1:b6:51:30:a0:d6:7f:31:04:7b:6d:45:ed:c8:
31:ce:ca:5c:42:56:a3:6a:15:32:3e:aa:e7:83:d1:9e:c2:91:
3c:2d:24:21:9b:be:ee:82:89:de:c3:66:80:da:c6:29:65:10:
4b:a6:01:63:6f:16:13:2e:fe:32:e8:4f:33:2e:5b:de:66:13:
bb:45:9a:8c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDvkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1Mjcw
MTA4NDZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDFDMzVGMzkwQTVBNzFG
OEIwQTA3OTMwNjE4NzVERUJCNDAyMERBMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFnfDrprWIsHLiNMIb2pcsaEUVdBJVnwu0BNRUcTmtNX1pLSLv
YMwDeZ74Qrv0kIXNo7nm0cKMaJ/bkw0cHKeik7CgSFm9tU2/pxVxElYIHICJWKxq
xCBvGO1m/YRntTYdsNps8dAi42Lbd+EYPElYA691wIac7N3OZGnsNa0rFgJ6MtWE
A4Q6L993TdqXZUfGSHRjDZXNSCFaDo4wScYrKzULK3UEVndPT1Asttg+OzmzHo3z
4lqB2F7YEQDN4a2PzNBHZ1i+c5n28QRMg2SND/r+964kg9Rwb45f2SEeIZB3lVjv
xCzp1WaSg3NcR5H4eecn8HqGcjsQxbbekPEhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUHDXzkKWnH4sKB5MGGHXeu0Ag2hgwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9IRFh6a0tXbkg0c0tCNU1H
R0hYZXUwQWcyaGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAEYgiJ9zquoKvn6XTZ19fCqaMPE5cG8Zt/8Q
4hUjyge6RJOtSN1YdnG6svFtPBT3+Hqc1UTd5cH6ZaHc8gfRqggF2GFJBa7v/1cY
n5vDCRYIissA100XvbyMsibzl9CvAzb0EyoGLfB08I9b3KGU8XKLusN2PiKzdVOi
0jU7Yk8aX/T58L3qS9Dd9/K4v3OqfT68cb7/baYAVvwqO8DRMEItXz29Zmfdv479
faSKdCdHFRvtJ4uZpkyhtlEwoNZ/MQR7bUXtyDHOylxCVqNqFTI+queD0Z7CkTwt
JCGbvu6Cid7DZoDaxillEEumAWNvFhMu/jLoTzMuW95mE7tFmow=
-----END CERTIFICATE-----
Generated at Fri Jun 20 08:23:16 2025 by rpki-client