Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/HmJ-I-CXMvhllhc6OPIkG2ybQq8.roa
File: HmJ-I-CXMvhllhc6OPIkG2ybQq8.roa (raw, json)
Hash identifier: U3S33ZDUpTXNXUnO0FpcYEeD4agShocmvecIJcmJEJs=
Subject key identifier: 1E:62:7E:23:E0:97:32:F8:65:96:17:3A:38:F2:24:1B:6C:9B:42:AF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1535
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HmJ-I-CXMvhllhc6OPIkG2ybQq8.roa
Signing time: Wed 04 Jun 2025 08:39:24 +0000
ROA not before: Wed 04 Jun 2025 08:39:24 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5429 (0x1535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 08:39:24 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1E627E23E09732F86596173A38F2241B6C9B42AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:46:47:31:02:52:46:fe:53:47:e7:df:7a:
d8:34:4a:72:08:71:17:af:66:98:27:21:82:73:85:
57:a4:d2:4f:70:a4:5c:d9:e9:df:dc:02:91:77:b0:
3f:79:66:42:27:fc:63:11:1c:52:2f:bb:b8:21:ea:
53:04:4e:72:16:95:04:6e:67:2a:d5:d1:2e:4b:5a:
02:9f:d8:a3:b5:8d:97:8e:cd:09:d0:a8:ca:c6:5a:
1b:dc:42:e3:a0:5d:45:af:88:03:d7:5c:30:92:b9:
72:8e:63:13:43:ef:c6:8f:86:2b:36:f2:7f:03:ba:
99:39:d8:ca:d7:e5:bc:cf:1a:e6:f1:b6:17:13:54:
52:ce:83:78:d8:53:a6:a5:90:e8:03:8e:4a:f3:5f:
36:da:1b:93:fa:7c:5d:d1:06:c4:7b:01:0f:81:df:
f5:50:32:70:ed:5c:59:59:ec:9c:48:8b:b2:a5:43:
61:0d:95:7c:4f:3b:7e:08:12:6f:bf:c4:2d:98:0e:
fd:73:c3:f6:79:e4:b6:6c:c3:3b:09:b1:45:7d:c5:
69:2a:33:19:52:5d:5e:a2:47:9c:f7:bd:c4:e1:de:
90:ae:77:61:02:2c:6f:5e:0e:68:de:f9:fc:c4:7f:
54:44:3b:ab:49:c1:53:9f:3b:04:36:b3:d1:e0:31:
5b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:62:7E:23:E0:97:32:F8:65:96:17:3A:38:F2:24:1B:6C:9B:42:AF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HmJ-I-CXMvhllhc6OPIkG2ybQq8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:a3:ca:d5:33:69:61:89:c3:af:72:6f:3d:e0:81:1c:4f:0e:
45:33:33:89:19:04:ec:97:f8:3e:d5:03:96:c1:8a:9b:03:55:
64:f5:5d:bc:56:35:c6:74:78:a6:aa:3a:62:db:e0:81:ec:55:
ae:f9:0a:5b:19:ce:f5:07:bb:5a:79:a0:0b:68:c1:3c:e8:84:
fe:3d:66:c9:87:90:3a:77:95:c9:f1:e1:62:c6:2c:50:a1:da:
1b:ff:53:0d:d3:fe:81:31:78:7d:7a:df:37:8a:3d:9f:a2:86:
e8:c9:4d:c9:4d:6a:1c:bd:e4:a6:49:ee:df:7f:ca:5e:83:b6:
df:83:2b:dc:2a:79:e5:42:e6:a6:62:64:03:c4:0f:0c:17:f6:
b0:86:93:26:f2:c3:06:cd:2d:3f:19:86:08:22:2d:84:1b:23:
48:6d:b6:76:ed:ef:68:ce:66:a8:fd:73:02:3a:95:a9:92:af:
2c:bf:01:83:98:9b:45:0e:fe:f6:c6:b8:bd:f8:30:69:8f:55:
74:8a:1d:04:f3:21:1c:d2:cd:ee:d8:af:2f:67:4c:3e:a5:ce:
f5:e3:d7:d7:82:1c:1f:f7:b6:a7:c7:98:7f:c3:38:88:ce:45:
e8:ff:4a:0f:8d:d2:22:1d:d4:02:99:87:46:fe:4f:08:2c:19:
a9:a8:60:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 22:09:56 2025 by rpki-client