Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Hz1KfWAeMsMzJLCFWSW2NQXPgx0.roa
File: Hz1KfWAeMsMzJLCFWSW2NQXPgx0.roa (raw, json)
Hash identifier: +bQCHkXSYBgUc406ma+KY1mVOlheaOvwKV7L2e7DjOI=
Subject key identifier: 1F:3D:4A:7D:60:1E:32:C3:33:24:B0:85:59:25:B6:35:05:CF:83:1D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1B51
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Hz1KfWAeMsMzJLCFWSW2NQXPgx0.roa
Signing time: Thu 12 Jun 2025 12:10:40 +0000
ROA not before: Thu 12 Jun 2025 12:10:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6993 (0x1b51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 12:10:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1F3D4A7D601E32C33324B0855925B63505CF831D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:08:ab:46:80:ba:57:e7:92:1c:03:49:8a:2e:
3a:ed:f3:83:d6:53:a6:74:20:bd:ff:7c:af:7b:ee:
b0:c8:49:69:6a:99:50:00:3e:c1:3b:da:57:3d:34:
a4:40:ae:59:b4:eb:10:9f:e4:51:b0:8f:0f:69:0a:
fc:18:a7:62:9e:19:c0:97:9d:d4:26:2d:0e:b8:65:
45:b1:c6:a2:4f:34:e7:6a:d0:6d:01:bf:6d:e3:62:
7f:0e:6e:91:60:af:02:0d:7f:84:6f:ed:c7:21:83:
c0:d5:8b:b6:17:7d:26:b5:1f:2a:f3:3a:7d:7c:e0:
1a:c0:ff:6f:02:62:fc:45:29:e7:3f:c2:96:42:99:
4e:d4:31:06:18:1f:33:9d:07:ad:57:db:6b:9f:0c:
0c:ec:71:ba:11:73:a3:f8:59:46:73:3b:c1:f1:de:
33:53:db:d3:59:97:5f:63:ab:89:4e:1c:bf:64:97:
41:07:bf:2f:9e:98:60:1e:09:d3:45:e0:8a:8f:d1:
8a:08:98:42:0b:5e:f6:fd:ee:81:e0:28:de:84:67:
dd:8c:e0:aa:a6:80:f7:64:70:36:cd:d1:0b:28:6b:
1e:97:cf:a6:96:c5:c2:41:79:24:fa:46:8b:bc:ce:
e5:de:eb:7a:c9:30:b3:ec:1f:92:31:13:39:2e:14:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3D:4A:7D:60:1E:32:C3:33:24:B0:85:59:25:B6:35:05:CF:83:1D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Hz1KfWAeMsMzJLCFWSW2NQXPgx0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:d4:e5:30:6a:50:f2:6b:1a:83:09:31:7d:86:87:bd:14:54:
e6:fd:45:31:92:61:a9:71:64:53:6e:22:77:e7:ed:38:a1:b4:
a7:10:1d:a1:39:dc:24:de:49:c0:e5:14:67:b1:d9:fa:df:7f:
8b:6e:08:4f:59:90:0a:6d:c8:72:a9:5e:11:56:f0:bd:44:ae:
8d:5c:71:58:2b:ed:74:b6:37:45:ac:bd:b6:88:21:ef:45:a9:
59:56:4e:8a:29:40:18:fb:2d:f5:0d:ac:9c:55:27:0a:c2:d2:
2c:97:99:27:15:a5:26:12:18:f6:de:99:45:61:0f:51:33:80:
6f:06:7c:b3:8b:4a:1f:74:b6:e2:5f:0f:35:f6:14:95:7d:b0:
d3:9d:c9:8b:87:64:ec:7e:2e:df:29:ff:c1:b1:7a:c8:e5:5b:
d2:36:29:89:43:6b:bd:09:6a:b9:31:8a:07:74:da:59:4a:77:
48:10:80:c5:7f:4f:d0:60:c5:2d:7e:a6:39:2d:f9:8d:54:d5:
e9:78:72:48:a8:cb:61:88:68:7b:c9:76:96:2c:c0:2c:bf:32:
1d:be:70:7c:00:14:24:09:b9:30:83:a1:44:cd:88:30:df:8e:
4c:d5:c8:d2:e9:8c:4e:08:11:d3:45:8b:56:1f:ef:19:73:30:
b9:9e:16:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:26:23 2025 by rpki-client