Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/THag7T0zwr0-d_oeTMiAYWCbFxM.roa
File: THag7T0zwr0-d_oeTMiAYWCbFxM.roa (raw, json)
Hash identifier: Ip5NNMJdod8xc3ogFwezrpkUJkpdz8rTP1o50MvbsXo=
Subject key identifier: 4C:76:A0:ED:3D:33:C2:BD:3E:77:FA:1E:4C:C8:80:61:60:9B:17:13
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 08F9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/THag7T0zwr0-d_oeTMiAYWCbFxM.roa
Signing time: Mon 19 May 2025 01:08:08 +0000
ROA not before: Mon 19 May 2025 01:08:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2297 (0x8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 01:08:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4C76A0ED3D33C2BD3E77FA1E4CC88061609B1713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:98:cf:6a:27:2c:a8:6f:8f:9d:05:ee:3c:
f4:3b:a8:f3:7a:5b:20:c4:17:7b:5c:5a:64:52:f4:
43:54:f8:09:8f:67:33:a5:e4:18:b2:8f:32:f1:f1:
e3:5d:91:a5:4c:28:1b:67:71:c0:ff:1c:7a:37:f3:
96:eb:48:26:e1:80:b3:b4:f4:0a:04:9c:65:ae:b5:
61:b8:7a:c1:56:80:92:b5:14:1a:ab:3c:4c:a8:4b:
59:fe:c0:0a:ab:77:54:62:ac:d9:90:5a:1e:ca:d8:
6e:0d:d4:ce:d0:a4:8b:d2:fc:81:be:7a:a0:e7:c7:
f2:eb:19:26:c9:bd:f4:24:2d:2d:a0:02:a4:4f:9a:
28:10:cd:65:4e:fd:99:67:71:f8:dd:7e:8b:93:a7:
24:e3:ff:b4:c8:51:c7:15:19:f0:58:95:02:75:95:
36:ff:0d:a4:a1:9f:09:4d:42:12:ed:e4:1e:e9:09:
f2:7b:fa:f2:85:a8:b8:47:ff:b6:f9:b2:62:bf:7b:
3b:1a:77:0f:8f:82:28:b4:45:11:c0:4e:ac:93:93:
7f:c7:80:5f:b2:49:ec:f5:03:07:53:ec:f3:ce:13:
3d:51:3e:27:99:7e:fc:c0:c0:ff:05:ea:63:ec:40:
b5:0f:27:87:39:a4:9e:d9:c9:dd:6c:0b:72:58:68:
a8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:76:A0:ED:3D:33:C2:BD:3E:77:FA:1E:4C:C8:80:61:60:9B:17:13
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/THag7T0zwr0-d_oeTMiAYWCbFxM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:91:78:2e:1d:9a:42:45:9a:2c:4b:88:0b:4c:9f:26:4d:f5:
55:07:ec:6b:d6:fa:a1:c2:bf:8a:9f:32:3c:45:f6:83:f3:7a:
a6:79:09:77:36:35:d2:3b:b6:7d:55:02:e5:ec:cc:d2:78:9b:
ef:4e:cb:c0:67:ce:59:9e:1c:f1:7f:df:26:5c:a7:24:cb:a6:
6a:72:5d:57:33:36:b1:66:51:d1:fb:1b:1e:97:4d:e5:3a:4e:
67:35:c6:a9:84:fd:18:5c:b0:37:09:e8:fd:5e:51:40:b6:18:
cb:78:51:13:20:15:5f:31:e6:4b:b2:c2:a7:34:fc:38:94:65:
6f:c2:5f:78:15:c0:9e:58:cc:c1:25:f6:cb:1c:ef:d2:19:2c:
7b:4a:70:e5:86:f6:23:2f:cc:f2:52:0a:e8:ca:be:e6:d0:b9:
87:1f:79:be:1f:4d:4d:db:eb:8d:2b:86:92:3b:b9:2b:01:1e:
ff:7a:b9:19:ee:2f:b5:87:b6:41:15:d8:a4:9f:d5:ff:61:b8:
35:be:fb:0f:59:4f:bb:82:d6:5b:6b:4c:31:80:94:0d:e2:e6:
bc:69:74:db:7f:c4:27:65:2a:73:9c:5b:96:a9:f8:25:fd:4d:
7a:4a:ad:36:db:51:59:9b:a3:3e:80:94:b5:74:47:d5:aa:c2:
e0:22:52:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 17:53:15 2025 by rpki-client