Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/h39fWaivhV4hh5hCJgD0Z6UGu4Y.roa
File: h39fWaivhV4hh5hCJgD0Z6UGu4Y.roa (raw, json)
Hash identifier: fBITr8Uq5gFGIA1wZDyiHcx4clinSC8QbJQA4a3JCZw=
Subject key identifier: 87:7F:5F:59:A8:AF:85:5E:21:87:98:42:26:00:F4:67:A5:06:BB:86
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B35
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/h39fWaivhV4hh5hCJgD0Z6UGu4Y.roa
Signing time: Thu 22 May 2025 00:38:34 +0000
ROA not before: Thu 22 May 2025 00:38:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2869 (0xb35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 00:38:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=877F5F59A8AF855E218798422600F467A506BB86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:b3:39:dc:a2:1e:a4:33:dd:ea:de:e9:36:
95:83:af:04:8a:3d:6c:47:55:53:fb:ff:ad:77:d6:
b5:10:f6:e4:b8:25:f6:d3:16:43:ab:5f:79:0a:f9:
63:6d:0f:7d:33:a1:dc:6b:be:d1:17:65:a3:a9:e4:
c3:96:d0:97:58:08:81:41:d0:5b:43:77:f7:79:4e:
de:20:9c:b0:12:45:08:b5:c0:d5:d0:5b:83:8e:cc:
dd:34:0f:02:53:a3:03:88:2a:69:ce:8d:76:f3:cb:
4f:9f:a7:07:9f:6b:7b:27:29:b7:94:25:c1:16:9f:
b2:78:f9:e9:a3:f9:99:09:48:42:a0:91:28:60:a6:
0a:7d:2b:fc:39:ec:b9:82:50:0e:d0:4d:af:ba:23:
37:5d:01:4b:67:f1:35:e2:2c:a5:37:40:91:4e:c7:
b2:cb:15:8b:d7:ee:db:b9:6c:f2:3f:64:e7:8a:4c:
5a:1e:ff:14:7b:95:17:de:37:87:f3:46:d6:a7:34:
62:57:1c:4b:31:1b:35:60:52:b9:bc:fd:ee:c3:01:
4f:cd:ac:1a:a2:7c:98:cb:ab:91:1e:22:58:21:38:
01:61:1c:ff:64:8b:c4:88:57:65:f0:a7:97:ac:2b:
0d:c9:a7:aa:4f:98:a2:d2:1f:ae:75:50:41:8d:40:
51:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7F:5F:59:A8:AF:85:5E:21:87:98:42:26:00:F4:67:A5:06:BB:86
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/h39fWaivhV4hh5hCJgD0Z6UGu4Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:00:af:dd:46:63:b1:8d:50:cf:37:11:f1:e8:43:87:55:30:
be:08:53:3e:0d:07:c2:48:b7:48:b7:02:4b:a1:ec:f2:d3:f9:
7b:05:e7:e7:cc:46:95:92:fb:09:3c:65:58:5e:af:17:58:b0:
ef:1a:ad:24:5d:fa:a5:d8:6b:fd:80:6a:15:90:06:12:c2:11:
5b:ca:18:b7:b2:53:5e:53:65:d4:fb:00:64:31:ab:3b:6c:8e:
d3:a2:9e:32:2d:0f:64:5c:38:2a:e5:7b:17:f5:d3:24:4c:86:
c8:27:43:f7:4f:86:0b:ea:4b:3d:26:f0:ae:a1:fb:54:70:25:
21:59:0d:98:af:d7:7d:de:29:49:6f:19:c7:86:94:e0:19:f8:
3a:62:8d:84:13:93:e9:7c:3c:fb:f6:6d:48:c4:78:9e:6d:02:
d7:5b:53:5c:d4:ce:4e:d6:5f:39:3d:b8:e7:04:1c:2b:31:cf:
de:23:04:d0:4c:be:da:ba:fd:e3:69:10:34:99:96:0f:fc:84:
a0:f3:ee:aa:6e:96:2a:06:4d:d0:38:f4:4a:20:03:c1:d5:72:
c3:d5:67:a7:5a:fe:a6:30:0b:76:48:36:28:cd:7b:fd:ea:19:
43:88:41:19:cf:12:d1:6c:1f:82:9a:5e:da:d5:8b:ed:a3:d6:
cd:89:0a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 16:48:06 2025 by rpki-client