Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/hX2j_ohslSPnJHaCHZfEiloiHbc.roa
File: hX2j_ohslSPnJHaCHZfEiloiHbc.roa (raw, json)
Hash identifier: Z/KJ6xGELSe7ACPKntzAPldmOyeZKrYJtfFWofjQKvA=
Subject key identifier: 85:7D:A3:FE:88:6C:95:23:E7:24:76:82:1D:97:C4:8A:5A:22:1D:B7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1719
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/hX2j_ohslSPnJHaCHZfEiloiHbc.roa
Signing time: Fri 06 Jun 2025 21:09:27 +0000
ROA not before: Fri 06 Jun 2025 21:09:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5913 (0x1719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 6 21:09:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=857DA3FE886C9523E72476821D97C48A5A221DB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:5d:bb:9d:65:d6:b9:07:97:f6:38:74:da:f1:
0a:64:c8:e7:98:59:61:15:17:2c:97:57:06:1a:b7:
a7:6b:10:db:28:98:f4:57:dd:95:2d:32:ed:6f:e2:
39:e0:40:93:cc:35:33:3f:e5:6b:b6:94:87:ea:dc:
58:6b:b4:0b:15:26:b3:73:2e:81:8e:a7:bf:36:61:
4f:08:1c:a6:ea:b3:3b:4c:82:6f:a4:8a:55:95:03:
12:67:59:41:9a:66:e3:e5:2d:24:19:72:ec:c3:1e:
c2:d4:a0:c0:c4:68:ee:e2:de:b6:d6:65:b2:87:a6:
57:0c:b7:fe:93:9d:67:62:f1:f7:26:72:74:f4:2a:
c8:18:8e:e4:fe:fe:1a:ba:ba:fb:dc:50:22:9b:47:
a8:88:61:f0:50:0b:f3:6e:7f:9d:81:c6:ec:7d:ff:
f9:fd:f7:83:5a:c5:da:0f:c7:f9:8c:5e:27:59:89:
ac:d2:36:de:7f:23:d2:f4:54:66:87:a4:7d:d9:3b:
2d:87:00:8e:66:aa:51:21:c8:4f:4c:ec:dd:dc:6d:
47:cb:0b:8e:85:ff:21:7d:9e:ac:92:2e:26:1d:09:
22:5b:6c:0b:38:59:ac:9f:25:8c:7f:57:ed:6a:38:
cd:f2:76:c3:ac:8e:2f:48:0a:28:2e:22:1d:bb:63:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7D:A3:FE:88:6C:95:23:E7:24:76:82:1D:97:C4:8A:5A:22:1D:B7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/hX2j_ohslSPnJHaCHZfEiloiHbc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:31:aa:e7:06:2f:2a:57:d9:96:47:0e:f8:bf:2c:2a:76:23:
47:a3:bd:83:d1:3f:df:87:be:e2:63:ef:74:c5:09:ba:ea:d4:
ff:15:6b:3e:cf:6f:1e:70:d4:10:e4:67:26:e3:77:0d:ad:3d:
f1:ae:3d:7f:04:1d:7d:83:07:64:18:9b:86:f0:cf:bd:a7:7c:
e3:cc:47:2b:49:55:11:9a:df:27:7a:6c:44:e1:30:c2:66:38:
9c:0a:4b:51:e6:84:cb:cc:5b:d9:37:bd:fe:6b:ba:cd:be:4c:
af:bc:c7:81:d9:3c:f4:1e:85:75:4e:ad:68:0e:be:a7:6e:86:
15:aa:dc:0b:f7:2b:81:97:c5:5c:ba:b5:31:ca:dc:fa:cc:d4:
0c:44:ce:8a:7c:b5:48:cc:b8:9c:5d:02:7a:ee:e6:da:f8:b1:
91:6f:64:0d:c3:69:2f:fa:d8:a2:84:35:48:cb:db:5a:26:ec:
1a:84:30:2d:9d:2e:48:81:1b:4a:89:59:e2:3a:dc:82:b2:10:
a1:0e:64:1f:47:c4:47:b5:65:5d:de:32:0f:cc:9b:78:b7:1c:
d1:28:bf:ce:a4:af:aa:1c:73:11:6d:2e:25:d0:1d:47:c5:48:
42:3a:96:cc:61:ec:78:5c:d6:8b:37:bb:67:66:2f:4b:87:6c:
37:e8:bf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 11:49:50 2025 by rpki-client