Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/iBHLGywLXBXPuLuJeTwlZvSwQV0.roa
File: iBHLGywLXBXPuLuJeTwlZvSwQV0.roa (raw, json)
Hash identifier: sCQAo1/vPl+h9oS+EtP//ZrLQRBOpyFG5wdlly4WYq0=
Subject key identifier: 88:11:CB:1B:2C:0B:5C:15:CF:B8:BB:89:79:3C:25:66:F4:B0:41:5D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1AFD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/iBHLGywLXBXPuLuJeTwlZvSwQV0.roa
Signing time: Thu 12 Jun 2025 01:39:49 +0000
ROA not before: Thu 12 Jun 2025 01:39:49 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6909 (0x1afd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 01:39:49 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8811CB1B2C0B5C15CFB8BB89793C2566F4B0415D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4b:04:eb:10:ff:75:38:10:bf:86:de:7e:1d:
3a:b5:8b:eb:a7:93:95:be:c0:15:33:e1:ad:a5:70:
77:60:08:1b:80:df:df:d3:d8:72:5e:de:9d:a0:42:
0c:d5:47:e0:89:c8:d1:47:c6:37:ef:22:a3:f2:e6:
b7:e6:ab:47:bd:76:12:58:b0:8a:32:24:ae:ac:4f:
96:fe:05:f7:7a:17:a4:4f:8a:0e:bf:2a:1f:17:a5:
37:e4:73:9e:3b:ae:7d:bd:32:b6:22:44:c6:eb:65:
0b:f3:f3:ba:35:f1:36:d8:10:00:cd:c7:97:c3:4e:
d0:c5:a2:9a:b2:f2:06:48:16:0f:5c:05:99:ec:2b:
b3:19:74:21:d0:3f:98:f0:c5:43:55:33:47:94:7c:
73:19:8a:b4:6a:12:96:76:f0:5e:6d:3d:54:88:be:
13:ef:cd:05:7b:95:6c:4d:e1:d2:81:3b:f4:e9:08:
06:89:90:d1:13:7f:e6:3f:da:a4:a1:52:94:2e:f2:
cc:1e:46:09:38:3e:6c:c5:ac:45:22:05:96:4c:fc:
ad:88:69:f4:a1:51:e2:b7:5d:97:3b:3f:59:a4:39:
df:5c:59:ec:ec:92:a5:e8:a1:5b:23:44:71:5f:cf:
82:9a:87:63:92:2a:78:4c:cf:3a:72:c9:60:0a:e3:
af:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:11:CB:1B:2C:0B:5C:15:CF:B8:BB:89:79:3C:25:66:F4:B0:41:5D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/iBHLGywLXBXPuLuJeTwlZvSwQV0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:7b:20:5a:cb:62:e3:d0:71:3c:42:fb:30:30:07:23:29:4f:
7a:3f:43:87:00:af:3b:75:6c:c4:f5:f3:94:77:2e:0e:93:b0:
ea:f3:ef:4b:a0:e1:55:cf:92:3a:82:9c:53:f2:c3:60:24:47:
04:53:89:1f:e9:ea:7b:05:84:1c:cc:61:4f:a8:79:d5:d9:a4:
cd:d5:ab:ec:69:a7:22:20:28:6f:e5:f2:3c:19:8b:a8:16:a1:
c0:70:9e:0a:ba:7d:b3:26:1d:97:99:13:97:d8:03:76:6e:3c:
69:2d:18:e1:75:da:15:34:7e:ae:c1:b0:bc:ad:81:be:17:2e:
d9:cd:9b:49:0b:52:93:e5:2a:7e:5d:77:bd:0f:a1:8e:4a:e9:
6c:e9:2d:a9:95:65:1d:3e:03:cd:e0:29:b5:e1:84:86:b1:23:
87:0f:ad:12:4f:4d:de:bd:9d:ee:2a:5c:90:df:2e:96:10:7e:
60:62:10:c7:43:d8:46:90:b2:cc:25:64:1d:72:cd:12:6f:8b:
c9:8d:c0:e5:16:52:01:a3:5b:22:57:36:08:00:bc:70:70:32:
c4:a8:3b:21:c3:50:57:a9:e6:88:50:7f:3e:aa:8d:08:46:35:
92:bc:5a:56:05:11:3d:5c:34:fc:de:89:d4:65:a7:9e:63:bf:
91:61:bf:4f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGv0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTIw
MTM5NDlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDg4MTFDQjFCMkMwQjVD
MTVDRkI4QkI4OTc5M0MyNTY2RjRCMDQxNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdSwTrEP91OBC/ht5+HTq1i+unk5W+wBUz4a2lcHdgCBuA39/T
2HJe3p2gQgzVR+CJyNFHxjfvIqPy5rfmq0e9dhJYsIoyJK6sT5b+Bfd6F6RPig6/
Kh8XpTfkc547rn29MrYiRMbrZQvz87o18TbYEADNx5fDTtDFopqy8gZIFg9cBZns
K7MZdCHQP5jwxUNVM0eUfHMZirRqEpZ28F5tPVSIvhPvzQV7lWxN4dKBO/TpCAaJ
kNETf+Y/2qShUpQu8sweRgk4PmzFrEUiBZZM/K2IafShUeK3XZc7P1mkOd9cWezs
kqXooVsjRHFfz4Kah2OSKnhMzzpyyWAK468HAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUiBHLGywLXBXPuLuJeTwlZvSwQV0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9pQkhMR3l3TFhCWFB1THVK
ZVR3bFp2U3dRVjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAC57IFrLYuPQcTxC+zAwByMpT3o/Q4cArzt1
bMT185R3Lg6TsOrz70ug4VXPkjqCnFPyw2AkRwRTiR/p6nsFhBzMYU+oedXZpM3V
q+xppyIgKG/l8jwZi6gWocBwngq6fbMmHZeZE5fYA3ZuPGktGOF12hU0fq7BsLyt
gb4XLtnNm0kLUpPlKn5dd70PoY5K6WzpLamVZR0+A83gKbXhhIaxI4cPrRJPTd69
ne4qXJDfLpYQfmBiEMdD2EaQsswlZB1yzRJvi8mNwOUWUgGjWyJXNggAvHBwMsSo
OyHDUFep5ohQfz6qjQhGNZK8WlYFET1cNPzeidRlp55jv5Fhv08=
-----END CERTIFICATE-----
Generated at Sat Jun 21 16:20:01 2025 by rpki-client