Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/tHBR9KRU9ColnmTrNf7Edee1ZLY.roa
File: tHBR9KRU9ColnmTrNf7Edee1ZLY.roa (raw, json)
Hash identifier: wMOjAYsN2+XX9ZchAJpi6QiD0r0X60G8WIYEFeUp4FY=
Subject key identifier: B4:70:51:F4:A4:54:F4:2A:25:9E:64:EB:35:FE:C4:75:E7:B5:64:B6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0325
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/tHBR9KRU9ColnmTrNf7Edee1ZLY.roa
Signing time: Sun 11 May 2025 06:37:50 +0000
ROA not before: Sun 11 May 2025 06:37:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 805 (0x325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 06:37:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B47051F4A454F42A259E64EB35FEC475E7B564B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:87:f1:f5:7d:f8:a4:eb:bd:5b:ef:ff:73:
7b:5c:95:43:46:c1:d1:84:72:71:00:34:7c:d0:d5:
c4:f3:ee:4c:ef:0a:ab:f4:f9:3c:62:07:ca:ce:a2:
88:d0:e0:78:1a:68:4e:53:b6:7c:cd:ee:a1:84:60:
98:8a:22:30:37:42:73:28:39:15:aa:f0:5c:ac:e0:
c9:3d:7c:d8:7d:0a:13:46:df:75:6c:25:2c:31:27:
1e:f4:f4:05:e8:7f:91:c7:f7:85:4d:91:e0:b2:de:
b5:ef:25:d2:d3:10:03:51:7d:98:f3:6a:c4:15:bf:
e2:3c:a1:0c:02:8d:92:f8:c6:06:c0:24:80:7f:27:
0d:d4:cf:b8:d5:e4:cc:d5:80:19:1a:80:40:07:d4:
0d:58:d5:55:5d:21:cc:4a:66:22:fa:ae:51:e4:f9:
45:95:8f:d6:65:25:14:5a:b4:64:5f:ac:70:9f:cc:
c3:e4:3b:2b:74:1f:21:2a:60:ed:ee:c8:71:87:f5:
13:cb:5b:03:54:e6:69:cd:72:f6:98:66:d3:c4:8d:
c3:e9:6b:bf:2b:0b:04:4c:cc:27:50:a5:34:c3:b1:
87:4f:38:06:c4:33:ea:74:f4:83:f5:37:82:bf:eb:
b9:06:c7:ae:a7:b8:fa:a6:90:4b:c5:d9:17:18:f2:
d7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:70:51:F4:A4:54:F4:2A:25:9E:64:EB:35:FE:C4:75:E7:B5:64:B6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/tHBR9KRU9ColnmTrNf7Edee1ZLY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:93:bc:47:c9:05:67:99:c7:07:5e:39:c2:74:2d:89:7f:b3:
6a:3d:b9:ce:86:e0:58:21:c4:44:50:8c:a7:4d:fc:0e:14:a2:
d8:cb:ad:47:45:1a:41:80:03:ec:7a:13:e5:22:0f:57:5e:bd:
71:b8:48:8e:fe:cb:ef:18:7e:97:10:e0:fb:60:2e:49:bf:c4:
9c:3f:12:c8:89:e8:9e:08:46:81:19:29:02:0b:f5:61:50:ac:
45:d4:e2:27:65:43:50:5c:fe:9e:12:70:8e:43:2d:a5:15:49:
c6:4a:38:8c:bd:30:65:60:a1:9d:f2:63:77:52:b7:82:e6:14:
db:0c:96:8a:ee:75:5b:30:94:2b:79:84:f0:98:2c:b5:01:7b:
db:0b:eb:d6:3e:35:87:38:f4:47:86:a8:75:dc:e9:5d:73:c3:
fe:e7:db:ad:ad:7e:a7:67:b4:61:df:f9:f4:2d:b9:52:62:96:
f9:19:77:fb:d4:ff:60:50:16:98:a2:5f:ec:53:9e:5e:bc:3e:
a8:26:7d:fb:f6:9f:16:eb:4f:18:ce:12:65:15:3e:80:31:bc:
50:63:fd:b1:16:b5:0f:58:52:85:64:05:42:6c:5c:39:ae:f5:
1a:a3:58:98:d5:14:22:07:86:7f:63:20:f8:f1:dd:d0:3d:00:
bb:59:28:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:53:07 2025 by rpki-client