Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-IsJAKKEQD5QHR0PHVV_6wj-N24.roa
File: -IsJAKKEQD5QHR0PHVV_6wj-N24.roa (raw, json)
Hash identifier: EqsdQzC4ZUQGQWQ2b117Xdc9Q+YD62dtRfQBpP5jZOA=
Subject key identifier: F8:8B:09:00:A2:84:40:3E:50:1D:1D:0F:1D:55:7F:EB:08:FE:37:6E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 050D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-IsJAKKEQD5QHR0PHVV_6wj-N24.roa
Signing time: Tue 13 May 2025 19:37:58 +0000
ROA not before: Tue 13 May 2025 19:37:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1293 (0x50d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 19:37:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F88B0900A284403E501D1D0F1D557FEB08FE376E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:44:72:dd:ab:f9:01:39:3b:63:10:e1:0d:
c5:01:3b:b1:8c:bf:c4:27:1d:fc:99:9a:88:47:31:
bc:f7:3e:68:31:18:55:44:66:ae:0f:5e:8b:9b:79:
26:33:c0:a5:16:19:8e:3c:eb:39:a9:0c:c6:96:a6:
63:b1:14:69:9b:98:ab:c7:96:e6:1c:d4:05:1b:72:
45:05:99:d4:66:3d:3e:3a:47:da:08:7e:95:9d:86:
83:1f:29:81:8e:16:f0:53:15:fe:c0:79:25:7d:39:
59:d6:cd:10:c8:83:84:7a:d8:5c:db:51:25:4a:54:
50:3e:27:a7:07:c9:98:0c:00:5f:50:9a:b6:e0:54:
7a:56:80:aa:e2:50:f1:26:63:a9:7d:7a:59:ad:fb:
15:31:9f:20:cc:90:a5:c6:1c:2b:95:c4:6c:45:3c:
93:b4:7b:ef:fa:27:13:27:d8:be:d0:4c:c1:a3:52:
2d:87:4e:e3:9a:b2:e7:37:53:4f:4d:91:58:34:8b:
e4:1d:eb:d2:cb:b1:2f:3e:07:4b:c3:df:6c:76:73:
7a:e1:a6:3b:9c:38:7d:65:63:26:30:c7:eb:02:40:
01:22:ed:28:58:9a:9c:95:5e:fb:78:f9:41:f4:d7:
4a:82:3a:24:8a:70:19:e0:7a:de:27:1e:6d:61:7c:
31:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8B:09:00:A2:84:40:3E:50:1D:1D:0F:1D:55:7F:EB:08:FE:37:6E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-IsJAKKEQD5QHR0PHVV_6wj-N24.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:5e:ad:c0:d4:fe:21:3d:5b:fe:13:63:b4:3c:83:94:91:90:
b2:33:33:30:b9:c1:bc:5f:2d:2f:ea:47:5d:76:09:e3:15:e1:
3d:01:6e:0e:fe:f0:c8:a3:c8:14:65:f1:72:9d:40:21:99:fd:
48:ce:ed:e9:ed:21:4a:1a:fe:5c:6a:e6:65:4f:72:8f:2b:64:
62:09:b2:a6:17:62:d4:7a:56:86:32:ca:dc:f7:e1:96:4c:5f:
fb:9b:42:ed:18:81:d5:a5:84:f0:a8:cb:5c:4d:fe:60:0a:08:
3a:1b:ca:53:f0:b2:7a:ce:44:6b:27:36:b5:c9:21:58:41:f9:
7d:b2:0b:6a:ad:af:c9:92:b0:79:b6:d7:bf:87:2e:27:bb:f8:
cf:e2:4b:48:0a:91:8d:d3:e1:33:cf:a2:ed:62:e1:f2:1d:b4:
58:a6:59:09:6a:56:55:b4:ca:92:08:8a:f4:77:32:4e:f8:58:
ed:18:bd:1d:06:3d:53:9c:b3:d9:dc:33:a2:b4:7c:54:d8:7e:
da:28:d2:73:df:38:26:bc:5e:0e:0e:ab:1d:42:8a:c0:e8:1a:
17:d9:83:9f:c3:8f:5c:78:56:14:8c:51:a1:5a:00:31:09:e6:
76:a9:16:d0:bc:8f:ca:ef:f6:0d:2a:1c:5a:85:bf:6d:61:9b:
36:6a:73:79
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTMx
OTM3NThaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEY4OEIwOTAwQTI4NDQw
M0U1MDFEMUQwRjFENTU3RkVCMDhGRTM3NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCW50Ry3av5ATk7YxDhDcUBO7GMv8QnHfyZmohHMbz3PmgxGFVE
Zq4PXoubeSYzwKUWGY486zmpDMaWpmOxFGmbmKvHluYc1AUbckUFmdRmPT46R9oI
fpWdhoMfKYGOFvBTFf7AeSV9OVnWzRDIg4R62FzbUSVKVFA+J6cHyZgMAF9Qmrbg
VHpWgKriUPEmY6l9elmt+xUxnyDMkKXGHCuVxGxFPJO0e+/6JxMn2L7QTMGjUi2H
TuOasuc3U09NkVg0i+Qd69LLsS8+B0vD32x2c3rhpjucOH1lYyYwx+sCQAEi7ShY
mpyVXvt4+UH010qCOiSKcBnget4nHm1hfDHTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+IsJAKKEQD5QHR0PHVV/6wj+N24wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni8tSXNKQUtLRVFENVFIUjBQ
SFZWXzZ3ai1OMjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAExercDU/iE9W/4TY7Q8g5SRkLIzMzC5wbxf
LS/qR112CeMV4T0Bbg7+8MijyBRl8XKdQCGZ/UjO7entIUoa/lxq5mVPco8rZGIJ
sqYXYtR6VoYyytz34ZZMX/ubQu0YgdWlhPCoy1xN/mAKCDobylPwsnrORGsnNrXJ
IVhB+X2yC2qtr8mSsHm217+HLie7+M/iS0gKkY3T4TPPou1i4fIdtFimWQlqVlW0
ypIIivR3Mk74WO0YvR0GPVOcs9ncM6K0fFTYftoo0nPfOCa8Xg4Oqx1CisDoGhfZ
g5/Dj1x4VhSMUaFaADEJ5napFtC8j8rv9g0qHFqFv21hmzZqc3k=
-----END CERTIFICATE-----
Generated at Sun May 18 02:12:55 2025 by rpki-client