Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/0oi45ln4edhWFbLA4QavmJyUXUU.roa
File: 0oi45ln4edhWFbLA4QavmJyUXUU.roa (raw, json)
Hash identifier: EbswJJ/RkSitwffeHGltMZeJ8g75M9/KYmTVXROg5NU=
Subject key identifier: D2:88:B8:E6:59:F8:79:D8:56:15:B2:C0:E1:06:AF:98:9C:94:5D:45
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07E5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0oi45ln4edhWFbLA4QavmJyUXUU.roa
Signing time: Sat 17 May 2025 14:38:08 +0000
ROA not before: Sat 17 May 2025 14:38:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2021 (0x7e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 14:38:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D288B8E659F879D85615B2C0E106AF989C945D45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:22:da:71:fc:2e:d0:ff:a8:b7:40:79:67:f9:
c0:5b:8f:ad:b0:3a:00:d7:c9:bc:5d:b1:db:4d:8b:
b4:52:61:74:88:37:b4:33:4a:cf:a6:a1:48:1e:47:
cf:8a:66:4f:2c:c6:cd:75:21:09:20:98:c2:32:3d:
45:eb:84:c8:05:08:55:0d:82:8f:ad:09:31:03:0e:
c0:25:b2:e9:f6:07:64:e6:45:6f:48:ca:32:8a:c9:
91:b4:5e:4d:cb:d6:c7:ad:31:2e:2e:16:9d:7c:f3:
17:ae:46:a6:ff:59:1a:60:63:de:0f:bf:d3:de:54:
4d:af:08:20:7c:25:1e:c1:5b:46:fb:8b:c0:86:0f:
cf:68:e9:26:c0:13:11:eb:8c:3b:e2:5a:e6:7d:5f:
68:46:1c:64:c0:6b:70:b4:70:98:bf:43:3b:cc:cc:
4c:9f:d2:0f:1d:97:60:4f:7e:c7:2c:e4:36:8e:1b:
e2:1c:76:e4:1f:30:ea:38:cb:ce:00:15:54:80:73:
97:30:c6:72:64:bc:fa:b7:f8:ed:2f:12:5d:bb:85:
d0:ad:b0:97:df:98:33:a8:a2:7b:d8:52:02:78:50:
8e:3d:3b:88:8f:ac:ac:b3:65:fb:f7:f1:c6:c2:94:
e0:83:88:17:0d:d3:d3:8d:cd:63:1b:9d:43:63:6f:
06:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:88:B8:E6:59:F8:79:D8:56:15:B2:C0:E1:06:AF:98:9C:94:5D:45
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0oi45ln4edhWFbLA4QavmJyUXUU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:51:ce:bd:e3:e8:4a:68:4b:73:4b:7b:0b:b5:f2:2f:f0:72:
fa:ba:16:9a:e5:e4:66:02:67:a6:71:76:91:96:c5:40:5c:34:
1f:9f:99:2a:eb:10:4c:c2:85:ca:c1:65:b4:eb:c4:6e:d7:a9:
20:dc:90:0a:c6:f5:32:68:64:9d:2b:4e:3b:e0:87:69:d9:76:
30:50:98:00:38:b1:ae:a3:74:91:56:b2:f7:bf:98:64:e6:a3:
42:3e:8b:53:f4:58:1c:46:d3:2d:5e:a9:aa:4f:f7:8e:fc:bb:
70:b2:e3:37:28:ed:74:2b:b8:24:63:19:1a:00:be:2a:08:12:
cd:42:e9:51:a0:4d:7e:b7:cd:41:df:b9:77:27:ad:c0:12:8f:
5d:7f:3f:99:62:af:b7:5c:8b:9d:ac:0c:58:47:19:b7:cf:9f:
19:a8:5f:49:48:c8:ba:c0:85:4f:df:92:d4:b0:7e:da:ab:1b:
e7:95:9a:51:28:34:89:bb:35:fa:55:39:1a:94:c3:11:ad:4e:
f0:12:7e:0e:ad:1b:db:f1:63:1f:7b:d7:79:a4:e6:30:31:15:
1c:38:30:67:3d:90:79:07:df:ff:e7:7c:dd:63:e7:d8:03:db:
e9:a2:99:2e:aa:e4:24:d1:09:0c:82:9f:2f:f3:79:3c:f1:8b:
31:c1:38:f5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB+UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTcx
NDM4MDhaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEQyODhCOEU2NTlGODc5
RDg1NjE1QjJDMEUxMDZBRjk4OUM5NDVENDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjItpx/C7Q/6i3QHln+cBbj62wOgDXybxdsdtNi7RSYXSIN7Qz
Ss+moUgeR8+KZk8sxs11IQkgmMIyPUXrhMgFCFUNgo+tCTEDDsAlsun2B2TmRW9I
yjKKyZG0Xk3L1setMS4uFp188xeuRqb/WRpgY94Pv9PeVE2vCCB8JR7BW0b7i8CG
D89o6SbAExHrjDviWuZ9X2hGHGTAa3C0cJi/QzvMzEyf0g8dl2BPfscs5DaOG+Ic
duQfMOo4y84AFVSAc5cwxnJkvPq3+O0vEl27hdCtsJffmDOoonvYUgJ4UI49O4iP
rKyzZfv38cbClOCDiBcN09ONzWMbnUNjbwbLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU0oi45ln4edhWFbLA4QavmJyUXUUwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni8wb2k0NWxuNGVkaFdGYkxB
NFFhdm1KeVVYVVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAAFRzr3j6EpoS3NLewu18i/wcvq6Fprl5GYC
Z6ZxdpGWxUBcNB+fmSrrEEzChcrBZbTrxG7XqSDckArG9TJoZJ0rTjvgh2nZdjBQ
mAA4sa6jdJFWsve/mGTmo0I+i1P0WBxG0y1eqapP9478u3Cy4zco7XQruCRjGRoA
vioIEs1C6VGgTX63zUHfuXcnrcASj11/P5lir7dci52sDFhHGbfPnxmoX0lIyLrA
hU/fktSwftqrG+eVmlEoNIm7NfpVORqUwxGtTvASfg6tG9vxYx9713mk5jAxFRw4
MGc9kHkH3//nfN1j59gD2+mimS6q5CTRCQyCny/zeTzxizHBOPU=
-----END CERTIFICATE-----
Generated at Sun May 18 02:08:12 2025 by rpki-client