Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/6BViYx08eFDncQoKmbRmfind9bc.roa
File: 6BViYx08eFDncQoKmbRmfind9bc.roa (raw, json)
Hash identifier: Z0X/wjEZCvYk50Lxz5SMdc4KiJQ1wlkFSLCfuP7sx9E=
Subject key identifier: E8:15:62:63:1D:3C:78:50:E7:71:0A:0A:99:B4:66:7E:29:DD:F5:B7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 06D1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6BViYx08eFDncQoKmbRmfind9bc.roa
Signing time: Fri 16 May 2025 04:08:03 +0000
ROA not before: Fri 16 May 2025 04:08:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1745 (0x6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 04:08:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E81562631D3C7850E7710A0A99B4667E29DDF5B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:91:9a:c3:da:29:3d:98:9d:cd:fa:c6:99:
42:47:df:99:20:c3:59:86:b6:07:d6:f9:e3:a3:11:
34:4d:00:fc:4c:92:c8:0a:d5:26:23:d1:39:dc:e6:
e3:98:41:8f:19:35:4a:e8:f0:45:f9:ba:03:a3:d9:
24:8b:68:24:7c:5c:d7:09:d3:48:38:ea:93:12:8d:
ee:be:e0:2f:7a:0f:3d:5b:3e:c7:59:51:fd:8b:65:
10:5f:9f:ef:d9:4f:2e:7a:d9:b6:9c:9b:de:48:f4:
07:3d:6d:98:10:a0:25:ea:f3:e5:1d:0c:7e:39:c2:
32:72:be:3d:7a:54:a3:22:2f:4f:88:c9:42:ca:ff:
9a:d0:92:94:4c:39:ad:f8:0e:14:ec:32:41:90:65:
72:b2:85:18:97:f0:48:8c:c5:35:71:29:60:9f:5c:
54:3e:9b:12:b7:47:be:1a:8e:f7:22:76:9c:16:6e:
19:f0:38:a4:f6:4a:c2:9b:7c:06:50:90:ae:9f:46:
dd:75:91:af:fb:3e:d9:3b:be:9d:0c:d4:f2:66:27:
76:34:3a:44:6e:72:c6:9f:a6:3c:a7:2d:61:83:7e:
5f:ad:71:1a:4f:92:fa:75:9e:63:00:76:1b:9f:6e:
19:b0:6c:fa:63:91:ee:2a:4e:69:ce:02:ab:0f:90:
d4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:15:62:63:1D:3C:78:50:E7:71:0A:0A:99:B4:66:7E:29:DD:F5:B7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6BViYx08eFDncQoKmbRmfind9bc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:a1:54:10:b4:f2:a8:94:10:ab:18:7f:05:e9:a9:61:1a:5c:
00:69:cd:05:f1:ae:19:08:5c:c0:69:d4:15:2e:3a:5e:eb:29:
3c:b5:89:2c:79:9e:7d:8a:5b:ff:f8:97:57:0f:fa:c1:cd:4d:
00:40:76:17:57:c5:e7:5a:71:91:14:63:fb:b7:96:b9:7a:1b:
29:7e:f1:8c:09:70:f9:7a:90:f5:e0:c6:34:b1:63:07:eb:dd:
45:ea:55:53:be:eb:57:b2:79:51:75:9e:76:10:9c:da:7b:fd:
28:d0:3b:a5:c5:01:90:02:43:4f:c1:16:e8:75:4e:bb:98:dc:
ee:33:fd:7b:62:28:04:6c:f2:1f:3e:06:fb:8f:0d:43:32:5a:
19:4b:e1:56:07:d5:6f:ea:65:66:fd:94:20:22:e7:e6:82:cb:
e8:d1:21:5d:bc:83:11:1d:ed:f2:8e:80:a8:35:1f:d0:de:3d:
01:bd:57:61:ab:ab:a1:cb:f2:94:d5:33:47:da:ca:e3:1a:3d:
db:40:fd:af:9d:ab:83:d8:54:75:07:71:58:5b:93:0c:78:71:
bd:0c:31:d8:39:b1:69:f4:25:bc:51:a6:44:e5:b3:c0:c4:89:
18:c1:06:94:1d:d3:60:47:c7:71:86:d5:12:f5:95:97:36:c2:
f5:14:c1:f2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTYw
NDA4MDNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEU4MTU2MjYzMUQzQzc4
NTBFNzcxMEEwQTk5QjQ2NjdFMjlEREY1QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+apGaw9opPZidzfrGmUJH35kgw1mGtgfW+eOjETRNAPxMksgK
1SYj0Tnc5uOYQY8ZNUro8EX5ugOj2SSLaCR8XNcJ00g46pMSje6+4C96Dz1bPsdZ
Uf2LZRBfn+/ZTy562bacm95I9Ac9bZgQoCXq8+UdDH45wjJyvj16VKMiL0+IyULK
/5rQkpRMOa34DhTsMkGQZXKyhRiX8EiMxTVxKWCfXFQ+mxK3R74ajvcidpwWbhnw
OKT2SsKbfAZQkK6fRt11ka/7Ptk7vp0M1PJmJ3Y0OkRucsafpjynLWGDfl+tcRpP
kvp1nmMAdhufbhmwbPpjke4qTmnOAqsPkNT5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6BViYx08eFDncQoKmbRmfind9bcwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni82QlZpWXgwOGVGRG5jUW9L
bWJSbWZpbmQ5YmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAIqhVBC08qiUEKsYfwXpqWEaXABpzQXxrhkI
XMBp1BUuOl7rKTy1iSx5nn2KW//4l1cP+sHNTQBAdhdXxedacZEUY/u3lrl6Gyl+
8YwJcPl6kPXgxjSxYwfr3UXqVVO+61eyeVF1nnYQnNp7/SjQO6XFAZACQ0/BFuh1
TruY3O4z/XtiKARs8h8+BvuPDUMyWhlL4VYH1W/qZWb9lCAi5+aCy+jRIV28gxEd
7fKOgKg1H9DePQG9V2Grq6HL8pTVM0fayuMaPdtA/a+dq4PYVHUHcVhbkwx4cb0M
Mdg5sWn0JbxRpkTls8DEiRjBBpQd02BHx3GG1RL1lZc2wvUUwfI=
-----END CERTIFICATE-----
Generated at Sat May 17 22:36:03 2025 by rpki-client