Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/6FlVYNpxDokToBG7e8Up1WrRdQY.roa
File: 6FlVYNpxDokToBG7e8Up1WrRdQY.roa (raw, json)
Hash identifier: FjlaPSXYc4ee2ATdacZb10G5Ub3DW9iMNHLP/0Pb2oQ=
Subject key identifier: E8:59:55:60:DA:71:0E:89:13:A0:11:BB:7B:C5:29:D5:6A:D1:75:06
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04B5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6FlVYNpxDokToBG7e8Up1WrRdQY.roa
Signing time: Tue 13 May 2025 08:37:58 +0000
ROA not before: Tue 13 May 2025 08:37:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1205 (0x4b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 08:37:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E8595560DA710E8913A011BB7BC529D56AD17506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:ec:13:b9:d3:54:86:f7:de:83:93:ad:f8:
5b:44:1a:58:eb:51:0f:b8:73:07:ae:23:48:54:e3:
5e:b6:23:58:2b:cd:bc:58:a8:62:55:b6:bd:8c:74:
21:a5:62:4a:7b:06:8f:ec:88:2c:19:88:03:ab:d5:
87:7e:bb:45:c2:01:06:8e:cc:90:93:9b:2c:db:a2:
8a:7e:2c:a3:4f:4a:0d:95:10:16:9c:81:c3:01:87:
57:f6:f7:18:73:cd:ba:b8:14:14:7b:7a:c7:0b:6d:
50:b9:e1:ce:e6:bc:1c:c3:02:71:5b:ef:0d:a1:a0:
51:88:cd:98:71:69:79:90:26:93:5f:27:d8:4e:b2:
eb:73:a0:78:35:de:a2:9d:81:be:72:3b:49:24:8b:
a5:ed:e5:b5:9b:bc:84:29:89:2a:d3:af:ac:25:6f:
db:87:53:74:85:e7:91:aa:f3:ba:09:e1:a7:8e:b9:
06:ee:c3:90:ef:74:c1:97:95:22:77:2f:35:8f:09:
79:ae:fe:78:c9:d5:2b:0d:06:3e:8a:b0:01:56:d9:
c9:c3:64:82:71:f7:a6:19:22:f9:e4:2d:b5:c5:0f:
89:8b:8f:3a:ea:bc:dc:ba:70:a9:9c:8b:79:92:45:
fd:36:ec:b4:c2:8d:d4:6a:e3:a8:1e:87:d5:cb:31:
f3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:59:55:60:DA:71:0E:89:13:A0:11:BB:7B:C5:29:D5:6A:D1:75:06
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6FlVYNpxDokToBG7e8Up1WrRdQY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:95:d3:35:cd:27:59:de:79:14:44:f1:e2:a3:34:a5:f3:5a:
1a:6a:8c:08:be:91:c2:6d:69:d9:84:f7:f5:31:b3:cc:bf:14:
e5:e1:cd:cf:b8:1b:b3:34:75:8e:e9:ab:fd:a7:e1:8d:c6:c0:
cc:66:57:76:85:4f:1d:0e:2e:3b:c1:36:65:f8:74:5f:1d:f4:
0d:c6:14:c9:32:be:bb:be:db:69:c6:a1:11:0c:c2:3f:e6:58:
5e:0b:77:29:5e:49:c7:c3:11:4f:49:74:7a:78:51:e5:43:19:
0f:a5:2d:73:28:b6:8f:11:1b:de:b2:78:93:a9:40:9c:53:33:
ab:e4:41:e0:2f:66:f0:dd:8b:66:4e:75:e0:bb:32:3f:74:73:
71:2a:72:af:9f:a2:95:6a:73:d3:bb:bf:c4:57:e9:13:0d:5d:
23:a2:60:63:7e:11:da:a8:2e:77:e6:1a:c4:7a:b1:8d:06:fa:
2a:7e:ac:66:e1:de:80:d8:1b:6c:99:5a:86:24:5d:c7:cc:3c:
ef:d4:e4:25:48:7a:3e:31:5f:cb:51:3a:25:22:a6:e3:ec:77:
69:0e:eb:bd:dd:7c:54:9f:74:cc:73:54:da:40:88:b1:5a:f7:
32:68:7c:05:d6:02:b2:67:ad:bb:24:83:0d:f0:d7:88:25:1a:
47:3b:b4:31
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTMw
ODM3NThaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEU4NTk1NTYwREE3MTBF
ODkxM0EwMTFCQjdCQzUyOUQ1NkFEMTc1MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB4+wTudNUhvfeg5Ot+FtEGljrUQ+4cweuI0hU4162I1grzbxY
qGJVtr2MdCGlYkp7Bo/siCwZiAOr1Yd+u0XCAQaOzJCTmyzboop+LKNPSg2VEBac
gcMBh1f29xhzzbq4FBR7escLbVC54c7mvBzDAnFb7w2hoFGIzZhxaXmQJpNfJ9hO
sutzoHg13qKdgb5yO0kki6Xt5bWbvIQpiSrTr6wlb9uHU3SF55Gq87oJ4aeOuQbu
w5DvdMGXlSJ3LzWPCXmu/njJ1SsNBj6KsAFW2cnDZIJx96YZIvnkLbXFD4mLjzrq
vNy6cKmci3mSRf027LTCjdRq46geh9XLMfODAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6FlVYNpxDokToBG7e8Up1WrRdQYwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni82RmxWWU5weERva1RvQkc3
ZThVcDFXclJkUVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAJaV0zXNJ1neeRRE8eKjNKXzWhpqjAi+kcJt
admE9/Uxs8y/FOXhzc+4G7M0dY7pq/2n4Y3GwMxmV3aFTx0OLjvBNmX4dF8d9A3G
FMkyvru+22nGoREMwj/mWF4LdyleScfDEU9JdHp4UeVDGQ+lLXMoto8RG96yeJOp
QJxTM6vkQeAvZvDdi2ZOdeC7Mj90c3Eqcq+fopVqc9O7v8RX6RMNXSOiYGN+Edqo
LnfmGsR6sY0G+ip+rGbh3oDYG2yZWoYkXcfMPO/U5CVIej4xX8tROiUipuPsd2kO
673dfFSfdMxzVNpAiLFa9zJofAXWArJnrbskgw3w14glGkc7tDE=
-----END CERTIFICATE-----
Generated at Sun May 18 02:02:57 2025 by rpki-client