Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/AGaEAro_MAFjXInOEwdhF2J99-Q.roa
File: AGaEAro_MAFjXInOEwdhF2J99-Q.roa (raw, json)
Hash identifier: teDEVQxiwG3thUd6EHaVhn7M5ajR6DNWTN9bYkKzjpw=
Subject key identifier: 00:66:84:02:BA:3F:30:01:63:5C:89:CE:13:07:61:17:62:7D:F7:E4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 080D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AGaEAro_MAFjXInOEwdhF2J99-Q.roa
Signing time: Sat 17 May 2025 19:38:11 +0000
ROA not before: Sat 17 May 2025 19:38:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2061 (0x80d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 19:38:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=00668402BA3F3001635C89CE13076117627DF7E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:35:c5:49:f0:f6:d1:bd:af:f9:d3:dd:eb:
47:8a:c8:9b:6a:69:25:b1:2a:fe:86:a4:1e:4f:d3:
a5:d1:c1:e3:a5:f0:f7:f8:b9:49:c9:17:52:fc:f7:
0a:95:61:1b:41:67:54:f3:7b:c5:7c:cc:fe:99:c4:
52:97:af:5c:73:a9:ee:a6:26:70:98:4c:4b:5c:28:
98:90:42:c7:90:c5:66:41:6b:47:54:0e:0d:c4:a9:
06:a4:ef:c1:fe:64:23:19:f4:5b:46:44:36:53:41:
3a:94:b8:67:05:65:94:2d:3f:f2:ce:16:5a:82:06:
a1:57:3e:c8:7a:07:81:f6:32:f8:ee:ad:cc:04:e3:
c2:fe:29:9a:63:dd:b8:12:9c:ff:12:d8:03:97:90:
4a:1e:7f:a5:89:b5:72:09:9f:9e:5f:5c:03:1a:62:
27:35:dd:75:a3:82:c9:92:45:51:25:07:3d:8c:31:
8c:c0:8f:4d:f9:01:52:e9:c3:77:8a:e6:5c:5b:70:
f6:ed:2d:e8:ca:7b:82:6a:48:ea:0d:99:4a:64:31:
87:0f:70:3a:27:bd:60:67:2b:5b:da:f1:10:33:f2:
d3:12:0e:41:ba:8c:39:19:3d:b2:bc:39:fb:4a:19:
51:70:f1:e6:9b:24:3a:3a:05:20:65:e9:e5:75:20:
33:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:66:84:02:BA:3F:30:01:63:5C:89:CE:13:07:61:17:62:7D:F7:E4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AGaEAro_MAFjXInOEwdhF2J99-Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:07:64:8e:66:39:f7:6e:96:89:38:3c:69:46:d3:5a:10:d9:
09:1a:0d:7b:12:24:f8:ca:c4:d5:e5:35:4b:f2:f0:49:78:09:
f0:66:34:c1:28:2d:f7:42:4a:9e:a6:16:93:98:71:07:4b:1d:
73:d8:01:6e:0f:a7:98:c8:b4:df:55:64:7a:b5:79:82:96:ba:
71:5d:e6:d0:82:54:ec:88:87:df:4a:d6:9a:77:3e:5c:7d:da:
5b:69:c5:de:b0:0f:0e:b2:e1:09:b8:e1:14:bf:5b:b6:94:9d:
ea:ab:35:d1:6a:18:ca:95:47:5a:0c:63:64:cd:28:a7:f2:76:
90:00:e8:5d:81:2c:c0:01:77:34:4c:82:e5:3c:22:47:6d:29:
d0:fd:25:30:82:1e:b0:62:61:22:c0:9a:5d:0b:3f:4c:4f:ee:
fe:23:fe:10:43:1d:a0:a6:57:f1:16:46:e7:12:d3:bc:23:aa:
22:e3:02:aa:b5:d9:24:65:94:7f:ec:b0:69:a3:f2:66:ed:9f:
a5:31:07:13:aa:ed:a8:f9:a7:c5:4d:de:ed:28:16:3c:b0:d2:
37:b1:f1:41:79:b0:09:9e:37:a2:21:3b:22:7e:ec:51:5a:7b:
8b:7d:d4:19:2d:ad:49:91:41:64:86:d3:42:12:fb:0b:39:a8:
2e:ea:f9:ef
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCA0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTcx
OTM4MTFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDAwNjY4NDAyQkEzRjMw
MDE2MzVDODlDRTEzMDc2MTE3NjI3REY3RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvzjXFSfD20b2v+dPd60eKyJtqaSWxKv6GpB5P06XRweOl8Pf4
uUnJF1L89wqVYRtBZ1Tze8V8zP6ZxFKXr1xzqe6mJnCYTEtcKJiQQseQxWZBa0dU
Dg3EqQak78H+ZCMZ9FtGRDZTQTqUuGcFZZQtP/LOFlqCBqFXPsh6B4H2MvjurcwE
48L+KZpj3bgSnP8S2AOXkEoef6WJtXIJn55fXAMaYic13XWjgsmSRVElBz2MMYzA
j035AVLpw3eK5lxbcPbtLejKe4JqSOoNmUpkMYcPcDonvWBnK1va8RAz8tMSDkG6
jDkZPbK8OftKGVFw8eabJDo6BSBl6eV1IDOxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUAGaEAro/MAFjXInOEwdhF2J99+QwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9BR2FFQXJvX01BRmpYSW5P
RXdkaEYySjk5LVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAEgHZI5mOfdulok4PGlG01oQ2QkaDXsSJPjK
xNXlNUvy8El4CfBmNMEoLfdCSp6mFpOYcQdLHXPYAW4Pp5jItN9VZHq1eYKWunFd
5tCCVOyIh99K1pp3Plx92ltpxd6wDw6y4Qm44RS/W7aUneqrNdFqGMqVR1oMY2TN
KKfydpAA6F2BLMABdzRMguU8IkdtKdD9JTCCHrBiYSLAml0LP0xP7v4j/hBDHaCm
V/EWRucS07wjqiLjAqq12SRllH/ssGmj8mbtn6UxBxOq7aj5p8VN3u0oFjyw0jex
8UF5sAmeN6IhOyJ+7FFae4t91BktrUmRQWSG00IS+ws5qC7q+e8=
-----END CERTIFICATE-----
Generated at Sun May 18 07:27:42 2025 by rpki-client