Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/FjN_Cmd1kV3uuIdtAHM-P19U0_Q.roa
File: FjN_Cmd1kV3uuIdtAHM-P19U0_Q.roa (raw, json)
Hash identifier: a7qH/Wor61aHXJj0FHgf4s2EVvBTSPPcGCrUtveu5Cg=
Subject key identifier: 16:33:7F:0A:67:75:91:5D:EE:B8:87:6D:00:73:3E:3F:5F:54:D3:F4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 035D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FjN_Cmd1kV3uuIdtAHM-P19U0_Q.roa
Signing time: Sun 11 May 2025 13:37:52 +0000
ROA not before: Sun 11 May 2025 13:37:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 861 (0x35d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 13:37:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=16337F0A6775915DEEB8876D00733E3F5F54D3F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:9e:c9:bd:96:4a:52:e3:06:84:1b:b0:8f:
80:51:82:2f:cc:58:c4:19:4a:eb:02:1f:02:f3:51:
ff:72:86:95:2d:c3:8c:e5:94:68:8c:3d:a7:e8:52:
27:6b:bb:b9:21:bd:ee:4f:ca:db:d1:8f:60:33:d4:
0e:37:82:27:b5:f9:8e:51:a3:87:f7:64:97:aa:e3:
89:69:83:8a:61:59:fa:1e:c4:d3:da:d9:82:dd:63:
3e:d3:91:2c:b5:0a:74:dc:01:1f:67:c2:a7:2f:3d:
22:39:99:33:ec:da:cd:81:74:a7:4f:35:8f:4b:f5:
82:53:9d:77:47:8d:32:d7:e8:56:1c:36:de:38:45:
b6:43:53:ae:22:a8:cc:7c:6b:41:f9:b3:a6:ad:20:
15:a5:45:ff:17:4d:59:df:55:b4:ad:84:6f:76:c4:
09:4e:47:7e:bc:49:34:bb:1b:24:58:12:87:b9:15:
76:39:34:37:4c:ec:ce:f7:f8:e2:f1:e2:90:9f:f3:
a2:10:f5:75:90:03:80:ab:1d:61:fa:a8:4d:cf:32:
46:b5:66:ee:c2:c9:14:f4:5f:a0:37:b1:0a:ce:a5:
9c:3f:92:97:91:89:95:24:6c:fd:07:e8:8e:e3:0d:
9e:0d:7b:2b:8c:1e:0e:57:e2:53:82:9e:a8:c7:2f:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:33:7F:0A:67:75:91:5D:EE:B8:87:6D:00:73:3E:3F:5F:54:D3:F4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FjN_Cmd1kV3uuIdtAHM-P19U0_Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:2c:4a:1f:d4:02:4a:d2:02:2a:fe:c5:d8:6c:a4:a1:17:71:
85:e9:9e:fa:01:0d:05:50:a1:4b:0b:99:17:dc:7a:10:22:d0:
d2:0a:6d:be:e8:86:6f:57:1e:d3:fd:73:12:f9:f9:c4:70:2b:
e4:83:df:19:84:bd:a5:6c:33:36:36:fa:f6:4e:f5:7e:c2:19:
65:df:61:7d:61:c6:e0:d0:98:6c:cb:b1:59:f2:fb:1b:00:e8:
ee:04:f9:9a:fb:21:24:c0:c8:40:dd:c7:4d:f2:6d:5c:9e:bb:
fa:a9:ed:e8:b0:f5:33:7c:01:25:09:d6:bd:27:45:b0:ab:a2:
b1:da:9f:82:8e:9f:81:cb:4a:21:bb:b9:e8:61:98:c0:35:d4:
24:77:15:01:06:97:e9:9f:57:33:68:09:12:b8:94:55:a3:81:
c2:a5:62:ae:c6:e7:e2:cf:f0:c4:1e:02:76:3e:20:cd:d3:8c:
76:ea:af:da:50:c6:7a:00:29:2d:95:f3:3d:48:42:1b:54:f4:
b3:d7:4b:3f:36:a8:04:3d:ca:17:2a:56:19:a6:14:91:66:26:
e3:3b:22:73:67:58:fa:11:f2:8b:4a:5a:12:da:21:b4:fe:1d:
d7:35:39:d2:dc:c8:61:9c:a9:68:92:c1:f9:c6:d6:b7:b1:1e:
ad:2c:72:30
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICA10wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTEx
MzM3NTJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDE2MzM3RjBBNjc3NTkx
NURFRUI4ODc2RDAwNzMzRTNGNUY1NEQzRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC90p7JvZZKUuMGhBuwj4BRgi/MWMQZSusCHwLzUf9yhpUtw4zl
lGiMPafoUidru7khve5PytvRj2Az1A43gie1+Y5Ro4f3ZJeq44lpg4phWfoexNPa
2YLdYz7TkSy1CnTcAR9nwqcvPSI5mTPs2s2BdKdPNY9L9YJTnXdHjTLX6FYcNt44
RbZDU64iqMx8a0H5s6atIBWlRf8XTVnfVbSthG92xAlOR368STS7GyRYEoe5FXY5
NDdM7M73+OLx4pCf86IQ9XWQA4CrHWH6qE3PMka1Zu7CyRT0X6A3sQrOpZw/kpeR
iZUkbP0H6I7jDZ4NeyuMHg5X4lOCnqjHL97lAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFjN/Cmd1kV3uuIdtAHM+P19U0/QwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9Gak5fQ21kMWtWM3V1SWR0
QUhNLVAxOVUwX1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAHUsSh/UAkrSAir+xdhspKEXcYXpnvoBDQVQ
oUsLmRfcehAi0NIKbb7ohm9XHtP9cxL5+cRwK+SD3xmEvaVsMzY2+vZO9X7CGWXf
YX1hxuDQmGzLsVny+xsA6O4E+Zr7ISTAyEDdx03ybVyeu/qp7eiw9TN8ASUJ1r0n
RbCrorHan4KOn4HLSiG7uehhmMA11CR3FQEGl+mfVzNoCRK4lFWjgcKlYq7G5+LP
8MQeAnY+IM3TjHbqr9pQxnoAKS2V8z1IQhtU9LPXSz82qAQ9yhcqVhmmFJFmJuM7
InNnWPoR8otKWhLaIbT+Hdc1OdLcyGGcqWiSwfnG1rexHq0scjA=
-----END CERTIFICATE-----
Generated at Sat May 17 21:31:13 2025 by rpki-client