Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LcshfbSl4HcPO84-412li4snMD8.roa
File: LcshfbSl4HcPO84-412li4snMD8.roa (raw, json)
Hash identifier: eaBuSSiqeixfLiU9mpWsVitu6IdlaN4YAEVMJBWw09s=
Subject key identifier: 2D:CB:21:7D:B4:A5:E0:77:0F:3B:CE:3E:E3:5D:A5:8B:8B:27:30:3F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01A9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LcshfbSl4HcPO84-412li4snMD8.roa
Signing time: Fri 09 May 2025 07:07:46 +0000
ROA not before: Fri 09 May 2025 07:07:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 07:07:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2DCB217DB4A5E0770F3BCE3EE35DA58B8B27303F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:be:65:cc:1e:59:51:0a:93:70:97:c3:ae:
18:2c:6f:83:38:1b:d9:a3:13:9d:16:44:52:47:97:
8b:16:db:90:c0:a6:08:90:67:6c:c2:74:8e:46:07:
b6:9f:60:21:0a:85:a3:b6:e5:ae:b8:55:09:8f:de:
81:e4:01:3f:ec:5d:ac:f6:f9:ae:45:6e:92:16:67:
64:15:87:bb:a9:50:54:24:81:a3:6d:0c:a9:2d:03:
a8:44:7c:a9:36:a4:e8:c4:1d:ca:76:16:c1:ab:ee:
47:4e:5e:fa:df:5e:ec:e0:73:82:bb:df:34:2b:6a:
f1:28:81:ee:29:62:07:c7:2d:66:d0:66:21:af:3e:
de:26:97:64:a4:0c:0d:99:a1:cc:24:b2:1e:f2:bf:
c5:26:0d:0c:5d:b6:9c:aa:a7:bb:ff:f1:0d:3d:99:
cc:00:65:fa:e7:f6:6d:fa:d4:ea:d6:58:1e:b8:a2:
a5:ee:5b:bb:9b:5b:9b:4d:52:b9:40:83:77:d0:85:
cc:a7:cb:6c:7e:ac:3d:ca:e0:39:8b:d7:cc:8c:1c:
6d:e3:b5:58:12:50:04:f9:2a:c3:63:9d:12:62:9c:
80:32:22:da:c1:50:88:52:7e:23:e5:35:45:a6:36:
46:2f:bb:b5:0c:0d:66:30:49:1b:f8:b5:53:bf:c9:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CB:21:7D:B4:A5:E0:77:0F:3B:CE:3E:E3:5D:A5:8B:8B:27:30:3F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LcshfbSl4HcPO84-412li4snMD8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:35:64:40:c6:f1:7d:ca:27:46:a1:ac:cf:b7:be:15:98:a8:
7f:ad:47:a4:21:95:af:9a:0e:ec:b7:20:c8:90:8d:5d:4f:a2:
37:72:66:b5:0e:af:cf:a0:20:2d:c8:cb:e7:5b:75:7b:0f:82:
6d:04:01:38:cd:8a:52:3e:9a:47:a2:c7:fa:fe:fe:2c:a0:c5:
5f:48:9c:4f:65:43:5e:af:04:fa:61:a2:e0:a7:89:71:03:fe:
c3:94:14:39:33:00:33:9a:de:aa:7c:dc:aa:0b:8b:17:90:82:
fe:19:6d:1d:3e:e7:c9:41:c1:08:01:ca:79:e4:91:52:7e:10:
da:d1:4b:0d:8a:17:b8:0c:f5:f1:22:dc:33:7e:55:4f:0d:70:
f9:9c:e4:73:81:80:b8:20:97:7e:40:51:c1:27:e3:1c:a4:ad:
d4:4e:06:ed:44:7f:5c:5c:9f:8d:55:5a:b8:cb:4a:45:3b:29:
1d:ff:20:20:42:2d:62:cf:d8:c6:4c:f7:70:0e:72:cf:64:6e:
d7:19:a3:6d:0b:6f:7b:e9:d4:40:0a:60:a9:02:46:43:5c:ca:
5c:02:0e:f6:f3:72:32:96:d4:39:d5:b8:06:76:fc:64:a5:dd:
11:f8:e6:5a:ff:9d:8c:47:f3:34:05:21:bd:ae:29:0a:8a:7b:
c9:f1:38:1f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAakwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDkw
NzA3NDZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDJEQ0IyMTdEQjRBNUUw
NzcwRjNCQ0UzRUUzNURBNThCOEIyNzMwM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8FL5lzB5ZUQqTcJfDrhgsb4M4G9mjE50WRFJHl4sW25DApgiQ
Z2zCdI5GB7afYCEKhaO25a64VQmP3oHkAT/sXaz2+a5FbpIWZ2QVh7upUFQkgaNt
DKktA6hEfKk2pOjEHcp2FsGr7kdOXvrfXuzgc4K73zQravEoge4pYgfHLWbQZiGv
Pt4ml2SkDA2Zocwksh7yv8UmDQxdtpyqp7v/8Q09mcwAZfrn9m361OrWWB64oqXu
W7ubW5tNUrlAg3fQhcyny2x+rD3K4DmL18yMHG3jtVgSUAT5KsNjnRJinIAyItrB
UIhSfiPlNUWmNkYvu7UMDWYwSRv4tVO/yUAbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQULcshfbSl4HcPO84+412li4snMD8wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9MY3NoZmJTbDRIY1BPODQt
NDEybGk0c25NRDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBACA1ZEDG8X3KJ0ahrM+3vhWYqH+tR6Qhla+a
Duy3IMiQjV1PojdyZrUOr8+gIC3Iy+dbdXsPgm0EATjNilI+mkeix/r+/iygxV9I
nE9lQ16vBPphouCniXED/sOUFDkzADOa3qp83KoLixeQgv4ZbR0+58lBwQgBynnk
kVJ+ENrRSw2KF7gM9fEi3DN+VU8NcPmc5HOBgLggl35AUcEn4xykrdROBu1Ef1xc
n41VWrjLSkU7KR3/ICBCLWLP2MZM93AOcs9kbtcZo20Lb3vp1EAKYKkCRkNcylwC
DvbzcjKW1DnVuAZ2/GSl3RH45lr/nYxH8zQFIb2uKQqKe8nxOB8=
-----END CERTIFICATE-----
Generated at Sun May 18 02:04:05 2025 by rpki-client