Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/RJzaGGyxWwUt3cgCtZ3N8MDV9EU.roa
File: RJzaGGyxWwUt3cgCtZ3N8MDV9EU.roa (raw, json)
Hash identifier: 5Rk5V17VQsByShx0YbssVCWfxJ5OsvePxOEl7re9o9Q=
Subject key identifier: 44:9C:DA:18:6C:B1:5B:05:2D:DD:C8:02:B5:9D:CD:F0:C0:D5:F4:45
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 028D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RJzaGGyxWwUt3cgCtZ3N8MDV9EU.roa
Signing time: Sat 10 May 2025 11:37:49 +0000
ROA not before: Sat 10 May 2025 11:37:49 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 653 (0x28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 11:37:49 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=449CDA186CB15B052DDDC802B59DCDF0C0D5F445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1f:e9:72:59:d7:d5:98:53:1b:b3:ad:ab:5d:
65:e4:c2:27:b9:40:c0:ff:77:0c:ec:8f:40:aa:e7:
27:8f:98:34:ca:52:ad:d7:87:2c:2d:66:b3:53:0c:
04:7a:f8:69:df:5d:11:a2:14:df:42:19:9e:26:ff:
17:07:0e:96:c1:65:46:24:b3:f0:66:4f:5c:0e:15:
1e:5a:b2:45:3c:34:d1:fe:49:71:11:06:b3:65:db:
1c:a5:76:05:22:6c:47:96:8a:df:7e:3d:d7:97:50:
a2:fd:0e:c0:35:55:11:a8:93:56:53:5a:63:60:5b:
9d:d6:c0:27:fb:04:d3:60:8a:9e:2a:08:c9:9f:14:
4e:4c:c0:2e:8b:8e:e9:c6:89:c6:a8:ce:b1:33:23:
56:b9:a2:30:64:f0:66:12:c6:64:71:a1:e8:88:73:
af:d8:ad:f0:25:0a:08:ab:a1:4a:49:ef:a9:f3:43:
9e:0e:70:7f:d9:9f:fc:60:85:ed:2a:9a:d5:59:1e:
b9:a8:17:90:bf:a1:e5:80:cf:75:c6:56:bc:33:c1:
e9:5d:4f:4a:ec:5e:6c:2c:d1:74:54:c6:fa:2e:f0:
69:66:4c:30:d7:94:69:0b:16:9d:3e:6e:74:2c:57:
81:3b:a7:56:56:b8:5b:af:90:75:e7:1d:6a:91:e0:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9C:DA:18:6C:B1:5B:05:2D:DD:C8:02:B5:9D:CD:F0:C0:D5:F4:45
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RJzaGGyxWwUt3cgCtZ3N8MDV9EU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:f0:27:2a:13:04:03:12:ac:ab:ec:ef:b8:98:67:b3:9c:9f:
6f:e7:47:a4:78:8c:89:33:c9:ef:8e:ed:19:e8:e4:7a:c7:13:
45:a1:46:cf:b2:26:cf:84:40:89:f3:f9:da:14:5d:bc:4a:49:
f6:0b:be:99:69:51:e1:69:80:f0:75:9b:00:71:af:b4:53:0f:
23:f1:00:9a:ab:c6:67:66:04:4f:5d:85:d0:29:dd:2f:fe:6f:
5e:6e:2a:5b:3f:9d:39:ce:a9:09:fe:cb:55:b1:22:d8:30:8e:
ae:33:7e:21:bb:c7:bc:c1:d3:1b:33:3d:42:53:f6:39:a0:d5:
a0:e0:46:c7:6b:cf:c3:6f:29:8a:bc:82:24:66:0f:2e:fb:52:
dd:a6:c5:2b:bf:96:69:5a:90:cd:57:d5:5b:b3:4f:7f:14:ac:
da:63:a9:d6:a1:d2:e7:3e:f5:bd:12:6b:b5:92:c7:57:72:36:
5a:b9:e5:e4:52:8f:0d:24:3b:4c:9e:26:2c:2f:81:81:89:f1:
0e:a6:63:db:e9:9c:26:34:88:8f:1b:42:53:a3:c0:d7:ce:07:
83:35:bf:e3:50:98:3f:03:2e:b8:89:8f:fa:0d:11:b9:ad:dd:
19:d6:a9:7f:71:3f:45:99:58:19:20:fd:c7:a4:84:a0:4e:33:
bb:18:db:ff
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTAx
MTM3NDlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDQ0OUNEQTE4NkNCMTVC
MDUyREREQzgwMkI1OURDREYwQzBENUY0NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQH+lyWdfVmFMbs62rXWXkwie5QMD/dwzsj0Cq5yePmDTKUq3X
hywtZrNTDAR6+GnfXRGiFN9CGZ4m/xcHDpbBZUYks/BmT1wOFR5askU8NNH+SXER
BrNl2xyldgUibEeWit9+PdeXUKL9DsA1VRGok1ZTWmNgW53WwCf7BNNgip4qCMmf
FE5MwC6LjunGicaozrEzI1a5ojBk8GYSxmRxoeiIc6/YrfAlCgiroUpJ76nzQ54O
cH/Zn/xghe0qmtVZHrmoF5C/oeWAz3XGVrwzweldT0rsXmws0XRUxvou8GlmTDDX
lGkLFp0+bnQsV4E7p1ZWuFuvkHXnHWqR4KkhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQURJzaGGyxWwUt3cgCtZ3N8MDV9EUwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9SSnphR0d5eFd3VXQzY2dD
dFozTjhNRFY5RVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAGrwJyoTBAMSrKvs77iYZ7Ocn2/nR6R4jIkz
ye+O7Rno5HrHE0WhRs+yJs+EQInz+doUXbxKSfYLvplpUeFpgPB1mwBxr7RTDyPx
AJqrxmdmBE9dhdAp3S/+b15uKls/nTnOqQn+y1WxItgwjq4zfiG7x7zB0xszPUJT
9jmg1aDgRsdrz8NvKYq8giRmDy77Ut2mxSu/lmlakM1X1VuzT38UrNpjqdah0uc+
9b0Sa7WSx1dyNlq55eRSjw0kO0yeJiwvgYGJ8Q6mY9vpnCY0iI8bQlOjwNfOB4M1
v+NQmD8DLriJj/oNEbmt3RnWqX9xP0WZWBkg/cekhKBOM7sY2/8=
-----END CERTIFICATE-----
Generated at Sat May 17 22:47:38 2025 by rpki-client