Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/UDECviDx2jUHXT7VaEIyy_TFSSI.roa
File: UDECviDx2jUHXT7VaEIyy_TFSSI.roa (raw, json)
Hash identifier: i2EABAKRAabDwZadOb36aSw0J40tVePag6CRP5RwSfc=
Subject key identifier: 50:31:02:BE:20:F1:DA:35:07:5D:3E:D5:68:42:32:CB:F4:C5:49:22
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 05D1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UDECviDx2jUHXT7VaEIyy_TFSSI.roa
Signing time: Wed 14 May 2025 20:08:02 +0000
ROA not before: Wed 14 May 2025 20:08:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1489 (0x5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 20:08:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=503102BE20F1DA35075D3ED5684232CBF4C54922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:7e:2f:15:ba:10:fd:b6:73:26:53:fd:e3:
81:46:4a:0a:61:48:0f:13:85:cb:94:4e:64:2d:e0:
07:92:f0:7a:85:9f:67:45:1d:bb:8c:2e:ba:ad:22:
69:ee:5c:21:72:b8:a5:58:f7:29:c8:42:7b:62:7a:
7b:0e:ef:bc:4c:b3:0e:f1:6f:36:77:ba:ce:a9:a5:
fe:c1:75:5d:ce:8d:ae:f2:91:be:a5:42:58:f0:0f:
d4:42:27:4f:e0:fc:45:62:df:39:25:20:97:87:5c:
be:14:98:39:9d:ad:cb:37:0b:42:66:d9:1a:2c:97:
c9:a9:eb:c1:71:85:f3:78:74:3b:ad:69:c7:89:0c:
9b:3a:d2:f4:53:0f:e7:85:b3:8d:72:2f:2c:da:c7:
06:8d:8d:68:cc:fc:42:b5:2d:da:3b:95:a3:aa:01:
44:a7:07:30:fc:66:0f:34:86:34:ea:61:73:ff:dd:
dd:73:cc:b7:e8:97:c4:3a:c3:34:37:5d:fa:73:13:
96:8b:9b:8f:ab:7d:80:4b:37:88:d7:a5:a3:c5:e2:
5f:8e:a6:22:34:9f:eb:dc:29:b9:05:96:d5:79:dc:
dd:56:12:f4:cb:5f:73:19:17:6c:d1:5c:4f:aa:8b:
17:34:72:fb:58:06:a6:9c:31:86:81:fb:77:43:1c:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:31:02:BE:20:F1:DA:35:07:5D:3E:D5:68:42:32:CB:F4:C5:49:22
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UDECviDx2jUHXT7VaEIyy_TFSSI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:27:bb:cf:81:12:48:1b:a8:88:0d:bb:85:09:53:b0:1b:e2:
43:37:32:e0:cb:49:11:35:e4:da:cf:f5:2d:24:0a:08:0f:b7:
b1:f1:c0:5b:85:a6:c8:21:d2:36:fb:a9:de:0c:91:19:43:5b:
2e:56:b2:ed:7b:c2:7a:9c:0b:36:3c:f6:0b:99:39:1f:b3:30:
b3:d9:02:11:ad:da:15:21:8f:ad:87:6c:37:3f:20:9f:73:79:
c4:f5:f0:66:83:b6:c1:fe:38:15:76:e8:12:c0:d5:ab:59:26:
52:c8:8c:4b:53:e1:92:c2:0d:1d:68:80:b4:56:84:cd:1d:00:
33:29:17:d4:42:88:25:c5:fe:9b:e4:e8:7c:1c:72:90:d8:97:
e6:67:20:bf:45:f2:98:67:cb:df:27:ee:24:1f:47:86:e1:bc:
6d:20:57:73:f0:76:a2:54:b7:4f:75:93:18:b7:61:68:77:ea:
f8:a5:f1:32:e0:d3:94:9b:46:c5:be:a5:0a:0a:b1:1a:8d:ac:
ee:03:21:1e:da:3b:56:b5:07:79:c5:8f:1f:40:23:38:13:5f:
55:27:45:03:35:d8:0a:92:e5:69:2e:83:70:17:c6:99:14:a9:
27:a8:cc:13:61:21:d1:10:e8:d4:f1:26:43:b7:d9:dc:13:9d:
c9:e7:04:79
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTQy
MDA4MDJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDUwMzEwMkJFMjBGMURB
MzUwNzVEM0VENTY4NDIzMkNCRjRDNTQ5MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgZH4vFboQ/bZzJlP944FGSgphSA8ThcuUTmQt4AeS8HqFn2dF
HbuMLrqtImnuXCFyuKVY9ynIQntiensO77xMsw7xbzZ3us6ppf7BdV3Oja7ykb6l
QljwD9RCJ0/g/EVi3zklIJeHXL4UmDmdrcs3C0Jm2Rosl8mp68FxhfN4dDutaceJ
DJs60vRTD+eFs41yLyzaxwaNjWjM/EK1Ldo7laOqAUSnBzD8Zg80hjTqYXP/3d1z
zLfol8Q6wzQ3XfpzE5aLm4+rfYBLN4jXpaPF4l+OpiI0n+vcKbkFltV53N1WEvTL
X3MZF2zRXE+qixc0cvtYBqacMYaB+3dDHC4/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUUDECviDx2jUHXT7VaEIyy/TFSSIwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9VREVDdmlEeDJqVUhYVDdW
YUVJeXlfVEZTU0kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBACInu8+BEkgbqIgNu4UJU7Ab4kM3MuDLSRE1
5NrP9S0kCggPt7HxwFuFpsgh0jb7qd4MkRlDWy5Wsu17wnqcCzY89guZOR+zMLPZ
AhGt2hUhj62HbDc/IJ9zecT18GaDtsH+OBV26BLA1atZJlLIjEtT4ZLCDR1ogLRW
hM0dADMpF9RCiCXF/pvk6HwccpDYl+ZnIL9F8phny98n7iQfR4bhvG0gV3PwdqJU
t091kxi3YWh36vil8TLg05SbRsW+pQoKsRqNrO4DIR7aO1a1B3nFjx9AIzgTX1Un
RQM12AqS5Wkug3AXxpkUqSeozBNhIdEQ6NTxJkO32dwTncnnBHk=
-----END CERTIFICATE-----
Generated at Sat May 17 22:46:59 2025 by rpki-client