Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/iMvpPrh8LpDIyh_yK2_Jvp4ToOs.roa
File: iMvpPrh8LpDIyh_yK2_Jvp4ToOs.roa (raw, json)
Hash identifier: 99Pkc0PY2lgRM7oNiBNkLs1v91TgOlIiKV5/7Z8gsME=
Subject key identifier: 88:CB:E9:3E:B8:7C:2E:90:C8:CA:1F:F2:2B:6F:C9:BE:9E:13:A0:EB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 06C1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/iMvpPrh8LpDIyh_yK2_Jvp4ToOs.roa
Signing time: Fri 16 May 2025 02:08:01 +0000
ROA not before: Fri 16 May 2025 02:08:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1729 (0x6c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 02:08:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=88CBE93EB87C2E90C8CA1FF22B6FC9BE9E13A0EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:85:ba:e6:1d:7d:b5:40:0f:5b:05:ff:e5:ca:
73:91:6a:60:40:28:e9:0a:01:57:06:6c:9f:6e:83:
ed:34:0f:ce:ec:4e:cf:81:08:ce:0d:ef:e0:58:69:
94:e9:62:c6:df:c6:0c:fe:61:c9:fe:5a:72:9d:13:
11:ab:91:51:33:ab:0c:d1:83:c0:1e:16:5c:7c:0b:
fe:84:f9:59:93:fc:68:7f:d8:05:f3:c7:25:d8:76:
7d:28:4e:1a:f9:b8:17:ff:1b:59:85:29:49:44:fe:
ec:9b:cb:93:b1:66:3c:bd:02:53:4e:e8:ed:04:c5:
40:58:f5:0d:97:fe:37:f1:fd:2f:ce:c5:9e:03:93:
61:1e:0d:d9:49:3c:59:2f:96:08:ae:e6:4f:35:80:
c5:1e:8f:c7:7d:e3:a3:96:98:82:85:5a:d3:20:7a:
05:be:83:6c:17:0c:bb:0e:05:4b:9f:08:b1:c2:b4:
5c:2c:3b:53:99:68:c2:fe:7d:13:e1:6c:14:8d:fc:
b3:c9:bb:f1:2e:06:ff:e7:35:76:57:09:16:90:e1:
ee:21:16:b7:5a:08:cf:0e:fd:78:c8:c0:57:43:40:
e9:d0:3c:fc:3c:84:34:d3:dc:91:8f:72:40:fe:63:
2e:cd:b4:c9:3e:04:37:a9:6e:a0:91:81:06:8b:32:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CB:E9:3E:B8:7C:2E:90:C8:CA:1F:F2:2B:6F:C9:BE:9E:13:A0:EB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/iMvpPrh8LpDIyh_yK2_Jvp4ToOs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:38:68:7e:01:ab:b5:10:5b:34:d1:90:65:d5:eb:73:a2:cc:
40:f5:85:34:48:88:4f:ed:91:36:e9:9b:07:f5:8a:13:2a:ba:
fb:a4:f9:a3:6d:66:ad:e9:0e:b9:cb:a5:53:2c:9b:26:b8:20:
b5:79:3b:a2:9d:4f:5a:02:e2:7d:f0:95:23:6a:dd:7e:b7:c8:
14:18:8f:ef:11:61:4a:87:24:66:fa:7a:f7:88:cc:1e:1d:ec:
23:28:a8:03:ae:4e:d8:94:ed:9f:a7:86:fb:37:05:2d:80:dd:
91:12:08:c3:53:b1:dc:1e:70:be:e2:5a:f4:50:c0:09:19:a1:
02:be:d9:ed:6d:0b:ab:c5:f4:d4:36:29:64:84:6c:60:8c:14:
a5:ac:10:6f:f2:8b:73:d6:37:43:4f:33:d8:99:4f:4f:ba:77:
11:e2:89:b6:1b:d0:11:49:2b:78:1c:a2:82:68:21:cc:c1:44:
a1:c7:2c:48:ee:6b:8f:d6:18:b8:51:b5:75:66:27:c8:dc:d3:
d9:eb:2b:83:23:47:d4:97:aa:a3:01:97:5a:44:fc:78:ea:42:
a6:8b:ee:45:d2:f9:42:13:99:60:34:0f:0b:58:04:31:a3:b0:
cd:0d:c7:9d:e4:56:01:3c:00:69:56:9f:b1:09:36:28:70:8f:
54:2f:d7:13
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTYw
MjA4MDFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDg4Q0JFOTNFQjg3QzJF
OTBDOENBMUZGMjJCNkZDOUJFOUUxM0EwRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDshbrmHX21QA9bBf/lynORamBAKOkKAVcGbJ9ug+00D87sTs+B
CM4N7+BYaZTpYsbfxgz+Ycn+WnKdExGrkVEzqwzRg8AeFlx8C/6E+VmT/Gh/2AXz
xyXYdn0oThr5uBf/G1mFKUlE/uyby5OxZjy9AlNO6O0ExUBY9Q2X/jfx/S/OxZ4D
k2EeDdlJPFkvlgiu5k81gMUej8d946OWmIKFWtMgegW+g2wXDLsOBUufCLHCtFws
O1OZaML+fRPhbBSN/LPJu/EuBv/nNXZXCRaQ4e4hFrdaCM8O/XjIwFdDQOnQPPw8
hDTT3JGPckD+Yy7NtMk+BDepbqCRgQaLMr9JAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUiMvpPrh8LpDIyh/yK2/Jvp4ToOswHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9pTXZwUHJoOExwREl5aF95
SzJfSnZwNFRvT3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAAw4aH4Bq7UQWzTRkGXV63OizED1hTRIiE/t
kTbpmwf1ihMquvuk+aNtZq3pDrnLpVMsmya4ILV5O6KdT1oC4n3wlSNq3X63yBQY
j+8RYUqHJGb6eveIzB4d7CMoqAOuTtiU7Z+nhvs3BS2A3ZESCMNTsdwecL7iWvRQ
wAkZoQK+2e1tC6vF9NQ2KWSEbGCMFKWsEG/yi3PWN0NPM9iZT0+6dxHiibYb0BFJ
K3gcooJoIczBRKHHLEjua4/WGLhRtXVmJ8jc09nrK4MjR9SXqqMBl1pE/HjqQqaL
7kXS+UITmWA0DwtYBDGjsM0Nx53kVgE8AGlWn7EJNihwj1Qv1xM=
-----END CERTIFICATE-----
Generated at Sat May 17 23:24:27 2025 by rpki-client