Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/rSyIvqELrJ4mV0CXopogI-E9EZ4.roa
File: rSyIvqELrJ4mV0CXopogI-E9EZ4.roa (raw, json)
Hash identifier: TIS7gk24Z2beX0YjUgkX4tw7BZTduuNTCe3QEtP2s0Y=
Subject key identifier: AD:2C:88:BE:A1:0B:AC:9E:26:57:40:97:A2:9A:20:23:E1:3D:11:9E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03CD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rSyIvqELrJ4mV0CXopogI-E9EZ4.roa
Signing time: Mon 12 May 2025 03:37:55 +0000
ROA not before: Mon 12 May 2025 03:37:55 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973 (0x3cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 03:37:55 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AD2C88BEA10BAC9E26574097A29A2023E13D119E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2f:de:c5:de:be:69:93:2c:b3:61:5b:b2:ac:
42:a9:d3:ec:88:c8:22:8f:7f:b1:3a:a3:f4:f5:5d:
53:ec:c7:00:31:a4:b8:af:e8:4d:70:9a:60:fc:ff:
f8:74:9a:fe:0a:b2:5e:d1:9e:b5:3c:07:e1:08:22:
8a:79:81:ce:58:42:90:bf:73:e2:50:d6:b2:5f:ed:
80:5b:9a:dc:a9:65:44:56:b8:7b:db:64:87:9a:f6:
7b:54:7c:53:c2:99:56:76:87:32:f2:6a:54:4b:b1:
e9:80:9d:7e:38:5e:a3:c5:cd:54:4c:a9:45:99:e7:
fb:37:a3:ba:64:b1:02:f5:3f:1f:40:c9:29:51:87:
a6:9f:4c:f2:99:c4:33:0b:33:19:d4:f0:b5:6d:2e:
5a:c2:21:fb:d8:ba:75:0e:4d:7a:5e:43:3b:de:7d:
02:8e:22:97:db:5b:6f:88:f0:b5:96:7a:a2:ee:92:
f2:fb:4c:8c:17:c8:74:58:45:04:bf:94:ab:0f:58:
4c:8d:74:67:d4:e0:b3:30:39:15:83:3c:4b:a2:51:
4a:c7:1b:a6:9b:9b:c2:3d:60:6d:fc:51:ac:5f:70:
8e:5f:18:db:fc:c3:f0:65:cc:91:f3:56:94:86:89:
81:b7:72:d6:97:bb:50:d6:c9:b4:e0:18:f4:1a:dd:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2C:88:BE:A1:0B:AC:9E:26:57:40:97:A2:9A:20:23:E1:3D:11:9E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rSyIvqELrJ4mV0CXopogI-E9EZ4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:c8:f6:82:ee:19:31:45:bb:d2:93:01:df:00:59:54:61:d9:
bc:68:29:32:d9:23:2d:db:4e:73:7e:d9:bd:74:7f:2e:1a:52:
cd:5b:d5:70:52:44:a7:19:a0:b2:2e:ca:10:5b:17:3c:3f:0d:
b4:7d:a0:78:d2:54:d6:d0:83:10:14:98:42:93:1d:12:69:fd:
d3:d8:a8:7c:c4:eb:cc:bc:ff:13:31:06:7f:b2:f3:36:a0:6f:
81:cd:e5:66:62:d4:1d:f9:14:c3:84:7b:82:73:16:ff:20:a3:
5d:25:09:6f:04:dc:4a:98:f0:04:9c:f2:de:86:0a:fa:e0:30:
c3:f0:98:54:7b:e9:2f:86:6e:55:5e:ff:40:b6:35:61:6f:4f:
de:ca:1a:89:b6:5e:53:42:b2:24:97:f0:8c:96:a3:e6:6f:8f:
46:c0:1a:b2:80:be:e3:a7:35:76:0d:51:8b:91:fd:8a:5e:de:
0c:f4:1e:52:cd:96:12:21:8e:97:61:0c:d1:6e:45:60:07:79:
49:bd:d3:27:dd:39:03:69:de:96:c6:bc:aa:1d:27:50:ca:3e:
53:40:c7:0a:ca:28:f6:54:5e:88:e5:34:ce:86:9f:c8:d2:fa:
29:d4:94:74:76:05:9b:09:79:a8:bc:6e:3f:cf:e2:18:e1:40:
66:f1:8e:e4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICA80wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTIw
MzM3NTVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEFEMkM4OEJFQTEwQkFD
OUUyNjU3NDA5N0EyOUEyMDIzRTEzRDExOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZL97F3r5pkyyzYVuyrEKp0+yIyCKPf7E6o/T1XVPsxwAxpLiv
6E1wmmD8//h0mv4Ksl7RnrU8B+EIIop5gc5YQpC/c+JQ1rJf7YBbmtypZURWuHvb
ZIea9ntUfFPCmVZ2hzLyalRLsemAnX44XqPFzVRMqUWZ5/s3o7pksQL1Px9AySlR
h6afTPKZxDMLMxnU8LVtLlrCIfvYunUOTXpeQzvefQKOIpfbW2+I8LWWeqLukvL7
TIwXyHRYRQS/lKsPWEyNdGfU4LMwORWDPEuiUUrHG6abm8I9YG38UaxfcI5fGNv8
w/BlzJHzVpSGiYG3ctaXu1DWybTgGPQa3cyZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrSyIvqELrJ4mV0CXopogI+E9EZ4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9yU3lJdnFFTHJKNG1WMENY
b3BvZ0ktRTlFWjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAALI9oLuGTFFu9KTAd8AWVRh2bxoKTLZIy3b
TnN+2b10fy4aUs1b1XBSRKcZoLIuyhBbFzw/DbR9oHjSVNbQgxAUmEKTHRJp/dPY
qHzE68y8/xMxBn+y8zagb4HN5WZi1B35FMOEe4JzFv8go10lCW8E3EqY8ASc8t6G
CvrgMMPwmFR76S+GblVe/0C2NWFvT97KGom2XlNCsiSX8IyWo+Zvj0bAGrKAvuOn
NXYNUYuR/Ype3gz0HlLNlhIhjpdhDNFuRWAHeUm90yfdOQNp3pbGvKodJ1DKPlNA
xwrKKPZUXojlNM6Gn8jS+inUlHR2BZsJeai8bj/P4hjhQGbxjuQ=
-----END CERTIFICATE-----
Generated at Sat May 17 23:45:16 2025 by rpki-client