Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/t5k4EmO9KeOxbcAvr2I7_dUAuXE.roa
File: t5k4EmO9KeOxbcAvr2I7_dUAuXE.roa (raw, json)
Hash identifier: 6ao4OH1jHRNt2rJS+DZTMbDZQGXvCgSWHWkihtKYmZc=
Subject key identifier: B7:99:38:12:63:BD:29:E3:B1:6D:C0:2F:AF:62:3B:FD:D5:00:B9:71
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0695
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/t5k4EmO9KeOxbcAvr2I7_dUAuXE.roa
Signing time: Thu 15 May 2025 20:38:09 +0000
ROA not before: Thu 15 May 2025 20:38:09 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1685 (0x695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 20:38:09 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B799381263BD29E3B16DC02FAF623BFDD500B971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:27:48:d0:7e:de:51:31:06:ea:70:ae:f6:
db:c6:a8:c9:d6:f7:c1:ee:35:22:34:1b:28:9d:1e:
32:51:48:60:30:98:8e:b0:bb:7c:ed:1d:b8:ab:f5:
be:13:20:98:f7:40:3e:ee:50:f1:6a:54:c8:63:83:
8e:16:53:e7:6d:b6:51:79:ca:55:a2:00:49:b8:49:
de:4a:03:1a:4f:a8:95:42:b4:56:86:0e:7e:ae:af:
d4:d9:2f:51:43:77:ee:d9:75:35:1c:46:ec:b2:75:
b6:9a:7f:a7:a1:77:54:3f:49:4a:09:9d:af:cd:ef:
af:e9:47:75:bc:91:33:70:59:a8:55:ba:0b:6c:0b:
5a:a0:fe:a6:9b:61:8a:a2:a5:5b:e4:2e:dd:ad:b4:
d2:fd:9e:55:7e:ad:11:1f:38:c7:69:2f:89:32:af:
40:ef:77:7f:0a:c9:81:ac:c0:2e:1d:97:74:6c:e0:
d4:5f:6b:91:0d:73:a3:e3:ba:2a:cb:11:fc:06:43:
e9:60:6c:de:c2:06:7c:25:6c:0f:16:6f:9a:b6:1c:
28:5f:ae:bd:ac:42:ef:29:58:46:f2:0f:c6:19:0e:
47:4b:cf:4d:98:07:a9:3e:b4:ea:7f:3b:38:1f:7e:
5a:30:56:a0:23:7b:a0:34:74:0d:a1:89:ab:62:ea:
49:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:99:38:12:63:BD:29:E3:B1:6D:C0:2F:AF:62:3B:FD:D5:00:B9:71
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/t5k4EmO9KeOxbcAvr2I7_dUAuXE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:95:86:a4:5a:02:70:8b:26:70:d0:8f:47:69:39:cf:c4:24:
5a:ba:0d:23:ff:7d:a3:9f:ac:43:61:59:63:c8:d7:ff:59:9e:
91:90:49:6e:63:6d:ec:a8:42:43:d9:b3:5b:30:13:9f:26:e8:
36:26:54:65:e0:59:91:e8:d6:27:56:f3:e0:81:c3:e7:3b:4e:
2a:54:43:74:35:fd:b7:3e:58:52:cb:db:b1:ee:f5:27:3e:dc:
b6:af:75:4f:e4:11:3e:d9:1f:1d:76:1f:38:28:a0:d8:15:24:
f4:db:70:66:5d:e1:3d:7a:6b:53:af:d9:42:5c:cb:e6:a0:43:
d9:a5:a8:1a:02:5c:b7:37:ba:a3:12:3d:0c:7d:bc:59:e9:e8:
8d:aa:63:dd:84:9d:5d:ff:a0:93:55:ab:79:33:d7:ac:68:cc:
3a:d0:1a:67:be:b4:18:11:2c:c0:8b:14:7f:cf:4b:87:54:74:
b6:17:42:c5:25:d1:5d:36:5e:2c:bd:c2:19:0e:ea:63:29:60:
9a:ae:69:ed:2d:70:78:40:7b:9a:d4:26:2a:bd:a1:65:53:ff:
e5:c8:b1:99:7a:09:d0:43:7a:3e:70:84:df:df:40:82:cf:01:
8c:69:c9:f4:6b:a2:cf:9d:7f:91:e0:bd:08:4e:21:22:2c:09:
c0:e3:71:94
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTUy
MDM4MDlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEI3OTkzODEyNjNCRDI5
RTNCMTZEQzAyRkFGNjIzQkZERDUwMEI5NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrmSdI0H7eUTEG6nCu9tvGqMnW98HuNSI0GyidHjJRSGAwmI6w
u3ztHbir9b4TIJj3QD7uUPFqVMhjg44WU+dttlF5ylWiAEm4Sd5KAxpPqJVCtFaG
Dn6ur9TZL1FDd+7ZdTUcRuyydbaaf6ehd1Q/SUoJna/N76/pR3W8kTNwWahVugts
C1qg/qabYYqipVvkLt2ttNL9nlV+rREfOMdpL4kyr0Dvd38KyYGswC4dl3Rs4NRf
a5ENc6PjuirLEfwGQ+lgbN7CBnwlbA8Wb5q2HChfrr2sQu8pWEbyD8YZDkdLz02Y
B6k+tOp/OzgfflowVqAje6A0dA2hiati6knvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUt5k4EmO9KeOxbcAvr2I7/dUAuXEwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni90NWs0RW1POUtlT3hiY0F2
cjJJN19kVUF1WEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAI6VhqRaAnCLJnDQj0dpOc/EJFq6DSP/faOf
rENhWWPI1/9ZnpGQSW5jbeyoQkPZs1swE58m6DYmVGXgWZHo1idW8+CBw+c7TipU
Q3Q1/bc+WFLL27Hu9Sc+3LavdU/kET7ZHx12HzgooNgVJPTbcGZd4T16a1Ov2UJc
y+agQ9mlqBoCXLc3uqMSPQx9vFnp6I2qY92EnV3/oJNVq3kz16xozDrQGme+tBgR
LMCLFH/PS4dUdLYXQsUl0V02Xiy9whkO6mMpYJquae0tcHhAe5rUJiq9oWVT/+XI
sZl6CdBDej5whN/fQILPAYxpyfRros+df5HgvQhOISIsCcDjcZQ=
-----END CERTIFICATE-----
Generated at Sat May 17 19:41:19 2025 by rpki-client