Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/uitVCyhnE38_jrN_41TuTRtDSTw.roa
File: uitVCyhnE38_jrN_41TuTRtDSTw.roa (raw, json)
Hash identifier: y4A28tzOSm1e/IMASN+y01dV4sdlzg30q25r0u9CHmE=
Subject key identifier: BA:2B:55:0B:28:67:13:7F:3F:8E:B3:7F:E3:54:EE:4D:1B:43:49:3C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01A1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uitVCyhnE38_jrN_41TuTRtDSTw.roa
Signing time: Fri 09 May 2025 06:07:46 +0000
ROA not before: Fri 09 May 2025 06:07:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 06:07:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BA2B550B2867137F3F8EB37FE354EE4D1B43493C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:10:77:11:2c:58:bc:13:a2:5f:4b:d7:13:79:
0c:5b:01:c2:58:a1:88:80:d6:25:42:01:fb:f0:54:
bf:37:45:10:ee:f0:f1:42:77:f4:8a:07:86:24:a4:
fd:29:ff:e6:54:a6:d3:c2:32:c9:e5:76:eb:c5:96:
e2:67:94:11:53:2f:46:57:51:55:63:12:9c:7f:41:
e2:47:45:dc:76:d8:76:91:e3:09:0e:08:fa:b7:c3:
bd:1e:47:3d:dc:23:20:b4:a0:68:45:c9:2a:2f:f3:
4a:1e:42:1c:cc:b2:35:df:8b:05:82:66:0c:1d:33:
65:8e:4f:2b:c0:51:82:94:9d:c8:1d:f6:ae:eb:13:
2a:4c:84:8e:39:8b:a0:e9:18:55:93:20:04:f9:aa:
ba:04:b7:1b:40:36:17:4b:ba:fe:7f:94:98:d8:91:
e3:76:4b:ce:5d:b6:13:d6:d2:86:04:df:02:e7:46:
14:b0:eb:1e:3d:24:8c:b1:6f:53:0e:21:2d:91:2e:
dc:75:55:38:06:68:26:b9:86:69:ac:2a:11:82:da:
24:e7:87:45:de:96:f1:b5:73:0b:0f:89:90:93:b2:
9c:1c:5a:b5:76:3c:bd:b7:50:d4:3c:d2:8e:01:20:
00:06:1b:a0:54:c3:d1:71:36:3c:10:46:55:b2:d8:
d7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2B:55:0B:28:67:13:7F:3F:8E:B3:7F:E3:54:EE:4D:1B:43:49:3C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uitVCyhnE38_jrN_41TuTRtDSTw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:37:27:e4:9a:4c:63:82:68:7a:2e:5d:4f:3c:a5:ab:f8:26:
29:6e:ab:3b:b1:71:b8:d0:43:72:fd:36:6a:49:c9:fd:94:8a:
e4:45:05:c6:3c:ac:84:c0:fd:0b:e9:87:b1:6b:47:23:69:b5:
61:8e:79:d3:33:e3:0f:35:21:3a:46:1c:56:ca:06:f2:8f:1a:
71:63:85:76:34:7c:c5:26:28:1f:05:3a:ce:e4:f4:0a:66:2b:
cb:b8:74:c0:bc:57:60:de:fe:10:bd:34:8f:2e:03:02:02:8d:
a5:6c:ab:18:1a:cb:84:04:96:40:18:47:5a:eb:f2:01:57:28:
c7:29:95:29:bb:8f:88:ad:f8:ed:5c:c9:e0:da:2d:6e:c5:d6:
a8:b9:c8:4f:49:ba:7b:4d:45:71:ca:85:3a:30:cc:aa:d4:da:
5b:77:c0:33:0b:12:e1:f6:68:17:52:f6:e7:1f:d5:fa:b3:ac:
99:2e:75:ac:29:b2:11:c7:16:13:b9:bb:3a:12:3f:94:a0:69:
de:2a:53:7b:fc:a1:21:29:27:3b:e4:26:5d:7c:91:bc:83:f1:
ce:36:d0:60:54:c4:f4:9f:7a:20:10:7a:e7:4e:64:50:9f:93:
37:b1:68:27:5b:87:f7:05:19:05:b5:6d:1f:82:29:12:d5:ad:
78:d1:71:86
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDkw
NjA3NDZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEJBMkI1NTBCMjg2NzEz
N0YzRjhFQjM3RkUzNTRFRTREMUI0MzQ5M0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkEHcRLFi8E6JfS9cTeQxbAcJYoYiA1iVCAfvwVL83RRDu8PFC
d/SKB4YkpP0p/+ZUptPCMsnlduvFluJnlBFTL0ZXUVVjEpx/QeJHRdx22HaR4wkO
CPq3w70eRz3cIyC0oGhFySov80oeQhzMsjXfiwWCZgwdM2WOTyvAUYKUncgd9q7r
EypMhI45i6DpGFWTIAT5qroEtxtANhdLuv5/lJjYkeN2S85dthPW0oYE3wLnRhSw
6x49JIyxb1MOIS2RLtx1VTgGaCa5hmmsKhGC2iTnh0XelvG1cwsPiZCTspwcWrV2
PL23UNQ80o4BIAAGG6BUw9FxNjwQRlWy2NdJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUuitVCyhnE38/jrN/41TuTRtDSTwwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni91aXRWQ3lobkUzOF9qck5f
NDFUdVRSdERTVHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAIE3J+SaTGOCaHouXU88pav4JiluqzuxcbjQ
Q3L9NmpJyf2UiuRFBcY8rITA/Qvph7FrRyNptWGOedMz4w81ITpGHFbKBvKPGnFj
hXY0fMUmKB8FOs7k9ApmK8u4dMC8V2De/hC9NI8uAwICjaVsqxgay4QElkAYR1rr
8gFXKMcplSm7j4it+O1cyeDaLW7F1qi5yE9JuntNRXHKhTowzKrU2lt3wDMLEuH2
aBdS9ucf1fqzrJkudawpshHHFhO5uzoSP5Sgad4qU3v8oSEpJzvkJl18kbyD8c42
0GBUxPSfeiAQeudOZFCfkzexaCdbh/cFGQW1bR+CKRLVrXjRcYY=
-----END CERTIFICATE-----
Generated at Sat May 17 21:43:58 2025 by rpki-client