Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-kVqtQxvWrqfhaXiPuRGLZEO4kI.roa
File: -kVqtQxvWrqfhaXiPuRGLZEO4kI.roa (raw, json)
Hash identifier: 1niQwEpyYPozJWjo5TCne7n7/E/JmJQ3LHDsNUYHoKU=
Subject key identifier: FA:45:6A:B5:0C:6F:5A:BA:9F:85:A5:E2:3E:E4:46:2D:91:0E:E2:42
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1749
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-kVqtQxvWrqfhaXiPuRGLZEO4kI.roa
Signing time: Sat 07 Jun 2025 03:09:29 +0000
ROA not before: Sat 07 Jun 2025 03:09:29 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5961 (0x1749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 03:09:29 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FA456AB50C6F5ABA9F85A5E23EE4462D910EE242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:96:12:a7:52:d4:08:88:ba:85:62:5e:1b:
76:79:6d:81:ca:6f:24:ad:4a:25:cd:5b:25:f3:d1:
18:93:6d:74:99:7e:6d:57:4e:09:b0:ff:38:d5:72:
bc:3a:d7:c7:d7:bb:9a:4b:11:36:bb:58:07:b5:c2:
f3:a9:02:48:0c:cd:b1:dc:56:30:38:7a:ee:30:10:
0a:fb:26:ba:99:b4:0e:53:8e:76:7c:bf:0c:2f:36:
10:0c:47:bc:0e:e0:0e:e8:52:9e:35:a9:b9:34:74:
d3:20:13:21:c7:7e:a9:78:75:7e:ac:99:60:4f:ac:
71:02:58:18:64:b0:d9:ed:9b:df:1c:ef:6a:d2:df:
c7:32:ee:12:9d:32:3c:da:a3:1e:22:c0:08:67:55:
f7:27:96:b3:2f:5f:39:72:34:a9:f9:cc:ba:53:c9:
e3:0b:22:16:d0:c6:52:8a:c6:25:c7:8a:3f:b0:ae:
71:58:ba:91:f4:81:c5:cf:18:fc:fb:0f:7c:b3:6d:
40:08:1b:f2:f9:37:42:8b:04:90:23:8a:41:46:04:
b0:a8:4e:1e:a6:61:9b:1f:6f:96:9d:0e:77:9a:c6:
b4:ac:47:2a:28:86:b3:d7:f5:80:d0:86:22:15:7d:
a7:1c:72:4f:c0:9b:15:b6:77:d9:70:e4:21:ca:8a:
11:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:45:6A:B5:0C:6F:5A:BA:9F:85:A5:E2:3E:E4:46:2D:91:0E:E2:42
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-kVqtQxvWrqfhaXiPuRGLZEO4kI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:8e:a9:11:30:57:2e:5b:2d:aa:c8:1a:dc:f6:d2:4d:1f:c7:
70:95:e8:2b:e1:7c:b1:84:04:48:c1:51:b2:93:2e:4b:4a:fc:
bc:56:be:fa:4d:cf:1a:96:62:09:3e:dc:e8:4a:24:c1:85:58:
1f:47:e4:6b:5b:ef:49:f4:89:6c:9a:af:bd:4c:6d:98:ac:37:
59:7e:cf:9f:32:00:79:23:f8:57:08:ed:e7:f6:8a:65:cb:8d:
f4:ff:61:07:ab:a6:5e:72:74:a6:11:e9:81:91:08:ea:29:1c:
07:f6:23:1f:bc:3c:8e:44:d1:a3:eb:6d:10:e0:d4:d1:82:18:
df:99:7f:41:7e:38:17:1c:67:a5:cf:01:39:8a:b1:bf:63:9f:
2b:a8:8a:8a:62:1a:b9:59:a6:14:bb:21:8f:04:73:9a:bc:bb:
d4:47:23:16:84:27:d3:de:00:ba:c5:cb:b9:2e:c7:84:0b:23:
7c:fd:41:09:af:4b:71:bf:d3:b0:ac:e5:f5:37:e0:b1:7f:6d:
5d:98:2f:b6:4a:65:e1:d4:6e:4e:fe:01:7a:56:ec:bf:dc:f4:
48:0f:72:dc:6a:34:0c:4a:33:6e:c5:28:1e:01:7f:e3:aa:b3:
5a:d9:83:ae:84:55:a5:ea:5e:c3:ec:e2:5d:e4:1f:3d:3e:47:
6e:cb:45:2b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF0kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDcw
MzA5MjlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEZBNDU2QUI1MEM2RjVB
QkE5Rjg1QTVFMjNFRTQ0NjJEOTEwRUUyNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBvZYSp1LUCIi6hWJeG3Z5bYHKbyStSiXNWyXz0RiTbXSZfm1X
Tgmw/zjVcrw618fXu5pLETa7WAe1wvOpAkgMzbHcVjA4eu4wEAr7JrqZtA5TjnZ8
vwwvNhAMR7wO4A7oUp41qbk0dNMgEyHHfql4dX6smWBPrHECWBhksNntm98c72rS
38cy7hKdMjzaox4iwAhnVfcnlrMvXzlyNKn5zLpTyeMLIhbQxlKKxiXHij+wrnFY
upH0gcXPGPz7D3yzbUAIG/L5N0KLBJAjikFGBLCoTh6mYZsfb5adDneaxrSsRyoo
hrPX9YDQhiIVfaccck/AmxW2d9lw5CHKihEJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+kVqtQxvWrqfhaXiPuRGLZEO4kIwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni8ta1ZxdFF4dldycWZoYVhp
UHVSR0xaRU80a0kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBACOOqREwVy5bLarIGtz20k0fx3CV6CvhfLGE
BEjBUbKTLktK/LxWvvpNzxqWYgk+3OhKJMGFWB9H5Gtb70n0iWyar71MbZisN1l+
z58yAHkj+FcI7ef2imXLjfT/YQerpl5ydKYR6YGRCOopHAf2Ix+8PI5E0aPrbRDg
1NGCGN+Zf0F+OBccZ6XPATmKsb9jnyuoiopiGrlZphS7IY8Ec5q8u9RHIxaEJ9Pe
ALrFy7kux4QLI3z9QQmvS3G/07Cs5fU34LF/bV2YL7ZKZeHUbk7+AXpW7L/c9EgP
ctxqNAxKM27FKB4Bf+Oqs1rZg66EVaXqXsPs4l3kHz0+R27LRSs=
-----END CERTIFICATE-----
Generated at Sun Jun 22 15:38:17 2025 by rpki-client