Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/5V839dFmilQjhLQ7pEJwPPVeqyE.roa
File: 5V839dFmilQjhLQ7pEJwPPVeqyE.roa (raw, json)
Hash identifier: GMtnFHLqsUloiavidntWYpkGz1FwdBzis4sqmBWoSqI=
Subject key identifier: E5:5F:37:F5:D1:66:8A:54:23:84:B4:3B:A4:42:70:3C:F5:5E:AB:21
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0555
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5V839dFmilQjhLQ7pEJwPPVeqyE.roa
Signing time: Wed 14 May 2025 04:38:10 +0000
ROA not before: Wed 14 May 2025 04:38:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1365 (0x555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 04:38:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E55F37F5D1668A542384B43BA442703CF55EAB21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:bb:25:30:20:e7:4e:b4:46:f8:38:13:b0:
ee:bb:c5:f6:4e:b5:a9:48:bc:4b:2a:6d:5b:02:a7:
1e:03:ff:f3:24:0f:7c:c1:a5:b3:c4:c8:93:72:ee:
73:1b:a4:e3:bd:ad:a2:33:b2:59:19:c2:fe:fa:38:
15:e3:9c:cc:4d:c6:42:8d:b8:31:3b:9a:13:3a:37:
07:64:f7:23:b1:8f:c6:13:cc:e0:f8:c8:85:35:57:
69:b3:8a:6b:e2:74:82:fe:cd:45:59:a3:62:94:79:
b0:ba:b9:b0:a9:df:66:dd:85:75:47:af:84:99:90:
14:4e:49:75:c1:e0:1c:17:bc:91:03:62:ee:68:44:
6f:ff:1d:2b:24:b8:7a:ec:05:79:a6:5c:28:a1:7f:
49:da:5b:b6:e2:a2:b1:c6:c9:dc:ed:6b:1e:59:fa:
72:7f:0c:c3:94:12:7f:52:4d:c4:5d:ed:83:e4:c1:
69:a3:f2:e6:d0:a9:f0:1c:98:bd:2d:4d:ca:49:e1:
4f:28:77:c6:25:fe:4a:ce:f5:40:72:c4:c7:e9:3f:
4f:77:a9:49:7f:97:b7:dc:6d:07:5f:9f:4b:07:4d:
fa:f0:71:56:99:88:90:3c:77:74:40:ab:bc:87:88:
3a:c9:8a:6a:37:75:fc:a5:dc:2b:7d:65:9c:a6:3a:
e9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5F:37:F5:D1:66:8A:54:23:84:B4:3B:A4:42:70:3C:F5:5E:AB:21
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5V839dFmilQjhLQ7pEJwPPVeqyE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:5e:d9:70:f3:bf:c2:1c:2a:a0:b5:a9:ee:82:f6:af:9e:c1:
e8:51:52:c0:cd:89:38:9c:45:e8:00:48:a5:ff:fb:cc:1e:d7:
80:ea:b7:b3:be:d0:11:1e:ab:37:48:bc:95:5a:e9:b7:73:d7:
31:92:4e:9b:d9:5e:0e:75:be:80:56:67:40:1a:68:0d:eb:bd:
54:85:0f:ee:bd:07:b1:f3:33:b4:03:ba:4a:10:c4:79:f2:cd:
e4:ac:a8:14:13:77:5b:a8:39:79:f8:09:51:7c:c7:3f:a5:fb:
2e:56:78:3b:c6:97:b2:47:79:ab:20:37:d9:7d:b9:06:c3:df:
f1:e2:02:06:2f:e8:d2:b7:bd:e0:67:4b:a3:63:5f:93:5b:ba:
95:e9:bf:c7:01:fe:20:a7:79:c5:6a:84:e6:44:9d:51:b4:fb:
0b:1e:c8:a9:a8:b2:bd:fb:e9:74:0b:f8:08:cf:85:d5:9a:84:
47:81:d0:33:4c:88:c9:7c:97:d3:1b:d6:4b:c4:a0:ad:d4:4f:
ec:b5:36:0e:9a:94:f9:9b:f4:17:62:30:77:10:74:9c:18:c4:
4e:0b:6f:53:60:f9:81:83:68:67:09:63:7e:c2:f0:a7:0d:a5:
04:18:5a:da:31:97:60:c8:07:af:19:b2:94:06:11:2f:8b:7f:
dd:9f:32:eb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBVUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTQw
NDM4MTBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEU1NUYzN0Y1RDE2NjhB
NTQyMzg0QjQzQkE0NDI3MDNDRjU1RUFCMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHrbslMCDnTrRG+DgTsO67xfZOtalIvEsqbVsCpx4D//MkD3zB
pbPEyJNy7nMbpOO9raIzslkZwv76OBXjnMxNxkKNuDE7mhM6Nwdk9yOxj8YTzOD4
yIU1V2mzimvidIL+zUVZo2KUebC6ubCp32bdhXVHr4SZkBROSXXB4BwXvJEDYu5o
RG//HSskuHrsBXmmXCihf0naW7biorHGydztax5Z+nJ/DMOUEn9STcRd7YPkwWmj
8ubQqfAcmL0tTcpJ4U8od8Yl/krO9UByxMfpP093qUl/l7fcbQdfn0sHTfrwcVaZ
iJA8d3RAq7yHiDrJimo3dfyl3Ct9ZZymOul7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU5V839dFmilQjhLQ7pEJwPPVeqyEwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni81VjgzOWRGbWlsUWpoTFE3
cEVKd1BQVmVxeUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBABRe2XDzv8IcKqC1qe6C9q+ewehRUsDNiTic
RegASKX/+8we14Dqt7O+0BEeqzdIvJVa6bdz1zGSTpvZXg51voBWZ0AaaA3rvVSF
D+69B7HzM7QDukoQxHnyzeSsqBQTd1uoOXn4CVF8xz+l+y5WeDvGl7JHeasgN9l9
uQbD3/HiAgYv6NK3veBnS6NjX5NbupXpv8cB/iCnecVqhOZEnVG0+wseyKmosr37
6XQL+AjPhdWahEeB0DNMiMl8l9Mb1kvEoK3UT+y1Ng6alPmb9BdiMHcQdJwYxE4L
b1Ng+YGDaGcJY37C8KcNpQQYWtoxl2DIB68ZspQGES+Lf92fMus=
-----END CERTIFICATE-----
Generated at Sun Jun 22 03:58:19 2025 by rpki-client