Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/5Yf2sbc0F6lA4ZTHxFm0GmyARus.roa
File: 5Yf2sbc0F6lA4ZTHxFm0GmyARus.roa (raw, json)
Hash identifier: CXKouGlvgpjqlIAVh7B0fOuasEfQWOhlK41qSLwoUCY=
Subject key identifier: E5:87:F6:B1:B7:34:17:A9:40:E1:94:C7:C4:59:B4:1A:6C:80:46:EB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1C15
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5Yf2sbc0F6lA4ZTHxFm0GmyARus.roa
Signing time: Fri 13 Jun 2025 12:39:58 +0000
ROA not before: Fri 13 Jun 2025 12:39:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7189 (0x1c15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 12:39:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E587F6B1B73417A940E194C7C459B41A6C8046EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:52:79:4f:dd:a2:69:20:df:80:3e:03:9c:
14:27:96:0a:e4:cd:71:fc:28:9f:ee:05:8b:f4:90:
12:56:ce:be:83:9e:d2:ef:c5:25:71:04:10:91:b3:
d9:91:7d:8f:dc:af:b3:8f:29:81:74:de:c5:b4:07:
c2:91:46:8d:c4:19:05:8f:47:b6:41:76:bb:da:44:
3b:bf:3d:90:c6:7a:68:32:fd:ed:9d:d3:30:70:80:
10:1c:00:4b:52:e8:99:4c:77:a4:d5:c6:d4:b8:24:
3a:b4:1c:5d:e1:32:f2:6e:8b:47:9c:ff:48:a8:ca:
8f:51:b1:90:c5:8d:93:2c:01:c5:72:ea:41:05:08:
e9:08:69:b3:e6:8f:21:29:32:7d:fb:17:e9:37:5e:
4c:ae:5b:d0:6f:ae:2e:47:98:ec:a4:c6:72:21:07:
6d:69:8f:f6:b2:69:8c:c4:c8:8d:3b:1a:40:30:80:
7d:53:4e:56:2a:dc:a4:15:ad:3b:12:dd:3c:8e:47:
b1:05:f5:96:aa:76:d1:7e:f7:84:3c:e2:46:78:eb:
fc:4e:9e:ba:3e:2e:e1:0c:0d:37:d7:05:e9:31:13:
55:be:25:02:cf:b9:d5:93:05:cf:23:db:b0:b9:aa:
2f:0d:0a:a5:4d:1f:8a:19:0c:b0:53:c1:f8:86:d6:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:87:F6:B1:B7:34:17:A9:40:E1:94:C7:C4:59:B4:1A:6C:80:46:EB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5Yf2sbc0F6lA4ZTHxFm0GmyARus.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:5e:46:61:b7:06:e1:c0:cf:78:cc:24:cb:00:85:8c:bc:1f:
cf:5e:3e:fd:4d:a5:64:0b:70:ab:78:e2:b1:0b:db:f4:20:c6:
f2:d0:90:9a:0c:09:b7:32:2c:51:c4:9b:47:cb:c2:2f:78:9f:
e6:58:a5:22:7e:12:c3:19:bf:8c:b3:e7:39:03:7c:a3:87:0d:
b8:12:0d:0b:4a:a4:21:04:9c:7f:66:08:f2:7f:b2:bb:ff:fc:
9a:1f:7e:46:0f:1c:c0:1d:24:c6:41:3e:ce:39:e0:48:81:fb:
92:79:dc:ae:4e:2d:b5:9c:c7:2e:7a:0d:9b:ba:86:8b:61:ec:
d6:16:2e:f3:54:4d:71:a1:82:21:0d:f1:af:08:c1:52:9b:4a:
b3:4c:87:ab:2b:99:08:4d:9a:46:03:f2:ef:eb:74:a1:34:e7:
03:80:0c:43:d9:58:27:f6:5f:68:0b:18:fa:9c:fa:4d:80:6a:
22:3d:d1:c4:29:23:e6:f9:4d:40:fb:36:08:fd:f0:63:d9:92:
c4:6a:40:84:07:e6:93:03:be:5a:70:d0:dd:cd:3e:ce:17:a0:
78:1a:5a:78:42:f7:ef:61:50:56:bc:3c:26:02:94:ab:60:4a:
51:aa:4b:d7:ca:3d:25:86:c6:e8:a4:81:95:35:5c:9f:1b:39:
b5:38:ce:1e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTMx
MjM5NThaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEU1ODdGNkIxQjczNDE3
QTk0MEUxOTRDN0M0NTlCNDFBNkM4MDQ2RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4F1J5T92iaSDfgD4DnBQnlgrkzXH8KJ/uBYv0kBJWzr6DntLv
xSVxBBCRs9mRfY/cr7OPKYF03sW0B8KRRo3EGQWPR7ZBdrvaRDu/PZDGemgy/e2d
0zBwgBAcAEtS6JlMd6TVxtS4JDq0HF3hMvJui0ec/0ioyo9RsZDFjZMsAcVy6kEF
COkIabPmjyEpMn37F+k3XkyuW9Bvri5HmOykxnIhB21pj/ayaYzEyI07GkAwgH1T
TlYq3KQVrTsS3TyOR7EF9ZaqdtF+94Q84kZ46/xOnro+LuEMDTfXBekxE1W+JQLP
udWTBc8j27C5qi8NCqVNH4oZDLBTwfiG1jOdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU5Yf2sbc0F6lA4ZTHxFm0GmyARuswHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni81WWYyc2JjMEY2bEE0WlRI
eEZtMEdteUFSdXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAIdeRmG3BuHAz3jMJMsAhYy8H89ePv1NpWQL
cKt44rEL2/QgxvLQkJoMCbcyLFHEm0fLwi94n+ZYpSJ+EsMZv4yz5zkDfKOHDbgS
DQtKpCEEnH9mCPJ/srv//JoffkYPHMAdJMZBPs454EiB+5J53K5OLbWcxy56DZu6
hoth7NYWLvNUTXGhgiEN8a8IwVKbSrNMh6srmQhNmkYD8u/rdKE05wOADEPZWCf2
X2gLGPqc+k2AaiI90cQpI+b5TUD7Ngj98GPZksRqQIQH5pMDvlpw0N3NPs4XoHga
WnhC9+9hUFa8PCYClKtgSlGqS9fKPSWGxuikgZU1XJ8bObU4zh4=
-----END CERTIFICATE-----
Generated at Sat Jun 21 15:09:18 2025 by rpki-client