Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/64o82NzMWknwkWBYF-cvO7_keU8.roa
File: 64o82NzMWknwkWBYF-cvO7_keU8.roa (raw, json)
Hash identifier: WScE7PaF662Eff+RnsKY8BMvTjOzcFvUq0KkBtpXFVs=
Subject key identifier: EB:8A:3C:D8:DC:CC:5A:49:F0:91:60:58:17:E7:2F:3B:BF:E4:79:4F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07B1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/64o82NzMWknwkWBYF-cvO7_keU8.roa
Signing time: Sat 17 May 2025 08:08:53 +0000
ROA not before: Sat 17 May 2025 08:08:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1969 (0x7b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 08:08:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EB8A3CD8DCCC5A49F091605817E72F3BBFE4794F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:d5:5f:d0:5e:27:78:c3:84:40:fb:d7:1e:
7b:af:ea:c1:de:74:b6:24:5f:74:9d:40:f4:f7:f0:
67:49:ca:99:c1:45:2a:88:9d:fe:11:69:0b:a3:c2:
bf:29:42:b8:d7:17:8d:33:be:ab:ea:1f:45:a1:1c:
dd:83:57:0d:4e:09:17:4f:2e:28:40:39:d8:32:50:
71:1f:b4:d2:83:a4:6b:58:7d:9e:10:fc:70:91:1d:
93:f3:e2:89:c0:52:19:ea:94:58:8c:7f:97:d6:e8:
ef:35:03:b1:5c:5d:3e:1c:2e:7a:ce:01:56:c5:05:
96:19:31:69:87:86:a2:65:80:c2:f6:02:7f:fd:2e:
40:3c:f7:10:51:e2:64:75:26:37:d9:2a:c9:bd:26:
1a:c0:81:f8:7d:2c:82:23:b4:d3:fd:4d:89:d6:5e:
76:0a:4f:b8:b7:d7:d1:b5:bb:ef:67:49:99:c7:08:
9e:78:90:22:be:88:9e:84:06:16:47:22:11:4a:80:
f6:16:17:3a:33:b3:0d:f4:44:59:ad:e8:45:00:42:
d1:b0:a7:f4:95:13:07:19:90:90:6a:bb:bb:35:f0:
7a:28:0b:c9:fb:03:b7:8f:e1:81:78:12:43:60:47:
4c:01:00:90:5d:66:a3:d1:f0:44:b0:2b:a1:32:66:
e8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8A:3C:D8:DC:CC:5A:49:F0:91:60:58:17:E7:2F:3B:BF:E4:79:4F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/64o82NzMWknwkWBYF-cvO7_keU8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:4d:7b:dc:74:4f:65:dd:c3:22:cb:65:38:6f:9d:07:91:42:
9e:bc:aa:45:d0:a0:6a:bc:e7:f5:0a:8f:e0:a3:26:bb:e5:30:
47:09:fc:63:18:39:a5:87:da:8e:08:1e:1e:18:1e:f7:09:9d:
a6:fd:d7:f5:79:d6:9f:fe:1d:97:01:70:b4:6b:8c:dd:bc:12:
ca:9c:01:8b:e5:f7:52:5b:fa:8f:8d:62:8c:9c:c8:2b:2d:a1:
68:9d:e1:0f:dc:c2:1e:27:a9:73:c8:97:8d:8b:d8:1c:f0:95:
ac:64:8b:1d:7a:35:c2:24:ea:01:01:49:d4:36:72:42:a9:28:
ad:13:66:8a:ac:81:6a:ca:03:dc:1d:34:86:49:79:8f:59:b4:
4a:37:69:2c:10:c7:cb:56:f2:db:0c:df:7d:9a:c8:8a:9e:bb:
6a:6e:08:f9:3b:85:b6:5a:cf:ba:3b:77:ca:c5:3f:74:cb:c4:
ab:ac:aa:c6:d1:51:55:91:48:0b:98:20:82:af:7d:55:dc:96:
55:02:e0:6c:53:a0:ec:1c:4e:1d:91:3b:92:be:52:bc:03:c2:
3b:6c:44:33:1b:26:f2:39:41:02:75:46:5c:d2:8f:cb:a2:ad:
4a:bd:87:d6:f2:7c:1a:f0:2e:73:8f:35:d5:c3:5f:83:64:9a:
b4:ef:d2:15
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTcw
ODA4NTNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEVCOEEzQ0Q4RENDQzVB
NDlGMDkxNjA1ODE3RTcyRjNCQkZFNDc5NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCa5NVf0F4neMOEQPvXHnuv6sHedLYkX3SdQPT38GdJypnBRSqI
nf4RaQujwr8pQrjXF40zvqvqH0WhHN2DVw1OCRdPLihAOdgyUHEftNKDpGtYfZ4Q
/HCRHZPz4onAUhnqlFiMf5fW6O81A7FcXT4cLnrOAVbFBZYZMWmHhqJlgML2An/9
LkA89xBR4mR1JjfZKsm9JhrAgfh9LIIjtNP9TYnWXnYKT7i319G1u+9nSZnHCJ54
kCK+iJ6EBhZHIhFKgPYWFzozsw30RFmt6EUAQtGwp/SVEwcZkJBqu7s18HooC8n7
A7eP4YF4EkNgR0wBAJBdZqPR8ESwK6EyZug/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU64o82NzMWknwkWBYF+cvO7/keU8wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni82NG84Mk56TVdrbndrV0JZ
Ri1jdk83X2tlVTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAGNNe9x0T2XdwyLLZThvnQeRQp68qkXQoGq8
5/UKj+CjJrvlMEcJ/GMYOaWH2o4IHh4YHvcJnab91/V51p/+HZcBcLRrjN28Esqc
AYvl91Jb+o+NYoycyCstoWid4Q/cwh4nqXPIl42L2Bzwlaxkix16NcIk6gEBSdQ2
ckKpKK0TZoqsgWrKA9wdNIZJeY9ZtEo3aSwQx8tW8tsM332ayIqeu2puCPk7hbZa
z7o7d8rFP3TLxKusqsbRUVWRSAuYIIKvfVXcllUC4GxToOwcTh2RO5K+UrwDwjts
RDMbJvI5QQJ1RlzSj8uirUq9h9byfBrwLnOPNdXDX4NkmrTv0hU=
-----END CERTIFICATE-----
Generated at Fri Jun 20 21:27:49 2025 by rpki-client