Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/7PExMy3vXtLuZsm4Nbr0-DXEToM.roa
File: 7PExMy3vXtLuZsm4Nbr0-DXEToM.roa (raw, json)
Hash identifier: 55OOyeSnNa8gXn+KEd1tAx2zq6ThWrB0yll3J9i43vY=
Subject key identifier: EC:F1:31:33:2D:EF:5E:D2:EE:66:C9:B8:35:BA:F4:F8:35:C4:4E:83
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1651
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7PExMy3vXtLuZsm4Nbr0-DXEToM.roa
Signing time: Thu 05 Jun 2025 20:09:27 +0000
ROA not before: Thu 05 Jun 2025 20:09:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5713 (0x1651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 20:09:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=ECF131332DEF5ED2EE66C9B835BAF4F835C44E83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:17:74:ae:84:68:27:bb:25:67:e3:27:7c:38:
ae:a3:f0:d0:22:2f:47:5a:51:d5:01:44:b1:e0:02:
59:dc:92:ee:7a:b3:d5:af:08:6a:30:f1:c2:42:b7:
c2:63:dc:18:a9:13:3d:74:db:84:13:3f:6e:59:fd:
51:7f:a3:84:1a:bb:3f:95:c5:38:c9:07:77:17:96:
53:d7:56:ef:f7:8a:31:6d:f7:3e:00:ad:aa:f1:91:
3c:a2:17:55:fe:ad:9a:46:e2:b9:7a:37:0c:50:ca:
15:92:a1:6e:05:28:5c:90:dc:72:4c:48:c7:74:ed:
f7:5f:0c:43:d1:27:e4:03:0f:4d:f3:bf:ab:bb:eb:
fd:38:84:70:ee:6a:ae:ef:90:38:87:2d:84:4c:45:
52:b3:24:b7:38:92:e1:46:34:d7:18:00:9e:d9:a5:
65:d1:e5:7b:88:a3:16:e3:4d:b6:1f:97:98:cd:37:
06:52:8c:8e:0e:f1:89:4f:c1:0b:2d:4a:10:fb:6b:
56:57:0a:9c:cc:1b:97:80:55:b3:c9:b7:22:65:8f:
c9:cd:47:c3:45:26:44:c1:50:b1:4b:c7:2c:cf:eb:
e3:8e:69:a0:80:2a:7f:4a:ec:c8:c4:f9:e1:d6:0c:
e5:6a:b4:5e:cd:49:47:9f:fc:95:2f:a4:07:39:1d:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F1:31:33:2D:EF:5E:D2:EE:66:C9:B8:35:BA:F4:F8:35:C4:4E:83
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7PExMy3vXtLuZsm4Nbr0-DXEToM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b0:3b:ae:86:3d:d8:8d:d5:83:f4:2a:9d:fd:0a:3c:ce:22:cc:
20:91:1c:11:05:29:05:09:84:d1:c3:cd:94:19:fd:87:73:d0:
8d:d4:26:29:fc:52:c6:4c:8a:f6:11:33:3f:28:79:d1:55:ea:
b6:0c:3c:60:89:27:43:d7:53:16:cb:d9:36:83:d2:38:f8:81:
be:0a:0a:cb:e3:ce:59:af:30:c7:b0:dc:f8:25:56:23:38:96:
6d:dd:b9:b4:bb:2c:8f:69:2f:1c:1e:38:ff:40:5e:81:6c:fa:
f7:54:95:ed:8f:ae:7b:fb:ab:b2:70:91:49:ed:f9:7c:2a:0d:
64:4b:2d:45:f4:f4:bc:7f:ce:88:73:ba:91:ac:ac:83:ba:19:
e3:df:31:b9:15:fc:cf:9a:50:ee:4d:8a:d4:5e:d4:5b:a7:f4:
94:aa:ba:fd:22:73:37:3f:cc:7e:97:ca:5d:43:4c:2d:a6:cd:
42:bf:f1:27:db:5e:17:8d:10:fd:c1:cb:12:1c:31:3b:8e:1a:
f3:ee:fd:70:06:51:74:24:61:57:c1:ac:14:5c:d3:bb:dd:18:
fc:5c:72:38:47:9c:1e:32:76:5e:c6:ce:46:c3:83:b5:e0:77:
21:98:d1:c4:68:84:7c:31:2a:0b:4d:98:c2:b3:18:21:0e:9f:
b2:2a:92:20
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFlEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDUy
MDA5MjdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEVDRjEzMTMzMkRFRjVF
RDJFRTY2QzlCODM1QkFGNEY4MzVDNDRFODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVF3SuhGgnuyVn4yd8OK6j8NAiL0daUdUBRLHgAlncku56s9Wv
CGow8cJCt8Jj3BipEz1024QTP25Z/VF/o4Qauz+VxTjJB3cXllPXVu/3ijFt9z4A
rarxkTyiF1X+rZpG4rl6NwxQyhWSoW4FKFyQ3HJMSMd07fdfDEPRJ+QDD03zv6u7
6/04hHDuaq7vkDiHLYRMRVKzJLc4kuFGNNcYAJ7ZpWXR5XuIoxbjTbYfl5jNNwZS
jI4O8YlPwQstShD7a1ZXCpzMG5eAVbPJtyJlj8nNR8NFJkTBULFLxyzP6+OOaaCA
Kn9K7MjE+eHWDOVqtF7NSUef/JUvpAc5HZUxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7PExMy3vXtLuZsm4Nbr0+DXEToMwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni83UEV4TXkzdlh0THVac200
TmJyMC1EWEVUb00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBALA7roY92I3Vg/Qqnf0KPM4izCCRHBEFKQUJ
hNHDzZQZ/Ydz0I3UJin8UsZMivYRMz8oedFV6rYMPGCJJ0PXUxbL2TaD0jj4gb4K
CsvjzlmvMMew3PglViM4lm3dubS7LI9pLxweOP9AXoFs+vdUle2Prnv7q7JwkUnt
+XwqDWRLLUX09Lx/zohzupGsrIO6GePfMbkV/M+aUO5NitRe1Fun9JSquv0iczc/
zH6Xyl1DTC2mzUK/8SfbXheNEP3ByxIcMTuOGvPu/XAGUXQkYVfBrBRc07vdGPxc
cjhHnB4ydl7GzkbDg7XgdyGY0cRohHwxKgtNmMKzGCEOn7IqkiA=
-----END CERTIFICATE-----
Generated at Sat Jun 21 14:21:56 2025 by rpki-client