Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/9K6lQUgtqorub6M3YeXCkjXYShA.roa
File: 9K6lQUgtqorub6M3YeXCkjXYShA.roa (raw, json)
Hash identifier: Otbrf0zc9QIrfz1HXiYNyVoJNpoXP7p2IEl5WDHoY5w=
Subject key identifier: F4:AE:A5:41:48:2D:AA:8A:EE:6F:A3:37:61:E5:C2:92:35:D8:4A:10
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1761
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9K6lQUgtqorub6M3YeXCkjXYShA.roa
Signing time: Sat 07 Jun 2025 06:09:29 +0000
ROA not before: Sat 07 Jun 2025 06:09:29 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5985 (0x1761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 06:09:29 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F4AEA541482DAA8AEE6FA33761E5C29235D84A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:94:10:34:46:4a:05:3e:af:7b:eb:74:4a:
90:7a:66:4e:ae:b8:d5:a0:cf:06:2b:27:1b:a9:bc:
bd:f5:52:04:16:4f:2c:14:96:b6:bc:27:e8:95:98:
81:b7:63:be:ee:ea:c0:d5:55:3d:96:e7:69:01:97:
ba:ed:d0:47:be:22:20:87:f1:2d:54:f8:08:cc:f7:
bd:27:30:a5:75:9d:d5:7a:f2:14:84:dd:06:b1:6c:
87:18:8d:4f:22:76:bf:86:fe:6c:6d:ac:4b:b7:6a:
7e:fe:ef:33:3d:0c:e6:96:b4:0f:bd:5c:7a:08:02:
96:1a:46:94:d8:b2:da:35:0e:48:94:c0:33:87:be:
38:c9:a3:07:f6:12:ac:7f:a7:c6:5a:fa:44:e6:57:
fe:23:4e:80:9e:41:f1:ab:7b:6d:47:68:ef:f9:19:
64:53:d0:94:fa:a1:af:f5:d8:4f:30:1b:bd:8c:98:
be:88:08:8d:80:9c:a4:d8:df:f2:d6:f5:a6:8f:a9:
e7:8e:df:cb:4e:12:5e:cb:f2:52:1e:b4:52:e8:f3:
26:27:77:f1:ca:7e:b0:be:69:4f:ea:97:f3:61:c1:
ec:0c:a5:38:56:9c:e7:d4:f7:da:30:49:8b:44:20:
a6:d9:bc:e0:6a:fb:52:b5:9c:3a:c5:16:9e:44:dc:
03:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AE:A5:41:48:2D:AA:8A:EE:6F:A3:37:61:E5:C2:92:35:D8:4A:10
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9K6lQUgtqorub6M3YeXCkjXYShA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:4f:4b:df:f1:d0:8e:03:ac:91:55:9e:b3:fb:99:a7:2b:ce:
eb:55:cc:41:3d:dd:35:be:4f:c5:19:65:4f:dc:b0:9c:4b:2a:
70:12:7d:70:83:7f:ee:d8:c0:88:6b:6b:3a:08:8a:4a:31:71:
17:2a:18:fc:08:16:0c:0e:86:ae:9a:7f:42:01:a5:96:97:98:
3a:61:9f:87:29:84:b1:4d:0e:1f:16:c1:73:fa:57:36:10:9f:
ae:71:87:ce:73:59:d3:c4:84:01:5d:af:e5:e3:16:37:4d:d0:
a6:56:37:53:cb:04:58:00:1d:88:3e:a6:cf:9a:98:d4:71:a7:
33:2a:ab:ef:29:2d:1f:68:14:80:71:74:21:35:b6:93:93:d7:
39:65:e6:a6:96:d7:20:de:d1:dd:3a:b5:7b:51:b2:4f:6a:bd:
3d:18:ff:0e:04:38:5d:5b:e6:d0:6b:13:25:a8:7f:f2:b7:40:
5b:91:52:46:81:7d:90:23:92:d2:bb:50:99:f4:64:1e:a4:78:
7a:47:f9:7e:d9:75:89:4c:14:33:f3:d1:90:db:9c:5a:4b:28:
2a:4f:13:93:44:30:d4:15:16:b0:73:24:c0:19:4a:af:3e:5c:
be:75:2a:2a:6b:82:ec:c5:70:9b:db:cf:a9:9d:49:53:cd:34:
54:b3:14:11
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF2EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDcw
NjA5MjlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEY0QUVBNTQxNDgyREFB
OEFFRTZGQTMzNzYxRTVDMjkyMzVEODRBMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7/ZQQNEZKBT6ve+t0SpB6Zk6uuNWgzwYrJxupvL31UgQWTywU
lra8J+iVmIG3Y77u6sDVVT2W52kBl7rt0Ee+IiCH8S1U+AjM970nMKV1ndV68hSE
3QaxbIcYjU8idr+G/mxtrEu3an7+7zM9DOaWtA+9XHoIApYaRpTYsto1DkiUwDOH
vjjJowf2Eqx/p8Za+kTmV/4jToCeQfGre21HaO/5GWRT0JT6oa/12E8wG72MmL6I
CI2AnKTY3/LW9aaPqeeO38tOEl7L8lIetFLo8yYnd/HKfrC+aU/ql/NhwewMpThW
nOfU99owSYtEIKbZvOBq+1K1nDrFFp5E3AMbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU9K6lQUgtqorub6M3YeXCkjXYShAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni85SzZsUVVndHFvcnViNk0z
WWVYQ2tqWFlTaEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAAhPS9/x0I4DrJFVnrP7macrzutVzEE93TW+
T8UZZU/csJxLKnASfXCDf+7YwIhrazoIikoxcRcqGPwIFgwOhq6af0IBpZaXmDph
n4cphLFNDh8WwXP6VzYQn65xh85zWdPEhAFdr+XjFjdN0KZWN1PLBFgAHYg+ps+a
mNRxpzMqq+8pLR9oFIBxdCE1tpOT1zll5qaW1yDe0d06tXtRsk9qvT0Y/w4EOF1b
5tBrEyWof/K3QFuRUkaBfZAjktK7UJn0ZB6keHpH+X7ZdYlMFDPz0ZDbnFpLKCpP
E5NEMNQVFrBzJMAZSq8+XL51KiprguzFcJvbz6mdSVPNNFSzFBE=
-----END CERTIFICATE-----
Generated at Sun Jun 22 01:12:11 2025 by rpki-client