Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Aa0Meig2bUGHNHGi8xdG7P8whQE.roa
File: Aa0Meig2bUGHNHGi8xdG7P8whQE.roa (raw, json)
Hash identifier: zNxvWytmtLOSLttqAs3P0AQDl0FjFNmgxYL603ZTbZ4=
Subject key identifier: 01:AD:0C:7A:28:36:6D:41:87:34:71:A2:F3:17:46:EC:FF:30:85:01
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 184D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Aa0Meig2bUGHNHGi8xdG7P8whQE.roa
Signing time: Sun 08 Jun 2025 11:39:33 +0000
ROA not before: Sun 08 Jun 2025 11:39:33 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6221 (0x184d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 11:39:33 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=01AD0C7A28366D41873471A2F31746ECFF308501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:52:2e:8d:c9:59:1f:1f:d2:25:87:d2:0f:
b0:c3:9c:58:8a:51:a5:a0:97:40:b6:2c:21:79:3f:
13:42:d8:33:69:d8:35:77:d9:cb:25:d4:76:b3:ac:
f4:9b:ea:b4:1f:9c:b9:27:e6:18:dc:c0:38:c4:3a:
6d:dc:b6:45:fb:20:5c:aa:a2:02:de:54:ee:18:a4:
5e:34:c9:e7:6a:07:11:83:d1:cb:46:dd:ba:bb:e4:
ad:4d:e9:39:54:b3:ec:9d:86:af:f4:fb:30:ee:c7:
34:fe:b3:0b:5b:ed:cd:05:9a:46:13:f4:01:df:a0:
90:a1:c3:67:ed:43:3e:be:1d:52:a7:d6:97:e3:94:
46:30:07:f6:d5:c5:0a:ea:19:3a:14:c2:37:36:d1:
4d:35:fb:83:0b:5a:11:21:f7:e2:8c:50:2c:0a:39:
2c:b1:ed:50:b7:fb:a7:9c:d4:12:72:1b:70:1f:4f:
1e:67:d0:0c:f1:8d:6b:db:d3:ba:74:56:20:e4:ba:
0d:39:27:b4:7b:03:6b:6f:19:0b:da:93:89:7e:75:
66:2b:62:b3:52:1f:36:19:60:ce:10:5d:c5:83:ea:
89:66:ab:c0:19:16:9c:da:6e:a8:46:a2:49:48:19:
ab:a9:fd:80:78:5e:8f:46:38:30:18:d5:16:aa:cd:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AD:0C:7A:28:36:6D:41:87:34:71:A2:F3:17:46:EC:FF:30:85:01
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Aa0Meig2bUGHNHGi8xdG7P8whQE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:59:5f:83:66:82:b5:14:1f:d9:0c:21:49:79:a8:fe:98:fd:
f1:b8:37:82:1c:bf:0e:36:09:6b:9f:19:a6:61:dd:61:e6:eb:
32:3b:b9:17:72:01:f8:42:39:5c:f7:71:28:b8:36:19:7c:fa:
b5:49:83:a0:1d:31:8d:d0:d3:24:a1:65:70:02:f8:8f:a9:23:
1e:8e:15:64:48:71:e6:44:f3:8b:1a:71:df:8e:b6:5a:ac:64:
bc:37:9b:ca:11:bd:49:32:e5:49:5b:73:28:ac:c3:41:1d:2f:
8e:cf:46:19:a0:e7:40:50:ce:a8:b0:d4:79:89:23:89:11:99:
6e:3c:59:fd:d9:55:27:aa:20:fa:a5:1e:6c:7d:ee:a0:25:d8:
68:ce:27:7e:06:47:49:08:9d:a7:0f:5b:81:54:ce:36:7e:12:
1f:ac:03:a5:d0:61:9e:c4:51:fc:31:12:c3:18:cb:06:f3:da:
fa:ff:04:9e:57:a0:ea:4e:3d:15:75:b9:79:06:47:c7:6e:03:
71:43:99:41:7b:37:bf:3c:f3:cf:ef:33:8b:35:d4:65:e7:69:
e2:20:79:71:8e:14:1a:06:d6:72:f3:9b:ce:c6:4d:c1:62:9d:
0f:23:61:74:f8:52:7e:8b:30:28:ba:bb:e5:1c:f6:85:3c:1f:
86:05:6a:a7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGE0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDgx
MTM5MzNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDAxQUQwQzdBMjgzNjZE
NDE4NzM0NzFBMkYzMTc0NkVDRkYzMDg1MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEVFIujclZHx/SJYfSD7DDnFiKUaWgl0C2LCF5PxNC2DNp2DV3
2csl1HazrPSb6rQfnLkn5hjcwDjEOm3ctkX7IFyqogLeVO4YpF40yedqBxGD0ctG
3bq75K1N6TlUs+ydhq/0+zDuxzT+swtb7c0FmkYT9AHfoJChw2ftQz6+HVKn1pfj
lEYwB/bVxQrqGToUwjc20U01+4MLWhEh9+KMUCwKOSyx7VC3+6ec1BJyG3AfTx5n
0AzxjWvb07p0ViDkug05J7R7A2tvGQvak4l+dWYrYrNSHzYZYM4QXcWD6olmq8AZ
FpzabqhGoklIGaup/YB4Xo9GODAY1RaqzYFjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUAa0Meig2bUGHNHGi8xdG7P8whQEwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9BYTBNZWlnMmJVR0hOSEdp
OHhkRzdQOHdoUUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAI5ZX4NmgrUUH9kMIUl5qP6Y/fG4N4Icvw42
CWufGaZh3WHm6zI7uRdyAfhCOVz3cSi4Nhl8+rVJg6AdMY3Q0yShZXAC+I+pIx6O
FWRIceZE84sacd+OtlqsZLw3m8oRvUky5Ulbcyisw0EdL47PRhmg50BQzqiw1HmJ
I4kRmW48Wf3ZVSeqIPqlHmx97qAl2GjOJ34GR0kInacPW4FUzjZ+Eh+sA6XQYZ7E
UfwxEsMYywbz2vr/BJ5XoOpOPRV1uXkGR8duA3FDmUF7N78888/vM4s11GXnaeIg
eXGOFBoG1nLzm87GTcFinQ8jYXT4Un6LMCi6u+Uc9oU8H4YFaqc=
-----END CERTIFICATE-----
Generated at Fri Jun 20 22:49:09 2025 by rpki-client