Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/AavPsSqmLVHQjl_ILi20FCgSD-4.roa
File: AavPsSqmLVHQjl_ILi20FCgSD-4.roa (raw, json)
Hash identifier: XSkCabT2CCvSNFHFJQDPTQCPqRGafcLuzT7gLitPxIw=
Subject key identifier: 01:AB:CF:B1:2A:A6:2D:51:D0:8E:5F:C8:2E:2D:B4:14:28:12:0F:EE
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 173D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AavPsSqmLVHQjl_ILi20FCgSD-4.roa
Signing time: Sat 07 Jun 2025 01:39:28 +0000
ROA not before: Sat 07 Jun 2025 01:39:28 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5949 (0x173d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 01:39:28 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=01ABCFB12AA62D51D08E5FC82E2DB41428120FEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:99:72:07:69:93:e1:32:cd:a5:30:69:96:2c:
03:cc:28:b2:37:4e:c7:a8:04:93:e7:2d:29:81:91:
ed:67:51:e4:dc:18:71:a5:52:8b:76:15:95:da:b0:
40:51:47:23:c0:c6:95:0a:a8:9f:ef:04:03:31:84:
47:33:96:a9:57:35:d6:8e:15:61:53:40:5c:6d:36:
ff:d2:8c:74:d2:26:6e:4b:96:a0:dc:ef:29:29:bb:
99:50:a3:91:df:07:fe:6f:e6:d5:63:c1:93:d3:ff:
db:56:c9:fb:96:65:cd:0c:06:a0:97:ae:c2:a1:78:
74:57:10:5a:1d:f0:9a:ee:4a:a5:dd:fa:01:79:61:
b3:4c:bb:a6:4c:fd:fd:1f:e9:88:eb:bb:58:02:9a:
4c:1b:ca:e2:d8:11:d6:ab:33:11:88:6c:63:d6:e5:
2c:44:f6:11:00:26:30:90:54:71:b9:bb:9d:75:3a:
9c:5f:24:12:52:31:7e:44:62:c2:f0:b1:50:ee:7a:
43:0f:b0:f4:bf:59:7a:74:cd:5e:2f:52:f4:6c:0c:
4c:db:7f:73:8f:d8:b2:4e:d3:c1:eb:a6:bd:b4:9e:
5e:51:60:3c:3b:19:1d:fa:d9:83:dd:b8:0f:df:4d:
fe:b4:af:16:fa:26:82:58:03:f1:11:67:60:f2:f8:
1c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AB:CF:B1:2A:A6:2D:51:D0:8E:5F:C8:2E:2D:B4:14:28:12:0F:EE
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AavPsSqmLVHQjl_ILi20FCgSD-4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:3f:1b:2f:3e:d3:e2:8e:17:88:7e:c5:31:43:83:d7:a3:8e:
4c:17:04:50:ad:8e:81:c2:85:0d:48:2f:74:9c:82:5e:61:40:
ff:b6:d4:e2:08:7e:93:c5:97:c0:85:f9:03:66:7c:f9:20:d8:
24:d4:8f:6b:54:4e:48:d9:05:0a:9b:41:98:7a:68:fb:0e:5b:
b4:a3:d9:a5:03:dd:93:48:f6:26:2d:4c:5e:6a:a8:82:66:2b:
ed:8f:51:8b:80:df:38:0f:63:32:1a:6a:b9:fb:d4:3b:3c:4b:
ae:f0:a7:c9:46:49:72:c4:8b:d2:4a:b1:3d:f8:25:3d:5e:78:
5b:78:df:34:58:48:b0:c2:76:07:23:c3:9e:bf:31:ed:65:28:
6f:30:62:01:d4:e8:fb:17:a4:72:84:6f:7c:a5:31:d9:3e:2e:
62:65:76:4a:2e:e2:af:98:fa:c7:60:b0:83:4b:3d:04:f5:a7:
0b:e7:aa:46:74:9e:b0:3d:94:3b:39:86:42:a1:04:f8:04:39:
3f:47:54:a3:dc:93:ff:ec:6a:ec:08:e2:02:fd:8d:3f:50:c0:
cd:e4:b0:29:93:3b:29:4e:75:c7:cd:48:ac:fd:05:a9:31:9e:
5e:b0:6a:1a:27:26:3b:2e:7d:65:ba:b8:72:71:65:00:91:bc:
f2:3f:28:76
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFz0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDcw
MTM5MjhaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDAxQUJDRkIxMkFBNjJE
NTFEMDhFNUZDODJFMkRCNDE0MjgxMjBGRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhmXIHaZPhMs2lMGmWLAPMKLI3TseoBJPnLSmBke1nUeTcGHGl
Uot2FZXasEBRRyPAxpUKqJ/vBAMxhEczlqlXNdaOFWFTQFxtNv/SjHTSJm5LlqDc
7ykpu5lQo5HfB/5v5tVjwZPT/9tWyfuWZc0MBqCXrsKheHRXEFod8JruSqXd+gF5
YbNMu6ZM/f0f6Yjru1gCmkwbyuLYEdarMxGIbGPW5SxE9hEAJjCQVHG5u511Opxf
JBJSMX5EYsLwsVDuekMPsPS/WXp0zV4vUvRsDEzbf3OP2LJO08Hrpr20nl5RYDw7
GR362YPduA/fTf60rxb6JoJYA/ERZ2Dy+BxZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUAavPsSqmLVHQjl/ILi20FCgSD+4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9BYXZQc1NxbUxWSFFqbF9J
TGkyMEZDZ1NELTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAKI/Gy8+0+KOF4h+xTFDg9ejjkwXBFCtjoHC
hQ1IL3Scgl5hQP+21OIIfpPFl8CF+QNmfPkg2CTUj2tUTkjZBQqbQZh6aPsOW7Sj
2aUD3ZNI9iYtTF5qqIJmK+2PUYuA3zgPYzIaarn71Ds8S67wp8lGSXLEi9JKsT34
JT1eeFt43zRYSLDCdgcjw56/Me1lKG8wYgHU6PsXpHKEb3ylMdk+LmJldkou4q+Y
+sdgsINLPQT1pwvnqkZ0nrA9lDs5hkKhBPgEOT9HVKPck//sauwI4gL9jT9QwM3k
sCmTOylOdcfNSKz9Bakxnl6wahonJjsufWW6uHJxZQCRvPI/KHY=
-----END CERTIFICATE-----
Generated at Sun Jun 22 11:09:14 2025 by rpki-client