Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Ej8iJ_m9QAp-lsmsk4xo9NEk14Q.roa
File: Ej8iJ_m9QAp-lsmsk4xo9NEk14Q.roa (raw, json)
Hash identifier: lF/IBuoeAgt7ZBShc0SJjP+74IIoPZETo8n3f8ouacc=
Subject key identifier: 12:3F:22:27:F9:BD:40:0A:7E:96:C9:AC:93:8C:68:F4:D1:24:D7:84
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0261
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ej8iJ_m9QAp-lsmsk4xo9NEk14Q.roa
Signing time: Sat 10 May 2025 06:07:50 +0000
ROA not before: Sat 10 May 2025 06:07:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 06:07:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=123F2227F9BD400A7E96C9AC938C68F4D124D784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7d:ea:90:ae:e2:c0:c2:86:58:69:5d:11:d0:
0f:e5:4b:89:5c:ee:ca:3d:26:de:0a:51:e7:33:71:
24:a0:e7:86:27:f9:21:07:e3:81:d2:41:00:80:56:
81:ca:c2:ea:71:62:63:96:54:e5:e1:85:8e:79:5b:
b2:a9:99:57:de:7b:33:b6:0c:10:24:c6:b1:d1:7e:
3c:d0:66:f7:40:87:36:30:ba:8a:53:a3:30:05:c1:
cc:0d:5f:db:00:33:fd:47:80:4d:4d:12:27:97:0b:
54:87:42:b9:3e:f2:97:2f:76:87:27:14:c2:6e:f3:
85:5e:38:b9:b6:09:eb:9c:09:d3:15:53:33:c2:72:
4f:e9:cc:b2:44:cc:b0:d7:4b:01:9f:f6:49:8d:b6:
26:6f:b4:07:b5:8e:d8:9f:3f:66:c4:94:42:db:13:
b6:88:8d:5c:5c:fb:34:c1:dc:f6:7e:86:db:5e:b9:
9b:bb:9d:75:51:c6:47:fa:7d:e2:10:b8:29:47:1b:
2a:b9:32:c3:c5:53:85:ec:35:88:70:ab:d9:a0:e0:
a8:94:7b:16:83:54:b6:8f:3d:ec:46:8a:a3:c9:a6:
13:21:8c:cf:1c:51:fc:6c:8f:a5:7c:4d:6d:e4:9d:
52:8a:48:35:c2:24:9c:a5:ac:d2:48:30:2a:f1:c3:
ec:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3F:22:27:F9:BD:40:0A:7E:96:C9:AC:93:8C:68:F4:D1:24:D7:84
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ej8iJ_m9QAp-lsmsk4xo9NEk14Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:60:ca:e2:33:11:37:50:38:78:5d:97:1b:0e:73:17:bb:9b:
fe:10:36:91:b8:d5:a6:18:49:a4:fe:08:59:52:5f:38:bc:3e:
c1:6a:d1:8e:76:30:52:f3:e9:38:c2:c7:2f:73:8e:4b:b8:3d:
7c:1d:b8:80:fd:0b:65:94:06:4e:c5:8e:30:b3:b2:72:cb:c8:
97:b5:ed:ea:7f:b0:73:e9:9f:4e:45:3c:8d:58:3f:04:48:d1:
ea:c4:f8:25:2f:d3:87:d9:03:3a:81:cb:3c:cc:06:db:c6:21:
19:7f:46:af:78:0d:77:57:15:fb:b3:13:b2:d9:c8:b3:9f:4c:
2e:6f:8f:df:e9:18:88:79:83:6f:fb:04:d3:8b:7d:ef:0a:b0:
e7:62:e9:54:87:13:66:73:16:e9:80:51:f8:d0:26:33:ea:17:
d7:77:38:4c:a1:b1:5e:12:ec:37:2e:49:94:92:90:9c:f1:10:
eb:cb:07:ee:67:82:c1:3f:92:da:ef:3d:ac:8e:a2:47:1a:af:
1b:b1:8a:df:01:32:1e:7e:76:0e:28:95:29:fe:90:18:2e:2d:
a5:4d:53:56:6a:5a:94:08:0e:47:8e:77:2e:cb:d1:46:fc:18:
d1:de:54:dc:c5:df:61:24:0f:70:6b:f3:d1:c0:ed:76:6b:6e:
88:75:bc:d7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTAw
NjA3NTBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDEyM0YyMjI3RjlCRDQw
MEE3RTk2QzlBQzkzOEM2OEY0RDEyNEQ3ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDefeqQruLAwoZYaV0R0A/lS4lc7so9Jt4KUeczcSSg54Yn+SEH
44HSQQCAVoHKwupxYmOWVOXhhY55W7KpmVfeezO2DBAkxrHRfjzQZvdAhzYwuopT
ozAFwcwNX9sAM/1HgE1NEieXC1SHQrk+8pcvdocnFMJu84VeOLm2CeucCdMVUzPC
ck/pzLJEzLDXSwGf9kmNtiZvtAe1jtifP2bElELbE7aIjVxc+zTB3PZ+htteuZu7
nXVRxkf6feIQuClHGyq5MsPFU4XsNYhwq9mg4KiUexaDVLaPPexGiqPJphMhjM8c
Ufxsj6V8TW3knVKKSDXCJJylrNJIMCrxw+w/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUEj8iJ/m9QAp+lsmsk4xo9NEk14QwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9FajhpSl9tOVFBcC1sc21z
azR4bzlORWsxNFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAFJgyuIzETdQOHhdlxsOcxe7m/4QNpG41aYY
SaT+CFlSXzi8PsFq0Y52MFLz6TjCxy9zjku4PXwduID9C2WUBk7FjjCzsnLLyJe1
7ep/sHPpn05FPI1YPwRI0erE+CUv04fZAzqByzzMBtvGIRl/Rq94DXdXFfuzE7LZ
yLOfTC5vj9/pGIh5g2/7BNOLfe8KsOdi6VSHE2ZzFumAUfjQJjPqF9d3OEyhsV4S
7DcuSZSSkJzxEOvLB+5ngsE/ktrvPayOokcarxuxit8BMh5+dg4olSn+kBguLaVN
U1ZqWpQIDkeOdy7L0Ub8GNHeVNzF32EkD3Br89HA7XZrboh1vNc=
-----END CERTIFICATE-----
Generated at Sun Jun 22 16:44:03 2025 by rpki-client