Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/OHjXSuBaEFE7T1U5m_4wHTNLlh8.roa
File: OHjXSuBaEFE7T1U5m_4wHTNLlh8.roa (raw, json)
Hash identifier: raAFbXPNyTYepdYF7ybeMyTSKsjeAbS0ZS3ydz6ARx4=
Subject key identifier: 38:78:D7:4A:E0:5A:10:51:3B:4F:55:39:9B:FE:30:1D:33:4B:96:1F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0F15
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OHjXSuBaEFE7T1U5m_4wHTNLlh8.roa
Signing time: Tue 27 May 2025 04:38:50 +0000
ROA not before: Tue 27 May 2025 04:38:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3861 (0xf15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 27 04:38:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3878D74AE05A10513B4F55399BFE301D334B961F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:09:44:b1:a0:67:98:2c:3f:3a:3b:01:97:ba:
62:3e:5d:f7:6c:ea:0f:12:69:92:a6:da:fe:61:06:
a2:69:3f:20:fc:0f:4f:01:47:18:2f:f8:f6:c4:32:
6b:3b:3a:d2:99:cd:db:62:34:19:07:c1:80:06:4b:
a5:52:fe:2e:8a:7c:52:d6:ba:b0:2f:f5:99:4a:e0:
c1:65:08:c7:d1:b9:08:eb:8f:dd:89:c9:16:3e:56:
16:05:c7:fa:56:77:73:99:90:6a:31:b6:2c:5c:a3:
59:a8:f5:a0:eb:74:15:be:26:dc:14:cc:18:7d:3c:
8f:b3:3a:1b:47:54:f4:5b:bf:85:a5:c5:04:50:92:
29:e5:72:c9:15:5e:06:29:92:51:3a:ad:7d:eb:9d:
31:45:75:27:0f:de:3b:e8:67:68:a5:5c:bf:fe:dd:
ff:90:6c:aa:90:6d:f4:af:35:4f:2a:b6:a4:e1:5c:
8e:02:a6:8a:5d:45:4e:0a:f7:dc:dc:ca:3b:65:0b:
ef:3a:e1:93:80:14:72:19:98:99:3d:bb:5f:ca:a9:
27:1b:aa:0c:a6:ff:b2:ee:27:d9:c1:3c:9f:12:1c:
98:e5:8e:bd:8c:c0:aa:90:46:13:44:c9:5f:ab:05:
da:bd:f4:4b:7d:2c:35:0b:ad:7e:10:8b:d8:7c:37:
0c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:78:D7:4A:E0:5A:10:51:3B:4F:55:39:9B:FE:30:1D:33:4B:96:1F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OHjXSuBaEFE7T1U5m_4wHTNLlh8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:8e:40:3f:fc:b9:28:eb:a1:b9:71:cf:aa:25:e8:a0:5d:b4:
19:42:c8:77:5e:d9:ed:5c:0a:59:7f:4b:cb:eb:26:6f:c3:ea:
c8:43:6a:ec:33:b7:37:8b:8e:58:2b:58:21:c7:8f:11:f3:7e:
43:ed:55:fe:e8:22:91:1f:58:34:74:bc:a4:3b:53:af:f0:bf:
f5:66:ab:af:bd:c5:d5:be:04:8b:3d:5f:7b:76:7f:f0:44:eb:
72:5d:94:bf:f6:dd:87:ac:74:ea:a9:5d:32:2f:2b:aa:2a:f4:
e4:41:46:de:82:88:6c:9b:5c:40:71:1f:ed:2e:88:a2:ba:30:
46:0d:0b:48:da:09:f0:17:a4:a8:f9:bd:0e:71:92:e1:f7:15:
83:2e:2c:0b:44:87:20:f0:76:f7:13:db:a4:b1:83:57:9b:60:
85:9c:d3:a0:79:ec:14:4a:2b:f7:5e:bc:08:b2:b9:b2:33:c9:
be:41:4b:d2:a6:54:b1:28:07:d2:ed:60:9f:01:c8:fd:32:bd:
c6:08:3c:4e:94:6b:2c:fd:ee:d7:bb:63:91:8e:5a:7a:18:1a:
86:d8:e9:27:e3:a9:58:4f:2d:26:9f:16:dc:2e:8b:cd:f4:44:
3d:61:14:b7:a9:c4:ad:c1:74:c6:fb:28:c4:ac:c0:1b:24:b0:
53:95:ef:a7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDxUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1Mjcw
NDM4NTBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDM4NzhENzRBRTA1QTEw
NTEzQjRGNTUzOTlCRkUzMDFEMzM0Qjk2MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgCUSxoGeYLD86OwGXumI+Xfds6g8SaZKm2v5hBqJpPyD8D08B
Rxgv+PbEMms7OtKZzdtiNBkHwYAGS6VS/i6KfFLWurAv9ZlK4MFlCMfRuQjrj92J
yRY+VhYFx/pWd3OZkGoxtixco1mo9aDrdBW+JtwUzBh9PI+zOhtHVPRbv4WlxQRQ
kinlcskVXgYpklE6rX3rnTFFdScP3jvoZ2ilXL/+3f+QbKqQbfSvNU8qtqThXI4C
popdRU4K99zcyjtlC+864ZOAFHIZmJk9u1/KqScbqgym/7LuJ9nBPJ8SHJjljr2M
wKqQRhNEyV+rBdq99Et9LDULrX4Qi9h8Nwy5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUOHjXSuBaEFE7T1U5m/4wHTNLlh8wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9PSGpYU3VCYUVGRTdUMVU1
bV80d0hUTkxsaDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAKKOQD/8uSjroblxz6ol6KBdtBlCyHde2e1c
Cll/S8vrJm/D6shDauwztzeLjlgrWCHHjxHzfkPtVf7oIpEfWDR0vKQ7U6/wv/Vm
q6+9xdW+BIs9X3t2f/BE63JdlL/23YesdOqpXTIvK6oq9ORBRt6CiGybXEBxH+0u
iKK6MEYNC0jaCfAXpKj5vQ5xkuH3FYMuLAtEhyDwdvcT26Sxg1ebYIWc06B57BRK
K/devAiyubIzyb5BS9KmVLEoB9LtYJ8ByP0yvcYIPE6Uayz97te7Y5GOWnoYGobY
6SfjqVhPLSafFtwui830RD1hFLepxK3BdMb7KMSswBsksFOV76c=
-----END CERTIFICATE-----
Generated at Sun Jun 22 00:49:44 2025 by rpki-client