Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/QWKHAGJwPEY5dDn1wjTr8xG7UqA.roa
File: QWKHAGJwPEY5dDn1wjTr8xG7UqA.roa (raw, json)
Hash identifier: j6it5r4X0Qks6SXbBfvOVqI51SCiWthjcwNV10KLrCY=
Subject key identifier: 41:62:87:00:62:70:3C:46:39:74:39:F5:C2:34:EB:F3:11:BB:52:A0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B79
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QWKHAGJwPEY5dDn1wjTr8xG7UqA.roa
Signing time: Thu 22 May 2025 09:08:57 +0000
ROA not before: Thu 22 May 2025 09:08:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2937 (0xb79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 09:08:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4162870062703C46397439F5C234EBF311BB52A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:48:ea:5f:35:5a:65:2d:f4:c3:4f:22:b3:
4e:0a:e6:a1:05:df:eb:b3:05:fb:df:7b:26:75:97:
a4:0a:c0:fa:d7:07:df:19:e6:ad:ea:f9:95:02:1c:
4e:98:af:09:6f:0a:94:c0:33:a4:18:31:0e:2e:d9:
62:f4:6f:62:2b:df:4c:87:d2:92:c2:d4:31:e3:da:
58:91:fc:c1:60:c1:c4:ed:bd:5f:7a:6f:d8:e8:1c:
b5:b6:41:01:1e:23:c8:48:e1:1e:21:f2:ca:82:e0:
09:42:90:c0:6e:45:e2:7b:55:30:db:b9:4e:01:ee:
fe:bf:51:3d:81:e7:e2:67:40:0a:d2:5a:bf:44:7d:
89:4e:97:74:49:69:59:08:4f:72:44:cf:c9:cb:29:
28:42:1f:6d:e5:07:95:e4:d1:9c:6b:43:68:1e:32:
20:0b:81:63:e4:2e:ea:46:39:6d:ea:45:4b:49:ca:
30:04:8c:53:2c:55:95:3d:a4:68:ad:11:71:ac:29:
66:c6:a9:3a:7d:f3:bd:49:61:cc:8b:d2:5e:66:e2:
2b:cb:e4:da:8b:7c:fb:e4:7a:81:15:d7:a8:58:0b:
fa:1a:00:f2:05:0b:4d:2c:56:d8:51:c5:80:c3:0d:
49:6b:3f:0f:a9:bf:e3:34:b6:78:a6:08:d8:6c:26:
b2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:62:87:00:62:70:3C:46:39:74:39:F5:C2:34:EB:F3:11:BB:52:A0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QWKHAGJwPEY5dDn1wjTr8xG7UqA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:71:37:7e:7e:0f:2d:2e:62:db:23:db:3c:f3:e0:b0:1c:0f:
50:71:e7:55:c6:dd:3c:36:17:54:c0:28:73:f8:98:c5:e9:b4:
b5:39:85:40:de:83:db:b4:fc:e6:02:1c:02:4b:a2:fa:ff:51:
61:24:27:96:e8:48:3f:ed:af:b2:ce:21:86:8d:9e:67:24:8b:
4c:7f:a4:78:19:6b:b9:92:2c:c4:39:e2:7d:a5:7d:b1:7a:01:
cf:97:f2:61:72:67:aa:5a:3b:ff:9c:ad:cd:37:ba:ae:f4:84:
a2:4c:b3:96:a3:d0:ca:44:cc:d4:36:f5:d6:6a:0e:3a:17:39:
e3:83:91:e7:83:5a:24:2d:70:dc:4a:0f:12:04:ed:79:8c:a7:
2c:b1:04:74:35:c9:2f:28:00:b4:7a:ed:db:71:c0:b9:f9:a3:
5c:dc:48:c2:6d:0b:74:9d:9d:2d:36:72:01:6b:9a:ab:b9:06:
6a:87:c6:1e:37:40:dd:5c:72:9c:59:55:c7:a7:46:da:76:0d:
70:7c:90:8c:f0:54:83:49:7f:52:dc:6d:d7:ae:b3:68:85:a6:
a4:13:94:be:68:99:df:89:91:21:e9:ad:ae:31:79:46:46:41:
11:69:fe:1d:f1:d1:80:74:21:03:66:21:d7:3c:1f:b0:49:67:
e4:dd:8b:71
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC3kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjIw
OTA4NTdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDQxNjI4NzAwNjI3MDND
NDYzOTc0MzlGNUMyMzRFQkYzMTFCQjUyQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF2EjqXzVaZS30w08is04K5qEF3+uzBfvfeyZ1l6QKwPrXB98Z
5q3q+ZUCHE6YrwlvCpTAM6QYMQ4u2WL0b2Ir30yH0pLC1DHj2liR/MFgwcTtvV96
b9joHLW2QQEeI8hI4R4h8sqC4AlCkMBuReJ7VTDbuU4B7v6/UT2B5+JnQArSWr9E
fYlOl3RJaVkIT3JEz8nLKShCH23lB5Xk0ZxrQ2geMiALgWPkLupGOW3qRUtJyjAE
jFMsVZU9pGitEXGsKWbGqTp9871JYcyL0l5m4ivL5NqLfPvkeoEV16hYC/oaAPIF
C00sVthRxYDDDUlrPw+pv+M0tnimCNhsJrKZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUQWKHAGJwPEY5dDn1wjTr8xG7UqAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9RV0tIQUdKd1BFWTVkRG4x
d2pUcjh4RzdVcUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAGdxN35+Dy0uYtsj2zzz4LAcD1Bx51XG3Tw2
F1TAKHP4mMXptLU5hUDeg9u0/OYCHAJLovr/UWEkJ5boSD/tr7LOIYaNnmcki0x/
pHgZa7mSLMQ54n2lfbF6Ac+X8mFyZ6paO/+crc03uq70hKJMs5aj0MpEzNQ29dZq
DjoXOeODkeeDWiQtcNxKDxIE7XmMpyyxBHQ1yS8oALR67dtxwLn5o1zcSMJtC3Sd
nS02cgFrmqu5BmqHxh43QN1ccpxZVcenRtp2DXB8kIzwVINJf1Lcbdeus2iFpqQT
lL5omd+JkSHpra4xeUZGQRFp/h3x0YB0IQNmIdc8H7BJZ+Tdi3E=
-----END CERTIFICATE-----
Generated at Sat Jun 21 16:53:13 2025 by rpki-client