Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/RFvQSd-Jc0kBrKsNT4ubqkYbC64.roa
File: RFvQSd-Jc0kBrKsNT4ubqkYbC64.roa (raw, json)
Hash identifier: zWuHkRCf1YVvod2eB9g1I8xln5SKL+dV52vQYranGM0=
Subject key identifier: 44:5B:D0:49:DF:89:73:49:01:AC:AB:0D:4F:8B:9B:AA:46:1B:0B:AE
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0CC9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RFvQSd-Jc0kBrKsNT4ubqkYbC64.roa
Signing time: Sat 24 May 2025 03:08:31 +0000
ROA not before: Sat 24 May 2025 03:08:31 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3273 (0xcc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 03:08:31 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=445BD049DF89734901ACAB0D4F8B9BAA461B0BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:cb:24:65:5e:bc:a8:b7:48:1d:c7:7e:96:
4c:c6:2c:19:21:ce:fd:41:2f:52:51:25:08:e3:43:
6f:20:30:6c:f3:bc:36:71:e9:a0:9a:fd:59:b3:53:
2c:a4:d6:bf:c7:48:0f:b3:3d:64:6c:a9:52:5d:d8:
21:26:e4:cb:43:5d:1e:68:2a:59:c1:9c:d2:e2:32:
59:73:66:a0:ee:f4:3b:7d:be:09:1e:f4:b2:51:87:
53:53:ad:19:8e:ed:ee:67:6c:d7:cd:8c:95:68:50:
de:59:82:c2:cb:79:e5:3b:d2:33:8f:f4:16:fe:49:
af:34:4a:8d:7d:a3:80:03:8c:61:a9:92:7a:5d:3b:
df:48:cd:ae:e3:e7:37:76:7b:9c:b7:21:55:4a:6b:
5f:e2:d3:6a:b3:79:d8:b4:e0:cc:d8:70:93:e7:c7:
e9:46:f8:1d:ae:b9:73:73:5c:e7:9f:93:28:be:7a:
6d:c1:33:b1:01:05:1b:73:bf:95:c4:38:bd:75:0a:
44:16:4a:be:6d:dc:74:01:d9:b0:c1:b1:8d:5f:2a:
0a:54:7c:3e:b2:31:b9:e3:e8:38:b0:57:e1:72:7f:
7d:94:78:de:4c:30:42:06:b7:39:65:48:e4:9f:c3:
e9:45:1b:97:11:1a:a9:ae:4d:69:c3:32:83:48:96:
9d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5B:D0:49:DF:89:73:49:01:AC:AB:0D:4F:8B:9B:AA:46:1B:0B:AE
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RFvQSd-Jc0kBrKsNT4ubqkYbC64.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:35:30:3d:ec:e7:dd:61:1f:25:c1:68:c9:87:af:80:c0:c0:
6b:19:c8:f7:fb:05:27:bc:66:93:94:57:67:70:ac:82:4c:33:
e7:e6:39:a1:e5:f7:b4:40:5b:91:98:62:08:d9:64:5f:87:48:
07:04:fe:4d:d7:e1:22:9c:17:dc:1f:6d:f9:9f:9e:9c:6b:2d:
74:29:55:3d:4f:85:4b:2a:42:ba:41:97:c9:07:d5:11:ce:e1:
56:36:a4:02:2d:09:55:80:86:be:23:35:35:b8:60:e9:1f:9a:
d6:43:a0:6a:b1:6c:91:5b:24:9e:d6:d3:b2:fc:79:a6:1c:95:
1e:28:0f:0d:95:40:85:47:a1:25:8b:3f:35:69:d8:1e:0d:fc:
ca:3f:1b:13:ab:86:e0:12:f6:a2:ad:ea:be:3b:02:b3:1f:61:
85:87:9e:f3:69:5d:84:55:17:76:63:ce:04:44:31:8a:da:44:
0e:fe:c2:bc:51:96:c6:e7:ac:e0:00:dd:99:90:17:cc:da:95:
02:4c:81:32:f4:56:44:ea:f5:7c:55:10:d1:c7:df:47:ec:12:
5a:f3:b2:1f:be:15:62:ac:eb:37:be:90:d2:f6:b2:58:c1:c2:
52:d2:3d:a4:2e:81:9e:6b:68:e2:c4:6f:05:1f:d9:66:b9:37:
f0:f4:14:ea
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDMkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjQw
MzA4MzFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDQ0NUJEMDQ5REY4OTcz
NDkwMUFDQUIwRDRGOEI5QkFBNDYxQjBCQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCutcskZV68qLdIHcd+lkzGLBkhzv1BL1JRJQjjQ28gMGzzvDZx
6aCa/VmzUyyk1r/HSA+zPWRsqVJd2CEm5MtDXR5oKlnBnNLiMllzZqDu9Dt9vgke
9LJRh1NTrRmO7e5nbNfNjJVoUN5ZgsLLeeU70jOP9Bb+Sa80So19o4ADjGGpknpd
O99Iza7j5zd2e5y3IVVKa1/i02qzedi04MzYcJPnx+lG+B2uuXNzXOefkyi+em3B
M7EBBRtzv5XEOL11CkQWSr5t3HQB2bDBsY1fKgpUfD6yMbnj6DiwV+Fyf32UeN5M
MEIGtzllSOSfw+lFG5cRGqmuTWnDMoNIlp3ZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQURFvQSd+Jc0kBrKsNT4ubqkYbC64wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9SRnZRU2QtSmMwa0JyS3NO
VDR1YnFrWWJDNjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBACg1MD3s591hHyXBaMmHr4DAwGsZyPf7BSe8
ZpOUV2dwrIJMM+fmOaHl97RAW5GYYgjZZF+HSAcE/k3X4SKcF9wfbfmfnpxrLXQp
VT1PhUsqQrpBl8kH1RHO4VY2pAItCVWAhr4jNTW4YOkfmtZDoGqxbJFbJJ7W07L8
eaYclR4oDw2VQIVHoSWLPzVp2B4N/Mo/GxOrhuAS9qKt6r47ArMfYYWHnvNpXYRV
F3ZjzgREMYraRA7+wrxRlsbnrOAA3ZmQF8zalQJMgTL0VkTq9XxVENHH30fsElrz
sh++FWKs6ze+kNL2sljBwlLSPaQugZ5raOLEbwUf2Wa5N/D0FOo=
-----END CERTIFICATE-----
Generated at Sat Jun 21 16:54:57 2025 by rpki-client