Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Slpx5BDQvyR-9X18LfU23MoTNxM.roa
File: Slpx5BDQvyR-9X18LfU23MoTNxM.roa (raw, json)
Hash identifier: jQavfMcrGci23BQU1bKpNpilWE2GOOKgTL1v8oVEfao=
Subject key identifier: 4A:5A:71:E4:10:D0:BF:24:7E:F5:7D:7C:2D:F5:36:DC:CA:13:37:13
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 18C1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Slpx5BDQvyR-9X18LfU23MoTNxM.roa
Signing time: Mon 09 Jun 2025 02:09:35 +0000
ROA not before: Mon 09 Jun 2025 02:09:35 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6337 (0x18c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 02:09:35 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4A5A71E410D0BF247EF57D7C2DF536DCCA133713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:d5:f6:b6:1c:de:fa:74:cb:e9:92:9f:69:
fb:35:dd:fe:4d:48:29:27:7c:5e:e9:dd:0a:65:83:
86:4b:ca:7e:a9:dd:12:be:f3:58:68:a3:21:8e:5c:
7e:a6:02:1b:45:67:44:1c:2b:49:b6:58:99:f5:db:
2e:7d:80:81:cf:80:32:51:b2:2c:37:ca:bc:ad:20:
3a:42:c6:89:46:d8:57:49:fe:ef:ae:30:0a:f5:49:
25:75:83:78:8b:ca:e9:95:1e:f6:29:bb:6d:ae:50:
08:20:6b:54:ce:89:c3:96:44:7d:63:2d:75:45:e6:
1d:39:72:76:fd:e7:9c:98:b5:b1:0b:a4:39:91:a6:
4e:d3:27:a6:a0:46:12:9b:5e:2d:5a:92:12:32:3d:
00:38:92:68:d4:f7:ab:ae:50:25:96:77:81:42:48:
1e:ec:4a:25:df:5d:0a:eb:de:ee:3f:a9:d3:4c:5c:
cc:94:e0:c8:4b:ca:1f:f4:9f:c2:aa:c3:50:7e:f8:
82:db:14:19:58:c3:ea:1a:93:a3:d2:16:0e:98:f6:
13:a5:94:15:a2:e6:3a:51:0c:10:86:01:52:67:3a:
ca:56:62:96:eb:c0:9e:1e:77:76:1f:8f:45:b6:4e:
5f:e9:89:cb:96:da:08:df:b1:78:02:95:a3:20:88:
17:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5A:71:E4:10:D0:BF:24:7E:F5:7D:7C:2D:F5:36:DC:CA:13:37:13
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Slpx5BDQvyR-9X18LfU23MoTNxM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:12:58:ce:2e:e9:88:e7:70:5b:ab:3f:b2:02:89:63:f8:2c:
0d:20:76:17:fa:d6:a5:c8:8d:66:16:55:56:5f:4b:40:d4:f2:
f7:9b:9a:ad:a7:a1:a6:9f:75:4f:bf:d8:c4:4e:09:cd:53:16:
49:64:94:34:09:ac:83:38:32:96:6e:93:c8:8c:1e:0b:70:be:
67:c3:77:29:f4:d6:ad:4d:37:de:e7:4d:ee:fd:28:cd:51:b2:
b5:af:47:30:0c:bd:33:bf:4f:76:e3:d6:fe:2a:95:77:38:6c:
99:0e:68:c4:3d:0b:c9:84:ae:d2:3c:e5:06:f8:99:5e:48:6a:
a6:3b:82:3c:89:de:a7:dd:b5:82:17:0d:42:7a:23:ac:68:9a:
f4:e1:e1:98:74:93:e0:03:c8:55:06:2a:1b:da:7c:71:63:01:
d0:fb:f2:9a:c9:c8:de:a5:0c:2b:55:c4:c4:ff:ed:da:6b:d4:
44:4d:5c:80:94:5b:f4:50:29:0a:a6:6d:c7:c0:25:db:10:a1:
ef:d6:94:14:8e:78:6c:92:39:1b:9f:bb:fb:38:f4:92:8f:58:
9a:c2:82:3b:08:4c:0f:f6:23:7c:d9:f8:6f:0a:c8:66:5d:e5:
85:f5:eb:03:33:2e:5f:af:0a:64:5a:d4:4b:86:34:76:67:85:
25:a0:fa:49
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDkw
MjA5MzVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDRBNUE3MUU0MTBEMEJG
MjQ3RUY1N0Q3QzJERjUzNkRDQ0ExMzM3MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCz0NX2thze+nTL6ZKfafs13f5NSCknfF7p3Qplg4ZLyn6p3RK+
81hooyGOXH6mAhtFZ0QcK0m2WJn12y59gIHPgDJRsiw3yrytIDpCxolG2FdJ/u+u
MAr1SSV1g3iLyumVHvYpu22uUAgga1TOicOWRH1jLXVF5h05cnb955yYtbELpDmR
pk7TJ6agRhKbXi1akhIyPQA4kmjU96uuUCWWd4FCSB7sSiXfXQrr3u4/qdNMXMyU
4MhLyh/0n8Kqw1B++ILbFBlYw+oak6PSFg6Y9hOllBWi5jpRDBCGAVJnOspWYpbr
wJ4ed3Yfj0W2Tl/picuW2gjfsXgClaMgiBc1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUSlpx5BDQvyR+9X18LfU23MoTNxMwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9TbHB4NUJEUXZ5Ui05WDE4
TGZVMjNNb1ROeE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAD0SWM4u6YjncFurP7ICiWP4LA0gdhf61qXI
jWYWVVZfS0DU8vebmq2noaafdU+/2MROCc1TFklklDQJrIM4MpZuk8iMHgtwvmfD
dyn01q1NN97nTe79KM1RsrWvRzAMvTO/T3bj1v4qlXc4bJkOaMQ9C8mErtI85Qb4
mV5IaqY7gjyJ3qfdtYIXDUJ6I6xomvTh4Zh0k+ADyFUGKhvafHFjAdD78prJyN6l
DCtVxMT/7dpr1ERNXICUW/RQKQqmbcfAJdsQoe/WlBSOeGySORufu/s49JKPWJrC
gjsITA/2I3zZ+G8KyGZd5YX16wMzLl+vCmRa1EuGNHZnhSWg+kk=
-----END CERTIFICATE-----
Generated at Sat Jun 21 18:34:01 2025 by rpki-client