Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Vl6zBhodDeJHO7mMJPbVAwxGtqc.roa
File: Vl6zBhodDeJHO7mMJPbVAwxGtqc.roa (raw, json)
Hash identifier: LzWXHQxJ7+10CHORt7uMV5W5ZR6KcZ9WXrPL31kUkhY=
Subject key identifier: 56:5E:B3:06:1A:1D:0D:E2:47:3B:B9:8C:24:F6:D5:03:0C:46:B6:A7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 190D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Vl6zBhodDeJHO7mMJPbVAwxGtqc.roa
Signing time: Mon 09 Jun 2025 11:39:38 +0000
ROA not before: Mon 09 Jun 2025 11:39:38 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6413 (0x190d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 11:39:38 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=565EB3061A1D0DE2473BB98C24F6D5030C46B6A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:26:76:d6:2e:04:1a:5a:a7:72:49:7c:ce:
59:ac:d1:3a:3a:da:d7:bf:25:6a:cb:bf:30:74:e0:
45:7e:5a:f3:d6:f4:4b:c6:dc:b4:83:43:d1:db:56:
2c:d6:cf:7e:8e:50:7d:b1:95:d1:bb:cf:00:64:7d:
bb:97:00:5b:30:f9:12:9b:39:40:6d:19:d7:c5:a1:
12:19:d9:b5:b6:92:45:12:3d:51:68:1e:13:1c:c6:
5c:ec:9a:bf:1e:83:99:11:5b:bc:78:05:57:a8:2a:
59:9d:9f:60:ea:fb:05:56:42:7c:42:e9:4f:9e:9f:
63:6d:c6:8e:95:87:ed:af:12:17:d6:86:af:38:8a:
44:e6:31:c0:57:86:93:02:dc:a6:84:2e:da:ec:9e:
4c:2c:a7:dd:3c:1c:15:3b:e6:10:69:5f:04:b3:3f:
fd:2b:f8:7d:e0:90:88:b5:1f:a4:39:61:f1:23:90:
d4:b3:10:0a:fa:c2:37:4d:ac:be:57:15:11:16:f5:
49:ef:55:8f:6b:c2:1f:ab:cd:44:90:b6:f1:ca:50:
54:93:58:49:39:8b:ce:e3:3c:7c:1c:ac:d8:e9:4d:
86:88:d7:01:e0:c8:2d:bd:9c:8d:af:7f:89:b7:db:
ac:5c:fe:1c:69:16:3b:7a:68:04:1f:4d:fc:15:dd:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5E:B3:06:1A:1D:0D:E2:47:3B:B9:8C:24:F6:D5:03:0C:46:B6:A7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Vl6zBhodDeJHO7mMJPbVAwxGtqc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:3d:11:fe:72:1a:82:1f:1d:a1:e2:c0:9a:b0:8d:43:5a:34:
ee:5b:6a:f1:5f:43:1c:b8:bd:2f:f6:a5:1a:da:8c:dc:c5:3d:
6f:10:8d:32:27:6e:3b:cc:ac:ff:e8:a4:9e:97:67:0a:f9:5a:
1f:e7:f6:6f:c0:0e:f9:35:a6:6d:b1:74:fe:79:5c:61:73:cf:
e2:3c:2f:91:2f:56:fe:f9:28:e8:12:6e:11:6b:d5:34:69:19:
10:73:e0:d0:37:38:55:70:53:5b:5f:16:d0:f0:ff:9a:98:f3:
17:4c:af:09:79:e9:37:0b:bb:f3:0b:71:9f:74:6d:34:cf:fc:
0e:b3:24:e6:42:50:5a:f5:a9:f7:8d:c7:81:95:c8:f7:9a:8c:
36:55:79:42:70:63:cd:c6:a2:9f:b5:47:a0:27:64:29:ec:8a:
05:da:fd:86:91:82:85:e9:3f:5e:26:e4:dd:ba:f5:9f:52:98:
ba:0c:42:98:e1:cf:61:e3:1b:d7:d0:1b:34:0f:91:6e:ff:d1:
78:a9:f1:47:35:14:a5:d1:2a:4b:b1:af:94:98:e1:5c:af:98:
48:d8:aa:7d:b4:f2:ef:12:e2:e8:ea:6e:dc:55:a3:60:ba:9e:
c4:34:0f:0c:4c:ec:7f:0a:06:03:e0:a8:e2:b2:87:30:66:cf:
d8:16:56:26
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGQ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDkx
MTM5MzhaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDU2NUVCMzA2MUExRDBE
RTI0NzNCQjk4QzI0RjZENTAzMEM0NkI2QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8KyZ21i4EGlqnckl8zlms0To62te/JWrLvzB04EV+WvPW9EvG
3LSDQ9HbVizWz36OUH2xldG7zwBkfbuXAFsw+RKbOUBtGdfFoRIZ2bW2kkUSPVFo
HhMcxlzsmr8eg5kRW7x4BVeoKlmdn2Dq+wVWQnxC6U+en2Ntxo6Vh+2vEhfWhq84
ikTmMcBXhpMC3KaELtrsnkwsp908HBU75hBpXwSzP/0r+H3gkIi1H6Q5YfEjkNSz
EAr6wjdNrL5XFREW9UnvVY9rwh+rzUSQtvHKUFSTWEk5i87jPHwcrNjpTYaI1wHg
yC29nI2vf4m326xc/hxpFjt6aAQfTfwV3UCRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVl6zBhodDeJHO7mMJPbVAwxGtqcwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9WbDZ6QmhvZERlSkhPN21N
SlBiVkF3eEd0cWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAAQ9Ef5yGoIfHaHiwJqwjUNaNO5bavFfQxy4
vS/2pRrajNzFPW8QjTInbjvMrP/opJ6XZwr5Wh/n9m/ADvk1pm2xdP55XGFzz+I8
L5EvVv75KOgSbhFr1TRpGRBz4NA3OFVwU1tfFtDw/5qY8xdMrwl56TcLu/MLcZ90
bTTP/A6zJOZCUFr1qfeNx4GVyPeajDZVeUJwY83Gop+1R6AnZCnsigXa/YaRgoXp
P14m5N269Z9SmLoMQpjhz2HjG9fQGzQPkW7/0Xip8Uc1FKXRKkuxr5SY4VyvmEjY
qn208u8S4ujqbtxVo2C6nsQ0DwxM7H8KBgPgqOKyhzBmz9gWViY=
-----END CERTIFICATE-----
Generated at Sun Jun 22 19:49:19 2025 by rpki-client