Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/W28aKy3K1cfAkiM9zfajg8b2-Q4.roa
File: W28aKy3K1cfAkiM9zfajg8b2-Q4.roa (raw, json)
Hash identifier: dU6bgtf9hOhfIchn2xMNSpGi6xPrFC39DR8xIzgPRzw=
Subject key identifier: 5B:6F:1A:2B:2D:CA:D5:C7:C0:92:23:3D:CD:F6:A3:83:C6:F6:F9:0E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1B71
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/W28aKy3K1cfAkiM9zfajg8b2-Q4.roa
Signing time: Thu 12 Jun 2025 16:09:53 +0000
ROA not before: Thu 12 Jun 2025 16:09:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7025 (0x1b71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 16:09:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5B6F1A2B2DCAD5C7C092233DCDF6A383C6F6F90E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:b9:94:2e:a8:35:d3:cd:b0:7e:20:80:28:
16:c7:52:ba:51:2d:02:a7:74:57:e1:a0:55:7c:9c:
35:72:cd:0f:b2:7e:c3:6b:78:3c:53:db:c7:f3:0f:
b8:01:77:9d:60:e9:ab:c5:f9:7b:49:09:be:a6:f6:
74:b7:3d:78:9d:de:2d:80:56:58:57:aa:77:76:de:
f1:8b:09:49:dd:0b:d0:46:9e:75:9d:09:ec:42:22:
76:34:73:e1:4f:09:12:34:de:9e:69:4b:28:f9:80:
64:5e:f2:72:3c:fe:95:d0:bf:67:a2:cf:40:f7:67:
71:18:23:ad:c0:7d:d8:55:82:07:32:a6:96:27:24:
0e:24:be:07:18:ae:d8:51:c4:90:ff:2f:77:68:3e:
11:bc:64:ce:64:72:80:5c:00:b6:a3:d5:61:ba:ef:
5d:98:63:f9:3f:90:bd:e4:2a:07:20:10:45:74:91:
9d:cc:7b:82:05:74:0f:0d:7a:53:d9:42:7f:82:dd:
a7:28:69:43:be:b4:fe:24:72:5b:31:99:15:7d:22:
d7:ff:0d:c8:56:cf:01:ca:64:7c:43:e9:91:28:98:
63:e0:5c:a0:10:b0:ef:81:34:b1:d3:58:74:f4:2f:
52:33:7e:ad:bc:ac:ce:a5:50:5b:3f:27:a5:fd:b1:
9c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6F:1A:2B:2D:CA:D5:C7:C0:92:23:3D:CD:F6:A3:83:C6:F6:F9:0E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/W28aKy3K1cfAkiM9zfajg8b2-Q4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:d4:38:da:42:ce:a4:ee:c1:98:d1:2e:b6:a5:d9:93:20:fa:
92:f5:cd:32:a0:f2:f4:4f:b9:b9:f5:bf:3c:cc:b6:b7:95:dc:
1d:9c:d8:39:bf:3f:bc:eb:58:a5:60:90:a2:c0:ec:9f:e7:b6:
94:6c:ff:98:2b:38:9f:6b:90:2e:c9:fc:85:e4:29:d6:b0:80:
c7:b8:e8:c7:a4:fa:93:a8:b1:ef:24:8b:1e:66:b0:a6:f0:19:
7d:16:b3:0b:ac:fc:9f:88:9f:86:4e:ac:9c:b2:33:00:cd:c4:
19:ee:85:60:d4:66:8c:49:b7:4a:27:78:e8:31:f4:ef:42:e4:
d9:06:c6:af:4d:aa:18:c3:b1:f1:b0:77:07:5f:9e:76:13:8f:
af:bf:12:3a:75:70:e3:d4:0a:8b:35:9d:78:66:a0:01:4a:38:
0b:e5:0a:5f:6b:98:e2:b1:e8:8e:8f:76:88:9a:37:59:ab:cc:
f9:f1:2d:4a:e3:77:0b:cd:e3:87:3c:48:54:db:96:f3:83:3a:
e9:25:a5:79:10:19:8f:ed:c8:7c:62:a4:19:69:7b:7f:5b:e1:
0e:e2:08:2a:00:c1:ac:a2:af:98:0b:82:14:e2:12:53:27:93:
50:65:2d:ee:5b:33:bc:ae:73:3c:49:1a:ed:8b:10:10:8f:86:
2f:fc:24:f9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG3EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTIx
NjA5NTNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDVCNkYxQTJCMkRDQUQ1
QzdDMDkyMjMzRENERjZBMzgzQzZGNkY5MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEVLmULqg1082wfiCAKBbHUrpRLQKndFfhoFV8nDVyzQ+yfsNr
eDxT28fzD7gBd51g6avF+XtJCb6m9nS3PXid3i2AVlhXqnd23vGLCUndC9BGnnWd
CexCInY0c+FPCRI03p5pSyj5gGRe8nI8/pXQv2eiz0D3Z3EYI63AfdhVggcyppYn
JA4kvgcYrthRxJD/L3doPhG8ZM5kcoBcALaj1WG6712YY/k/kL3kKgcgEEV0kZ3M
e4IFdA8NelPZQn+C3acoaUO+tP4kclsxmRV9Itf/DchWzwHKZHxD6ZEomGPgXKAQ
sO+BNLHTWHT0L1Izfq28rM6lUFs/J6X9sZxNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUW28aKy3K1cfAkiM9zfajg8b2+Q4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9XMjhhS3kzSzFjZkFraU05
emZhamc4YjItUTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAFzUONpCzqTuwZjRLral2ZMg+pL1zTKg8vRP
ubn1vzzMtreV3B2c2Dm/P7zrWKVgkKLA7J/ntpRs/5grOJ9rkC7J/IXkKdawgMe4
6Mek+pOose8kix5msKbwGX0Wswus/J+In4ZOrJyyMwDNxBnuhWDUZoxJt0oneOgx
9O9C5NkGxq9NqhjDsfGwdwdfnnYTj6+/Ejp1cOPUCos1nXhmoAFKOAvlCl9rmOKx
6I6PdoiaN1mrzPnxLUrjdwvN44c8SFTblvODOuklpXkQGY/tyHxipBlpe39b4Q7i
CCoAwayir5gLghTiElMnk1BlLe5bM7yuczxJGu2LEBCPhi/8JPk=
-----END CERTIFICATE-----
Generated at Sat Jun 21 22:42:58 2025 by rpki-client