Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/akdWsQYExr7MUEWNFRp7VaUDJfc.roa
File: akdWsQYExr7MUEWNFRp7VaUDJfc.roa (raw, json)
Hash identifier: pHZkjR/0FO82u9MbJpSDK4CaYWXISk7WonC8+0ic12k=
Subject key identifier: 6A:47:56:B1:06:04:C6:BE:CC:50:45:8D:15:1A:7B:55:A5:03:25:F7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 13B5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/akdWsQYExr7MUEWNFRp7VaUDJfc.roa
Signing time: Mon 02 Jun 2025 08:39:24 +0000
ROA not before: Mon 02 Jun 2025 08:39:24 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5045 (0x13b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 2 08:39:24 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6A4756B10604C6BECC50458D151A7B55A50325F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:06:66:40:a9:4e:7d:28:2a:37:06:75:25:
ff:1f:9d:47:ec:c6:27:7e:99:31:f1:28:d3:e5:9c:
b8:04:41:e1:82:60:53:36:d2:fb:2d:3f:26:81:ed:
c9:7b:16:ab:b8:02:97:45:d4:4a:f3:c1:92:fe:e2:
96:48:47:e2:67:6d:77:f8:5b:85:a8:16:3b:b5:3e:
27:8f:33:d3:e1:aa:7d:ed:dc:49:91:53:f0:51:c7:
2c:c5:4d:c9:31:48:16:ee:9f:2b:19:a4:8d:72:7f:
23:f3:5f:8a:a2:11:cb:c8:d0:55:f7:a1:79:3c:e6:
99:67:0c:04:4d:d9:7d:a1:be:a1:c6:5b:98:3b:b0:
bc:10:1b:fd:a5:b7:cf:f1:e0:5d:25:9c:92:79:2a:
19:ef:d2:0a:1a:53:b6:bd:72:77:a6:af:50:ca:79:
ec:7b:0b:90:fd:33:38:eb:16:52:23:cb:a5:2e:54:
d3:b7:10:ac:dd:87:c5:b4:6c:65:c6:05:ad:05:63:
49:5d:24:8f:25:17:39:9a:93:71:f3:23:3a:50:db:
ce:5c:b6:0b:d2:ca:a0:bc:7e:46:1c:3d:c9:81:b4:
63:f9:a5:f4:b2:fe:31:69:19:57:50:1c:4b:8f:3d:
ee:61:04:5a:78:a2:6a:14:d4:61:75:93:74:82:7e:
4f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:47:56:B1:06:04:C6:BE:CC:50:45:8D:15:1A:7B:55:A5:03:25:F7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/akdWsQYExr7MUEWNFRp7VaUDJfc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:65:46:fd:fd:9b:ff:2f:f8:b1:69:58:2f:47:47:11:d4:67:
d4:2f:d2:27:c0:23:5c:a2:0a:2c:4e:24:4c:1c:f5:0c:30:9f:
52:aa:1f:46:f2:63:d0:ed:f7:45:8f:8b:4b:ff:6a:e7:1c:49:
84:f3:8e:94:e5:2c:3b:29:27:44:f6:f2:aa:32:ec:44:4f:57:
ce:30:06:00:37:67:59:4d:d9:0f:c1:7e:ea:69:6a:64:1e:82:
4a:e1:f6:ca:20:92:b0:62:89:57:df:cc:84:7f:9e:df:3f:f4:
e9:3f:c8:e4:96:71:5a:25:c9:c6:2c:79:cd:03:67:c3:3e:14:
68:5b:e8:2f:f9:f5:28:bf:53:59:14:38:23:24:5a:a7:07:a9:
55:1c:d3:f7:c1:26:f5:06:4b:3e:7a:5f:31:d9:dd:d4:5f:06:
2f:a4:39:74:16:82:3e:b0:28:bb:d0:ef:0e:38:7f:3a:e8:e3:
aa:07:05:e1:5a:e7:7f:71:47:c4:ee:23:d8:17:8e:a2:0a:c5:
f4:09:6e:be:44:41:d6:c3:ee:ea:17:86:6d:71:ce:df:0e:4c:
4f:5c:bb:c9:75:62:10:f0:7b:3e:b3:ed:7e:ea:a3:9d:36:70:
23:61:bc:b2:44:a7:44:6a:2b:30:d1:08:98:7e:b5:bc:4f:98:
59:87:94:80
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICE7UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDIw
ODM5MjRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDZBNDc1NkIxMDYwNEM2
QkVDQzUwNDU4RDE1MUE3QjU1QTUwMzI1RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChbgZmQKlOfSgqNwZ1Jf8fnUfsxid+mTHxKNPlnLgEQeGCYFM2
0vstPyaB7cl7Fqu4ApdF1ErzwZL+4pZIR+JnbXf4W4WoFju1PiePM9Phqn3t3EmR
U/BRxyzFTckxSBbunysZpI1yfyPzX4qiEcvI0FX3oXk85plnDARN2X2hvqHGW5g7
sLwQG/2lt8/x4F0lnJJ5Khnv0goaU7a9cnemr1DKeex7C5D9MzjrFlIjy6UuVNO3
EKzdh8W0bGXGBa0FY0ldJI8lFzmak3HzIzpQ285ctgvSyqC8fkYcPcmBtGP5pfSy
/jFpGVdQHEuPPe5hBFp4omoU1GF1k3SCfk9fAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUakdWsQYExr7MUEWNFRp7VaUDJfcwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9ha2RXc1FZRXhyN01VRVdO
RlJwN1ZhVURKZmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAFZlRv39m/8v+LFpWC9HRxHUZ9Qv0ifAI1yi
CixOJEwc9Qwwn1KqH0byY9Dt90WPi0v/auccSYTzjpTlLDspJ0T28qoy7ERPV84w
BgA3Z1lN2Q/BfuppamQegkrh9sogkrBiiVffzIR/nt8/9Ok/yOSWcVolycYsec0D
Z8M+FGhb6C/59Si/U1kUOCMkWqcHqVUc0/fBJvUGSz56XzHZ3dRfBi+kOXQWgj6w
KLvQ7w44fzro46oHBeFa539xR8TuI9gXjqIKxfQJbr5EQdbD7uoXhm1xzt8OTE9c
u8l1YhDwez6z7X7qo502cCNhvLJEp0RqKzDRCJh+tbxPmFmHlIA=
-----END CERTIFICATE-----
Generated at Sat Jun 21 20:04:13 2025 by rpki-client