Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/dOolQWb777qvbp2woE3stlRWktk.roa
File: dOolQWb777qvbp2woE3stlRWktk.roa (raw, json)
Hash identifier: 9FUKBVdM+/ToZkcy3XH3H9pmYW03CZZgHLjEgcC6To8=
Subject key identifier: 74:EA:25:41:66:FB:EF:BA:AF:6E:9D:B0:A0:4D:EC:B6:54:56:92:D9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1681
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dOolQWb777qvbp2woE3stlRWktk.roa
Signing time: Fri 06 Jun 2025 02:09:26 +0000
ROA not before: Fri 06 Jun 2025 02:09:26 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5761 (0x1681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 6 02:09:26 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=74EA254166FBEFBAAF6E9DB0A04DECB6545692D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:ca:73:cd:e0:69:07:12:d1:ad:35:1f:61:
c8:ff:9e:e4:90:24:e6:09:2b:8d:04:c9:5f:1d:34:
bb:16:03:94:84:cc:b1:21:f8:6b:15:3b:96:3d:51:
4a:d7:ad:f0:8e:b3:1a:8d:fb:b8:21:c6:43:3b:a4:
2f:de:f2:ac:cb:37:d2:71:fa:08:7b:aa:fe:ab:f0:
9f:1d:16:b4:f3:c4:a9:a2:73:32:12:3c:bb:61:f7:
99:9f:b5:06:70:d1:a9:c6:be:d9:0d:e1:5e:96:05:
17:12:96:b6:57:5d:81:7c:95:d4:c8:b4:63:32:15:
c3:87:de:9a:87:3c:09:62:3e:49:a2:c6:ad:ed:00:
c2:70:25:00:32:e2:d0:a3:15:c5:df:68:32:e5:8d:
96:4f:d9:ce:51:b8:73:4a:3f:ca:1d:cd:27:d5:7f:
99:97:6e:93:4a:d3:d5:01:36:9d:6e:20:c4:cf:b3:
47:a4:84:62:79:b4:9d:9c:e9:5d:28:58:76:8a:12:
cc:a0:07:c7:00:67:b8:da:90:58:f7:21:bc:98:18:
50:b2:1d:52:44:5f:ab:3d:d9:ae:de:f3:1d:3a:a6:
a3:d4:cf:15:c8:85:f2:b4:b5:55:f2:d0:8f:63:c5:
e4:63:b5:2b:c3:55:9a:7d:1c:c1:91:0c:87:5b:15:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EA:25:41:66:FB:EF:BA:AF:6E:9D:B0:A0:4D:EC:B6:54:56:92:D9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dOolQWb777qvbp2woE3stlRWktk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:c0:ea:1a:ef:63:dd:b8:71:a3:cc:5c:04:58:4c:7b:0d:03:
f2:14:15:15:3d:77:43:84:6d:90:75:49:15:56:1f:2a:d5:eb:
da:a6:a5:3b:4e:de:1e:40:3b:8b:aa:8c:66:45:6a:e8:75:c4:
be:09:64:39:f0:30:81:e3:af:4b:ce:9d:80:2a:02:41:e2:ae:
6f:57:98:9b:05:11:77:09:5e:42:36:48:14:d9:f4:72:ee:99:
1c:3b:94:f3:b7:c5:8b:75:9c:3d:ab:ae:14:ce:fe:b6:19:3e:
47:8f:2c:7e:cc:56:a2:9f:f6:5b:67:c6:bb:54:cf:ae:58:ae:
04:87:41:44:53:ab:35:8d:39:ef:c2:25:02:36:db:3c:5a:61:
e6:ca:ae:e1:71:08:db:1d:db:7f:48:03:54:f8:f9:ca:65:e3:
11:79:dd:1e:e9:a7:ab:dd:ec:13:e9:35:2e:80:66:50:1e:28:
af:53:90:56:76:4a:02:eb:35:59:1a:24:cf:ab:93:33:0f:a7:
b7:3d:75:e6:a1:b6:73:84:1b:ad:26:78:00:ba:89:59:59:ae:
93:a9:c1:e5:66:0f:f5:bb:ed:bb:6e:ec:d9:a7:9b:7f:84:44:
bd:69:e9:92:cc:b9:bb:6c:57:d3:1e:39:41:e9:ae:e5:b7:8a:
c1:da:63:9c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFoEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDYw
MjA5MjZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDc0RUEyNTQxNjZGQkVG
QkFBRjZFOURCMEEwNERFQ0I2NTQ1NjkyRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHfspzzeBpBxLRrTUfYcj/nuSQJOYJK40EyV8dNLsWA5SEzLEh
+GsVO5Y9UUrXrfCOsxqN+7ghxkM7pC/e8qzLN9Jx+gh7qv6r8J8dFrTzxKmiczIS
PLth95mftQZw0anGvtkN4V6WBRcSlrZXXYF8ldTItGMyFcOH3pqHPAliPkmixq3t
AMJwJQAy4tCjFcXfaDLljZZP2c5RuHNKP8odzSfVf5mXbpNK09UBNp1uIMTPs0ek
hGJ5tJ2c6V0oWHaKEsygB8cAZ7jakFj3IbyYGFCyHVJEX6s92a7e8x06pqPUzxXI
hfK0tVXy0I9jxeRjtSvDVZp9HMGRDIdbFXjTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUdOolQWb777qvbp2woE3stlRWktkwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9kT29sUVdiNzc3cXZicDJ3
b0Uzc3RsUldrdGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAFDA6hrvY924caPMXARYTHsNA/IUFRU9d0OE
bZB1SRVWHyrV69qmpTtO3h5AO4uqjGZFauh1xL4JZDnwMIHjr0vOnYAqAkHirm9X
mJsFEXcJXkI2SBTZ9HLumRw7lPO3xYt1nD2rrhTO/rYZPkePLH7MVqKf9ltnxrtU
z65YrgSHQURTqzWNOe/CJQI22zxaYebKruFxCNsd239IA1T4+cpl4xF53R7pp6vd
7BPpNS6AZlAeKK9TkFZ2SgLrNVkaJM+rkzMPp7c9deahtnOEG60meAC6iVlZrpOp
weVmD/W77btu7Nmnm3+ERL1p6ZLMubtsV9MeOUHpruW3isHaY5w=
-----END CERTIFICATE-----
Generated at Sun Jun 22 06:25:37 2025 by rpki-client