Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/eKrjgCFMxXbIO3roNYPXDql6NsY.roa
File: eKrjgCFMxXbIO3roNYPXDql6NsY.roa (raw, json)
Hash identifier: 5g86Tkhsj7oE+nuqyY9ETeae/Im+rnA1IEj3YQATmxM=
Subject key identifier: 78:AA:E3:80:21:4C:C5:76:C8:3B:7A:E8:35:83:D7:0E:A9:7A:36:C6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0721
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/eKrjgCFMxXbIO3roNYPXDql6NsY.roa
Signing time: Fri 16 May 2025 14:08:05 +0000
ROA not before: Fri 16 May 2025 14:08:05 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1825 (0x721)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 14:08:05 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=78AAE380214CC576C83B7AE83583D70EA97A36C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:b5:f8:24:f5:48:d6:2e:96:e5:5d:a7:f7:
99:09:fe:da:4d:71:f4:52:51:9b:d7:ce:60:68:f9:
9f:0e:af:14:0b:a3:87:82:e3:22:8c:da:14:92:28:
40:2a:98:ed:ab:06:f9:4a:e0:f7:99:72:0e:56:f1:
ab:e9:f4:29:24:47:71:f5:f0:29:43:57:c0:3c:e0:
c8:c7:c7:49:14:3f:51:f3:e7:3b:b2:7f:4c:61:92:
79:3a:96:36:48:8b:82:51:ce:ee:94:20:82:39:28:
3d:40:f9:6c:69:d0:7f:1c:eb:b0:52:f4:18:4e:b5:
c5:aa:ca:05:b2:b9:18:db:fe:aa:27:f9:90:fa:b3:
09:c2:d3:08:99:d5:fe:b8:82:75:e7:a1:e0:f1:46:
30:ea:80:21:2a:65:74:26:e6:6f:8e:25:44:31:c8:
f7:3c:0a:63:3b:4c:38:a8:23:ac:55:0d:1a:c7:6b:
d2:b1:43:b4:e8:04:fe:8a:cc:30:15:b1:68:43:b0:
a2:da:a8:4d:09:10:be:bc:9a:d2:41:1b:84:d9:2f:
6d:8a:90:8c:00:ce:fd:7a:bc:de:0e:07:98:e5:c3:
b7:0a:68:6a:70:99:af:77:1f:52:1d:fd:17:3e:e7:
12:a7:ba:b3:28:cf:0b:d6:0a:47:3a:ec:b0:8f:6a:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AA:E3:80:21:4C:C5:76:C8:3B:7A:E8:35:83:D7:0E:A9:7A:36:C6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/eKrjgCFMxXbIO3roNYPXDql6NsY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:cb:36:d7:f5:f9:25:f5:86:6d:88:3b:e2:f2:2e:0c:53:f2:
4a:ff:54:39:f1:c5:9d:06:ed:e3:b9:6a:ac:7c:31:1e:1f:f8:
cd:48:64:9c:7e:47:b3:6d:de:e3:47:a2:a8:cb:87:37:cb:d0:
b9:de:a7:91:c3:e2:ea:5f:2c:13:3d:4e:80:9d:0f:0a:88:50:
5f:f1:30:ea:82:fb:0b:ff:9a:e0:30:75:4b:df:df:bc:d6:82:
3a:ba:b7:19:05:2a:54:ce:90:3b:ee:03:ab:7c:39:09:11:bf:
22:17:e5:13:70:74:68:91:38:43:57:cf:51:7f:9d:f4:2f:a5:
a0:5c:dd:10:84:45:01:52:cf:2d:39:a2:e5:1c:60:0f:37:f2:
c6:da:4c:5f:ad:a2:b3:c4:46:92:e1:14:70:69:f6:38:eb:d2:
bb:ad:7e:6c:33:35:30:d1:3c:51:b6:98:2a:de:65:73:52:5f:
7d:5e:3b:52:3d:fd:88:9a:c5:00:98:45:88:e7:99:aa:91:bf:
64:4c:cb:5a:91:0a:59:01:7f:bb:b1:05:d4:85:af:b1:e1:54:
71:ea:6f:3a:97:2d:40:dd:44:d8:a3:dd:ce:cc:39:56:bd:2d:
07:d3:d9:41:61:6f:34:a4:7a:cb:2b:1f:62:d8:ec:a4:10:32:
c0:1d:b7:f2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICByEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTYx
NDA4MDVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDc4QUFFMzgwMjE0Q0M1
NzZDODNCN0FFODM1ODNENzBFQTk3QTM2QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzVbX4JPVI1i6W5V2n95kJ/tpNcfRSUZvXzmBo+Z8OrxQLo4eC
4yKM2hSSKEAqmO2rBvlK4PeZcg5W8avp9CkkR3H18ClDV8A84MjHx0kUP1Hz5zuy
f0xhknk6ljZIi4JRzu6UIII5KD1A+Wxp0H8c67BS9BhOtcWqygWyuRjb/qon+ZD6
swnC0wiZ1f64gnXnoeDxRjDqgCEqZXQm5m+OJUQxyPc8CmM7TDioI6xVDRrHa9Kx
Q7ToBP6KzDAVsWhDsKLaqE0JEL68mtJBG4TZL22KkIwAzv16vN4OB5jlw7cKaGpw
ma93H1Id/Rc+5xKnurMozwvWCkc67LCPahvnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUeKrjgCFMxXbIO3roNYPXDql6NsYwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9lS3JqZ0NGTXhYYklPM3Jv
TllQWERxbDZOc1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAK7LNtf1+SX1hm2IO+LyLgxT8kr/VDnxxZ0G
7eO5aqx8MR4f+M1IZJx+R7Nt3uNHoqjLhzfL0Lnep5HD4upfLBM9ToCdDwqIUF/x
MOqC+wv/muAwdUvf37zWgjq6txkFKlTOkDvuA6t8OQkRvyIX5RNwdGiROENXz1F/
nfQvpaBc3RCERQFSzy05ouUcYA838sbaTF+torPERpLhFHBp9jjr0rutfmwzNTDR
PFG2mCreZXNSX31eO1I9/YiaxQCYRYjnmaqRv2RMy1qRClkBf7uxBdSFr7HhVHHq
bzqXLUDdRNij3c7MOVa9LQfT2UFhbzSkessrH2LY7KQQMsAdt/I=
-----END CERTIFICATE-----
Generated at Sat Jun 21 18:35:11 2025 by rpki-client