Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ftJldcJmR-8N2mJa8AkyjJFeHn0.roa
File: ftJldcJmR-8N2mJa8AkyjJFeHn0.roa (raw, json)
Hash identifier: DxWxogFKWtEFPjzHnA25fbvFoRmZK6rn9i3ohNuF1X4=
Subject key identifier: 7E:D2:65:75:C2:66:47:EF:0D:DA:62:5A:F0:09:32:8C:91:5E:1E:7D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 140D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ftJldcJmR-8N2mJa8AkyjJFeHn0.roa
Signing time: Mon 02 Jun 2025 19:39:13 +0000
ROA not before: Mon 02 Jun 2025 19:39:13 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5133 (0x140d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 2 19:39:13 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7ED26575C26647EF0DDA625AF009328C915E1E7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:f6:37:d7:56:11:63:c7:bc:ef:33:58:ef:
3c:0d:d5:b8:5c:df:66:b4:9b:04:27:49:13:71:45:
a4:d6:37:cd:0b:48:6c:f4:fa:2d:cf:63:30:20:ab:
4f:ce:a8:34:10:5d:8d:fe:f6:c9:5f:6b:f2:62:d4:
c7:bd:ce:a4:6d:88:32:ff:7c:85:fa:62:42:28:d8:
fd:dc:b6:d6:ae:fe:a8:2c:16:6a:29:2f:1a:a6:c9:
96:19:93:f3:91:bd:46:76:16:f5:ec:f9:f2:a2:59:
a1:1a:d3:98:c0:35:5d:32:48:87:5a:49:a4:12:74:
62:cf:92:9a:03:43:b9:3b:3d:14:af:46:70:ab:4f:
fc:9a:99:d1:3c:2a:2f:41:50:aa:f1:0c:ac:81:ef:
93:63:a3:73:ba:8a:83:20:0a:ac:27:68:26:ef:0c:
f3:34:0f:ef:59:5b:ce:6b:d6:b2:0d:79:40:96:a3:
8b:87:90:5b:7b:8a:50:c5:ea:47:5b:87:13:d4:37:
b9:a4:2d:00:e1:6f:56:82:73:5d:13:5e:9b:90:69:
fb:e2:d3:db:e7:ab:fd:5b:df:70:eb:d2:fc:51:0e:
f9:9d:86:64:f9:f5:9d:f1:a8:37:48:58:b4:0b:fc:
39:f5:02:cc:12:b2:bf:ca:33:1a:3d:66:b7:03:47:
1b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D2:65:75:C2:66:47:EF:0D:DA:62:5A:F0:09:32:8C:91:5E:1E:7D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ftJldcJmR-8N2mJa8AkyjJFeHn0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:75:b5:cf:34:b1:cb:b5:a6:cd:58:96:50:fa:db:9f:5b:e9:
93:f8:fe:c0:92:4f:1e:bd:a5:ee:10:aa:c7:b8:6c:0b:f9:80:
c5:bb:64:c1:95:5b:b5:1c:cb:3a:9e:31:a2:f9:5f:91:e8:ef:
c7:cd:d5:43:f8:dc:cc:3e:44:c2:23:42:4b:60:f9:91:82:75:
99:82:e3:fe:6c:01:1f:32:1e:18:97:ff:27:57:3e:a6:13:99:
66:ec:5e:a8:c4:a7:b2:7b:3c:a3:6e:cd:5c:e4:8c:56:11:ec:
b0:66:58:de:e7:05:ce:1e:d8:41:68:e7:2f:82:8f:ef:8d:81:
50:46:88:ec:cf:df:5c:01:10:64:1b:87:c7:ce:ea:ad:0f:cf:
b8:61:02:9a:9d:2f:3b:e6:45:23:13:f6:e7:f6:5e:a0:c5:a1:
b8:78:6e:7b:c4:f5:08:d7:9f:31:22:77:3b:b2:d3:29:74:15:
f0:de:5a:06:81:77:b6:fd:6c:f7:b8:09:ca:74:5f:ae:c6:47:
c4:cc:15:0e:66:9c:33:8a:d6:cc:ee:7e:76:0d:3f:7b:ed:fd:
05:6c:b1:91:b0:21:f9:db:06:42:5f:69:8f:c6:b6:65:69:0e:
10:ba:de:1c:ef:15:3e:94:9c:08:3b:9b:29:7b:76:67:74:e8:
89:c1:3b:40
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFA0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDIx
OTM5MTNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDdFRDI2NTc1QzI2NjQ3
RUYwRERBNjI1QUYwMDkzMjhDOTE1RTFFN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3pfY311YRY8e87zNY7zwN1bhc32a0mwQnSRNxRaTWN80LSGz0
+i3PYzAgq0/OqDQQXY3+9slfa/Ji1Me9zqRtiDL/fIX6YkIo2P3cttau/qgsFmop
LxqmyZYZk/ORvUZ2FvXs+fKiWaEa05jANV0ySIdaSaQSdGLPkpoDQ7k7PRSvRnCr
T/yamdE8Ki9BUKrxDKyB75Njo3O6ioMgCqwnaCbvDPM0D+9ZW85r1rINeUCWo4uH
kFt7ilDF6kdbhxPUN7mkLQDhb1aCc10TXpuQafvi09vnq/1b33Dr0vxRDvmdhmT5
9Z3xqDdIWLQL/Dn1AswSsr/KMxo9ZrcDRxsHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUftJldcJmR+8N2mJa8AkyjJFeHn0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9mdEpsZGNKbVItOE4ybUph
OEFreWpKRmVIbjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAJ91tc80scu1ps1YllD6259b6ZP4/sCSTx69
pe4Qqse4bAv5gMW7ZMGVW7UcyzqeMaL5X5Ho78fN1UP43Mw+RMIjQktg+ZGCdZmC
4/5sAR8yHhiX/ydXPqYTmWbsXqjEp7J7PKNuzVzkjFYR7LBmWN7nBc4e2EFo5y+C
j++NgVBGiOzP31wBEGQbh8fO6q0Pz7hhApqdLzvmRSMT9uf2XqDFobh4bnvE9QjX
nzEidzuy0yl0FfDeWgaBd7b9bPe4Ccp0X67GR8TMFQ5mnDOK1szufnYNP3vt/QVs
sZGwIfnbBkJfaY/GtmVpDhC63hzvFT6UnAg7myl7dmd06InBO0A=
-----END CERTIFICATE-----
Generated at Sat Jun 21 00:40:44 2025 by rpki-client