Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/gioP6UCABrkexDGMKTJ4mBnAP18.roa
File: gioP6UCABrkexDGMKTJ4mBnAP18.roa (raw, json)
Hash identifier: QeNPxYVW2t8/yDgS9Fg9/2uWElcOD5SVo27txGCzYnM=
Subject key identifier: 82:2A:0F:E9:40:80:06:B9:1E:C4:31:8C:29:32:78:98:19:C0:3F:5F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01BD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gioP6UCABrkexDGMKTJ4mBnAP18.roa
Signing time: Fri 09 May 2025 09:37:45 +0000
ROA not before: Fri 09 May 2025 09:37:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 09:37:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=822A0FE9408006B91EC4318C2932789819C03F5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:17:52:aa:c9:4e:e5:fe:04:2e:99:47:4d:
13:54:3a:cf:8c:3f:ae:9c:74:c8:05:d1:4c:11:21:
ad:46:2f:4d:6d:6f:85:fc:a9:8c:46:7d:cb:d5:bb:
e4:60:cf:5c:22:8b:8d:80:de:ff:5b:39:f9:ba:72:
1b:82:b1:b0:47:7c:4d:a5:20:30:0b:c7:54:ac:62:
a4:57:40:a4:89:64:0f:d4:d6:e4:0e:b4:d3:c8:55:
b2:5a:cb:a3:b3:d9:a7:fa:e3:0e:d3:97:67:3f:b7:
a5:43:51:15:5d:58:8b:5d:ae:56:83:98:4a:da:a1:
9b:cb:39:52:9f:03:77:21:dd:e4:16:ca:07:bb:2a:
d6:07:70:dd:cc:04:8c:94:43:db:0e:f0:cf:cc:09:
e1:7b:31:03:ab:35:3a:ce:76:55:76:9c:45:7b:e0:
e3:6f:ea:0d:12:80:0e:74:62:6b:e6:cf:db:4d:cf:
f7:d8:9a:ee:88:87:21:62:9a:fc:18:4a:a5:37:e9:
12:0f:80:48:44:94:c5:c1:df:d4:02:f1:8f:a5:95:
ec:d5:a2:7d:10:07:98:46:fd:53:39:7a:05:65:00:
07:68:a0:a4:1a:e2:c9:30:54:77:b0:1c:04:39:39:
b3:9d:ed:d3:58:d4:f8:67:99:da:86:e6:a7:88:72:
9d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2A:0F:E9:40:80:06:B9:1E:C4:31:8C:29:32:78:98:19:C0:3F:5F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gioP6UCABrkexDGMKTJ4mBnAP18.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:40:f0:02:75:a1:0d:4b:21:8c:fd:ac:7b:9e:07:f8:7f:b4:
55:97:dc:a4:01:21:a8:4d:1f:a6:89:bb:bf:7c:dc:2d:c3:4b:
66:54:6c:b1:9b:d7:ce:17:21:f1:02:53:ad:71:74:7b:2f:c5:
7f:57:d7:b5:41:df:6d:b3:92:33:d6:69:5f:0f:4f:ca:cd:5e:
8b:15:2c:36:51:a8:67:6c:9f:7d:3e:9c:67:8a:3c:d5:11:a4:
5c:a6:2c:72:13:40:a1:a7:18:64:7f:c0:f2:95:85:5a:c2:8e:
62:c4:e0:c9:dc:2f:10:13:ae:34:42:af:e0:92:5f:77:23:8b:
54:da:fe:15:9f:d8:ca:57:26:f8:e1:95:be:44:2f:34:08:18:
46:42:98:b3:b4:b7:ab:b3:68:d3:43:e2:b8:ce:a3:fe:14:c1:
8a:67:96:85:8d:c9:8f:23:63:14:cd:04:df:cd:b3:ae:34:35:
fb:59:ee:4b:a5:b3:3d:8a:5a:eb:f5:09:98:68:0a:c1:0c:9d:
7c:b9:69:39:00:15:48:1d:23:80:5f:f4:ea:da:6a:35:f4:60:
4d:0c:a8:d6:2a:5b:91:a0:d8:04:57:69:96:95:95:bb:a9:51:
b7:b6:d6:d8:84:e9:da:a6:5c:e0:ad:a4:6f:d8:06:5e:e5:66:
e1:54:a0:29
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDkw
OTM3NDVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDgyMkEwRkU5NDA4MDA2
QjkxRUM0MzE4QzI5MzI3ODk4MTlDMDNGNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsTBdSqslO5f4ELplHTRNUOs+MP66cdMgF0UwRIa1GL01tb4X8
qYxGfcvVu+Rgz1wii42A3v9bOfm6chuCsbBHfE2lIDALx1SsYqRXQKSJZA/U1uQO
tNPIVbJay6Oz2af64w7Tl2c/t6VDURVdWItdrlaDmEraoZvLOVKfA3ch3eQWyge7
KtYHcN3MBIyUQ9sO8M/MCeF7MQOrNTrOdlV2nEV74ONv6g0SgA50Ymvmz9tNz/fY
mu6IhyFimvwYSqU36RIPgEhElMXB39QC8Y+llezVon0QB5hG/VM5egVlAAdooKQa
4skwVHewHAQ5ObOd7dNY1PhnmdqG5qeIcp1lAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUgioP6UCABrkexDGMKTJ4mBnAP18wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9naW9QNlVDQUJya2V4REdN
S1RKNG1CbkFQMTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAKZA8AJ1oQ1LIYz9rHueB/h/tFWX3KQBIahN
H6aJu7983C3DS2ZUbLGb184XIfECU61xdHsvxX9X17VB322zkjPWaV8PT8rNXosV
LDZRqGdsn30+nGeKPNURpFymLHITQKGnGGR/wPKVhVrCjmLE4MncLxATrjRCr+CS
X3cji1Ta/hWf2MpXJvjhlb5ELzQIGEZCmLO0t6uzaNND4rjOo/4UwYpnloWNyY8j
YxTNBN/Ns640NftZ7kulsz2KWuv1CZhoCsEMnXy5aTkAFUgdI4Bf9OraajX0YE0M
qNYqW5Gg2ARXaZaVlbupUbe21tiE6dqmXOCtpG/YBl7lZuFUoCk=
-----END CERTIFICATE-----
Generated at Fri Jun 20 12:57:57 2025 by rpki-client