Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ia589QCFf88VZNnOZlqAJdcp8oY.roa
File: ia589QCFf88VZNnOZlqAJdcp8oY.roa (raw, json)
Hash identifier: lcRAVcl6fQW5ZlN9toBBCrY5/ZOPGbp6y/c7JIBTsbw=
Subject key identifier: 89:AE:7C:F5:00:85:7F:CF:15:64:D9:CE:66:5A:80:25:D7:29:F2:86
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1489
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ia589QCFf88VZNnOZlqAJdcp8oY.roa
Signing time: Tue 03 Jun 2025 11:09:59 +0000
ROA not before: Tue 03 Jun 2025 11:09:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5257 (0x1489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 11:09:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=89AE7CF500857FCF1564D9CE665A8025D729F286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:eb:f3:0f:19:63:ea:55:9a:c8:57:51:31:
d5:ad:fc:d2:94:77:f4:9e:4e:87:c2:de:f0:04:f2:
5e:56:80:10:0d:ea:79:29:01:8f:d2:42:45:91:3b:
e8:56:56:50:d1:2f:1a:f1:08:ef:cb:50:bc:a7:a5:
2d:de:bd:19:0f:1a:d2:3c:93:ab:bd:2f:a0:e3:2e:
db:8e:cc:9a:87:39:04:a0:d8:0a:63:9d:4c:39:3d:
7a:25:8b:50:46:91:19:b7:83:70:5f:2b:5a:2d:88:
79:3a:b1:d8:3c:34:4f:79:be:ee:ee:a4:0a:e9:16:
a0:e7:a1:f8:5d:f1:f6:b5:bf:33:c5:c2:21:6b:12:
dc:a0:43:94:4e:c4:6c:5a:55:e5:3e:e4:d2:3b:28:
6f:b7:46:47:22:ac:9a:e8:63:f1:73:2d:28:0e:75:
e4:d9:da:32:49:ae:25:a7:e7:22:32:4f:03:ae:b6:
2e:c8:94:1c:fd:1f:66:06:f1:01:36:5b:98:97:6c:
43:55:3b:4d:89:64:9f:3e:fe:7c:74:b6:4f:d6:c3:
44:42:4e:8f:8f:fc:b2:1d:12:2a:34:8e:53:92:65:
49:1c:6e:f1:dd:80:5d:6e:42:38:68:75:14:21:26:
c4:35:28:30:37:f6:3f:ac:bb:2b:99:b1:c4:2f:81:
6e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AE:7C:F5:00:85:7F:CF:15:64:D9:CE:66:5A:80:25:D7:29:F2:86
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ia589QCFf88VZNnOZlqAJdcp8oY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:4e:c5:f6:7f:2d:ae:01:86:b7:2c:5b:59:aa:ae:20:d8:95:
71:d6:54:8f:dd:33:e6:08:d5:c1:36:46:5e:ee:8b:b9:2d:b7:
86:68:63:44:19:b6:61:6f:3c:eb:1c:c9:77:0a:22:aa:39:fb:
3d:93:42:e9:64:19:33:1b:cd:a2:68:2f:7d:00:32:55:e4:af:
24:dc:25:23:e6:66:ba:54:03:64:bf:2a:56:40:4f:f7:c7:1b:
d7:b3:d5:3a:b8:3c:8b:2f:77:90:18:f4:29:af:7e:ef:38:2b:
cb:04:e6:66:e9:2a:1d:0e:8f:63:25:9b:21:e0:93:63:25:67:
0a:94:ab:da:1b:73:71:34:62:b8:1b:ff:8d:84:df:8f:9b:9a:
24:12:ab:64:0e:9b:cc:60:d1:0c:12:94:ec:3c:4c:d4:19:5b:
7a:8e:3c:66:5f:02:f5:c4:b8:3a:02:80:5a:14:ba:ca:b3:0f:
c0:a4:49:8b:d2:6b:46:23:d7:e7:3b:2d:26:6f:c5:9a:4d:e7:
8a:81:fa:c1:fb:0b:6b:c2:b1:76:f4:c3:0b:df:c0:a0:48:fe:
79:7e:2f:52:0e:b2:a5:f2:25:39:54:4d:ba:d7:66:0b:a2:41:
39:ef:7b:b1:75:72:8c:34:9f:cc:c7:f0:9d:da:36:c5:b8:b5:
56:9c:39:49
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDMx
MTA5NTlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDg5QUU3Q0Y1MDA4NTdG
Q0YxNTY0RDlDRTY2NUE4MDI1RDcyOUYyODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgs+vzDxlj6lWayFdRMdWt/NKUd/SeTofC3vAE8l5WgBAN6nkp
AY/SQkWRO+hWVlDRLxrxCO/LULynpS3evRkPGtI8k6u9L6DjLtuOzJqHOQSg2Apj
nUw5PXoli1BGkRm3g3BfK1otiHk6sdg8NE95vu7upArpFqDnofhd8fa1vzPFwiFr
EtygQ5ROxGxaVeU+5NI7KG+3RkcirJroY/FzLSgOdeTZ2jJJriWn5yIyTwOuti7I
lBz9H2YG8QE2W5iXbENVO02JZJ8+/nx0tk/Ww0RCTo+P/LIdEio0jlOSZUkcbvHd
gF1uQjhodRQhJsQ1KDA39j+suyuZscQvgW7jAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUia589QCFf88VZNnOZlqAJdcp8oYwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9pYTU4OVFDRmY4OFZaTm5P
WmxxQUpkY3A4b1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAAROxfZ/La4BhrcsW1mqriDYlXHWVI/dM+YI
1cE2Rl7ui7ktt4ZoY0QZtmFvPOscyXcKIqo5+z2TQulkGTMbzaJoL30AMlXkryTc
JSPmZrpUA2S/KlZAT/fHG9ez1Tq4PIsvd5AY9Cmvfu84K8sE5mbpKh0Oj2MlmyHg
k2MlZwqUq9obc3E0Yrgb/42E34+bmiQSq2QOm8xg0QwSlOw8TNQZW3qOPGZfAvXE
uDoCgFoUusqzD8CkSYvSa0Yj1+c7LSZvxZpN54qB+sH7C2vCsXb0wwvfwKBI/nl+
L1IOsqXyJTlUTbrXZguiQTnve7F1cow0n8zH8J3aNsW4tVacOUk=
-----END CERTIFICATE-----
Generated at Sun Jun 22 02:29:45 2025 by rpki-client