Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/nf54ZDOI6I5IAY_okzIQRpWnczE.roa
File: nf54ZDOI6I5IAY_okzIQRpWnczE.roa (raw, json)
Hash identifier: mxu6phleceShakWCEYLNCsU7DnpE7gyvycvZANQrRSo=
Subject key identifier: 9D:FE:78:64:33:88:E8:8E:48:01:8F:E8:93:32:10:46:95:A7:73:31
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0CED
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nf54ZDOI6I5IAY_okzIQRpWnczE.roa
Signing time: Sat 24 May 2025 07:38:31 +0000
ROA not before: Sat 24 May 2025 07:38:31 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3309 (0xced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 07:38:31 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9DFE78643388E88E48018FE89332104695A77331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:45:bb:80:ce:a7:4d:32:be:87:99:5b:5f:
3f:4d:f1:75:a1:50:1f:26:e6:e6:f6:8e:c0:df:d6:
30:51:b2:aa:aa:0b:d4:d4:92:56:86:a6:77:93:a3:
85:5e:71:47:3f:73:cf:50:f3:41:8b:1a:fc:86:ca:
1e:74:f9:13:a8:55:d1:71:bc:c8:81:f4:70:28:e4:
4e:76:22:9e:c7:4c:19:5f:ac:bf:6a:62:e0:d1:14:
c7:1f:f4:73:54:45:7b:15:01:03:e3:62:e5:7a:be:
7d:fb:38:1d:2f:a1:52:91:c5:39:1f:ac:be:db:a5:
6b:30:67:e5:88:f8:bf:ed:1b:ef:e1:52:2d:91:39:
cd:a4:48:c2:2a:e2:12:20:a6:25:7b:2b:fb:2a:4a:
a3:a4:75:be:98:1c:19:89:24:8e:fe:30:2b:bd:29:
63:26:e3:9b:cb:40:9a:e5:53:ce:58:a6:9a:84:22:
2d:d6:82:2d:7c:ce:d1:84:1d:d8:50:72:76:2c:a3:
4f:24:65:5f:6c:7d:b4:c8:aa:d5:fc:b1:90:eb:6f:
af:54:af:dc:7f:4c:ef:2e:bb:a2:35:ed:e1:27:64:
51:e7:39:36:45:99:2e:3e:3e:58:51:c2:b2:83:3b:
e3:a3:79:6a:2b:d1:f0:97:a3:9a:46:0d:60:be:b6:
c9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FE:78:64:33:88:E8:8E:48:01:8F:E8:93:32:10:46:95:A7:73:31
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nf54ZDOI6I5IAY_okzIQRpWnczE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
64:85:c6:22:26:88:32:0b:51:0c:32:9c:20:e3:88:2a:56:fd:
83:f1:fa:06:e9:9f:8f:55:12:cc:25:73:39:d7:9b:d2:8f:26:
81:77:67:b0:74:16:9c:38:af:df:29:80:7f:2f:c4:0c:2a:8c:
c4:c5:ae:a6:cc:2e:4d:cd:82:1e:5b:36:5a:0c:b3:eb:9f:02:
e9:91:09:d3:7a:2d:b8:cc:75:67:81:3f:9e:ce:4a:09:67:5c:
9b:49:d7:91:91:f4:7f:6a:cf:4c:1c:96:9f:d1:28:db:63:88:
6a:10:39:9c:5e:61:c8:76:fa:9a:e4:26:95:1e:1e:e4:c0:50:
29:b8:73:b4:b8:ae:8d:3a:ff:27:6f:06:ec:a4:48:d6:ae:a7:
0b:b0:49:6b:c0:af:ab:49:c0:96:fc:e7:ae:64:da:42:f8:ae:
a6:7b:87:27:04:3a:03:05:99:f8:16:cb:50:2c:7b:b5:9a:22:
08:01:56:db:75:4d:06:b0:64:ef:86:78:41:9c:44:8f:76:34:
7f:aa:12:f6:7a:81:a8:50:3b:25:31:82:8d:a6:82:de:fb:50:
a5:7e:fb:dd:89:52:ad:a1:60:84:c9:a5:50:47:45:b7:50:52:
c6:1e:04:de:92:fe:d4:64:38:d7:2d:86:3a:fb:8e:f0:c9:5d:
57:5f:95:ae
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDO0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjQw
NzM4MzFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDlERkU3ODY0MzM4OEU4
OEU0ODAxOEZFODkzMzIxMDQ2OTVBNzczMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC13UW7gM6nTTK+h5lbXz9N8XWhUB8m5ub2jsDf1jBRsqqqC9TU
klaGpneTo4VecUc/c89Q80GLGvyGyh50+ROoVdFxvMiB9HAo5E52Ip7HTBlfrL9q
YuDRFMcf9HNURXsVAQPjYuV6vn37OB0voVKRxTkfrL7bpWswZ+WI+L/tG+/hUi2R
Oc2kSMIq4hIgpiV7K/sqSqOkdb6YHBmJJI7+MCu9KWMm45vLQJrlU85YppqEIi3W
gi18ztGEHdhQcnYso08kZV9sfbTIqtX8sZDrb69Ur9x/TO8uu6I17eEnZFHnOTZF
mS4+PlhRwrKDO+OjeWor0fCXo5pGDWC+tslTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUnf54ZDOI6I5IAY/okzIQRpWnczEwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9uZjU0WkRPSTZJNUlBWV9v
a3pJUVJwV25jekUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAGSFxiImiDILUQwynCDjiCpW/YPx+gbpn49V
EswlcznXm9KPJoF3Z7B0Fpw4r98pgH8vxAwqjMTFrqbMLk3Ngh5bNloMs+ufAumR
CdN6LbjMdWeBP57OSglnXJtJ15GR9H9qz0wclp/RKNtjiGoQOZxeYch2+prkJpUe
HuTAUCm4c7S4ro06/ydvBuykSNaupwuwSWvAr6tJwJb8565k2kL4rqZ7hycEOgMF
mfgWy1Ase7WaIggBVtt1TQawZO+GeEGcRI92NH+qEvZ6gahQOyUxgo2mgt77UKV+
+92JUq2hYITJpVBHRbdQUsYeBN6S/tRkONcthjr7jvDJXVdfla4=
-----END CERTIFICATE-----
Generated at Sat Jun 21 23:29:15 2025 by rpki-client