Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ntqJDxzCVuJ-tvVI12VJraKfVSA.roa
File: ntqJDxzCVuJ-tvVI12VJraKfVSA.roa (raw, json)
Hash identifier: lgj71rC3Dby/hJK82Y56SbU0t36z8y/QEwULSKxJD7w=
Subject key identifier: 9E:DA:89:0F:1C:C2:56:E2:7E:B6:F5:48:D7:65:49:AD:A2:9F:55:20
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1841
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ntqJDxzCVuJ-tvVI12VJraKfVSA.roa
Signing time: Sun 08 Jun 2025 10:09:35 +0000
ROA not before: Sun 08 Jun 2025 10:09:35 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6209 (0x1841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 10:09:35 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9EDA890F1CC256E27EB6F548D76549ADA29F5520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:ab:03:9e:76:ed:4a:a0:e9:34:a7:83:ce:
c2:20:5e:23:81:3e:88:62:ea:15:2a:1c:60:d4:29:
a3:99:da:be:21:81:18:d0:96:df:25:61:7d:f5:d6:
e8:6e:44:22:94:93:cb:cd:ef:b2:db:ec:5f:a5:24:
bb:57:37:71:e9:b1:85:62:38:2e:c3:10:18:6d:02:
7c:a5:8f:2b:c0:f0:26:13:a9:00:55:f6:8e:70:b0:
fd:26:6e:c2:8f:88:ac:88:a8:86:cb:3d:78:19:8a:
5a:49:c3:b9:a9:cb:ba:46:08:95:ee:93:7b:6f:a2:
4a:ff:b6:80:68:80:0a:1d:db:69:ea:9b:c5:1c:60:
06:6f:6c:22:ca:40:5f:2c:df:05:f7:99:be:25:86:
9b:8c:69:e7:71:2a:75:c2:09:b3:82:d7:2f:54:af:
86:2d:a9:b5:08:a4:a0:13:89:e6:05:70:5d:3b:5b:
7b:8b:de:07:19:c1:03:06:8b:a6:7f:53:95:8b:fe:
38:72:83:97:d4:f0:77:e2:a6:87:a7:70:97:9b:b1:
be:9f:13:f5:24:1e:35:29:81:1b:db:96:c3:fe:3f:
ed:80:9d:14:26:da:db:cc:02:ea:c3:ef:75:65:9b:
19:17:aa:eb:95:8b:a0:47:b9:b1:dc:79:06:2e:93:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DA:89:0F:1C:C2:56:E2:7E:B6:F5:48:D7:65:49:AD:A2:9F:55:20
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ntqJDxzCVuJ-tvVI12VJraKfVSA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:7b:60:fa:8e:ef:8a:4a:1d:6e:4d:44:2a:9c:67:37:e7:7a:
04:e9:14:c5:f2:44:d0:e9:e8:3f:5c:a1:28:a8:3b:24:a9:90:
7b:76:6b:af:37:09:1d:74:bb:53:b4:d8:fc:47:ca:9f:ad:8c:
d7:a4:28:92:06:b9:3a:a8:a4:56:73:bb:d0:67:08:6d:75:d7:
bb:8b:a6:2b:59:2c:14:6a:59:50:cf:af:da:f1:33:74:1c:79:
15:f1:94:4c:ec:c9:ad:8f:1a:19:7a:3b:f7:4e:35:ec:c1:51:
f9:e5:00:f2:65:b0:55:68:ef:c8:0c:30:f1:42:56:75:0f:6e:
38:65:c0:08:8b:3c:8a:db:07:e7:dd:9b:c5:51:08:d4:46:f2:
06:87:45:56:cd:b1:b5:3a:2f:62:dc:1d:65:cb:7b:8e:e3:e5:
90:11:e3:98:ba:15:99:12:45:67:95:34:00:10:fd:07:9a:9a:
d8:fa:39:33:e3:56:b6:c0:2b:40:c8:18:3a:e7:c0:4c:94:3b:
22:29:9f:b8:4e:82:69:c9:28:af:d0:5a:ec:7d:ec:01:95:41:
12:09:df:58:30:7e:94:c9:07:0f:e3:a7:35:ed:a6:6e:cb:e5:
3e:c8:25:3f:1a:57:09:d8:06:72:2d:7f:fe:46:34:26:82:cf:
20:83:af:0e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGEEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDgx
MDA5MzVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDlFREE4OTBGMUNDMjU2
RTI3RUI2RjU0OEQ3NjU0OUFEQTI5RjU1MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnd6sDnnbtSqDpNKeDzsIgXiOBPohi6hUqHGDUKaOZ2r4hgRjQ
lt8lYX311uhuRCKUk8vN77Lb7F+lJLtXN3HpsYViOC7DEBhtAnyljyvA8CYTqQBV
9o5wsP0mbsKPiKyIqIbLPXgZilpJw7mpy7pGCJXuk3tvokr/toBogAod22nqm8Uc
YAZvbCLKQF8s3wX3mb4lhpuMaedxKnXCCbOC1y9Ur4YtqbUIpKATieYFcF07W3uL
3gcZwQMGi6Z/U5WL/jhyg5fU8HfipoencJebsb6fE/UkHjUpgRvblsP+P+2AnRQm
2tvMAurD73VlmxkXquuVi6BHubHceQYuk0sXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUntqJDxzCVuJ+tvVI12VJraKfVSAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9udHFKRHh6Q1Z1Si10dlZJ
MTJWSnJhS2ZWU0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAHJ7YPqO74pKHW5NRCqcZzfnegTpFMXyRNDp
6D9coSioOySpkHt2a683CR10u1O02PxHyp+tjNekKJIGuTqopFZzu9BnCG1117uL
pitZLBRqWVDPr9rxM3QceRXxlEzsya2PGhl6O/dONezBUfnlAPJlsFVo78gMMPFC
VnUPbjhlwAiLPIrbB+fdm8VRCNRG8gaHRVbNsbU6L2LcHWXLe47j5ZAR45i6FZkS
RWeVNAAQ/Qeamtj6OTPjVrbAK0DIGDrnwEyUOyIpn7hOgmnJKK/QWux97AGVQRIJ
31gwfpTJBw/jpzXtpm7L5T7IJT8aVwnYBnItf/5GNCaCzyCDrw4=
-----END CERTIFICATE-----
Generated at Sat Jun 21 17:57:35 2025 by rpki-client