Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/p5iy9pTJlCJB9Sg7QamRqNJwSss.roa
File: p5iy9pTJlCJB9Sg7QamRqNJwSss.roa (raw, json)
Hash identifier: ybZucwYJSNlJcaT1tyP6sQ+T6StM7t72CQ62s2o5Us0=
Subject key identifier: A7:98:B2:F6:94:C9:94:22:41:F5:28:3B:41:A9:91:A8:D2:70:4A:CB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C89
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/p5iy9pTJlCJB9Sg7QamRqNJwSss.roa
Signing time: Fri 23 May 2025 19:08:28 +0000
ROA not before: Fri 23 May 2025 19:08:28 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3209 (0xc89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 19:08:28 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A798B2F694C9942241F5283B41A991A8D2704ACB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:d8:6d:ec:c1:96:34:47:c3:e3:8c:be:fc:
73:eb:f2:de:b4:bb:05:59:74:40:da:6c:66:79:56:
49:0a:09:c9:97:22:71:bd:57:72:45:77:34:f1:73:
a4:11:e1:b7:0c:df:b2:3c:c7:be:8f:ce:5d:b2:78:
e8:9f:c3:44:9e:ac:41:0d:01:19:1a:fc:26:36:80:
e4:f1:b4:30:cc:60:1b:23:cd:a9:34:c4:45:c1:2a:
da:e6:41:c3:85:d1:76:ec:ce:70:83:3c:dd:6b:04:
8d:8e:56:ce:6b:df:e3:a8:ba:e6:84:47:03:11:2b:
70:28:5e:0f:82:cb:a9:e6:45:b3:f0:b5:ea:70:d9:
69:f9:c8:79:ec:ee:2c:fc:eb:f5:6d:0c:6b:23:32:
b8:ad:f6:6e:0e:26:30:ed:b6:1e:9c:ff:97:7b:44:
56:f3:0c:3a:3a:f8:a4:0c:0a:84:4a:9f:ff:e3:6b:
8a:ad:6a:25:03:cb:a8:54:20:0b:ee:fa:8a:81:e4:
bc:10:cb:43:9c:e2:d7:bf:77:4e:c4:39:77:40:b7:
9a:0d:fc:30:dc:6a:63:9c:8d:08:eb:33:c7:4a:e7:
6f:1c:6e:2b:e3:33:a1:5e:09:1a:39:37:9b:36:39:
53:ba:f9:6e:40:32:9b:4f:e0:14:88:a0:13:32:6f:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:98:B2:F6:94:C9:94:22:41:F5:28:3B:41:A9:91:A8:D2:70:4A:CB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/p5iy9pTJlCJB9Sg7QamRqNJwSss.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:52:ce:52:69:d5:9b:da:43:f2:6d:ae:eb:e9:0f:5f:2b:8a:
da:7b:36:2b:83:15:a5:95:bc:76:55:44:62:b9:0a:ea:af:3c:
61:c0:37:26:a2:b8:28:0a:db:03:67:04:dd:3f:37:da:06:a5:
e6:ec:da:26:1e:bf:c4:b9:64:c5:18:f7:2b:8c:fc:3e:0d:fb:
df:5b:bf:30:0e:05:95:19:b3:de:ef:e7:31:f5:ef:5f:ba:a9:
ce:f8:3b:c4:ee:f3:15:3e:52:39:b0:47:d3:80:a2:5c:8b:1e:
42:ba:c7:f4:e6:c5:e1:6a:c4:d5:b0:65:71:9c:28:06:9f:32:
a8:ce:31:da:39:54:22:bd:9c:c8:4b:0a:62:82:42:d8:40:49:
3f:6b:ea:ae:60:74:04:17:2e:55:4c:92:af:53:1d:e3:0e:32:
05:77:6e:cc:d5:a4:83:1b:2c:45:d0:03:75:8d:2a:7e:e9:17:
39:dc:f8:f0:9e:38:b6:d7:36:04:56:de:35:4d:2c:1b:0b:c9:
24:1f:e3:77:0b:2d:55:2a:f7:33:82:85:b6:da:48:04:11:15:
ea:50:e4:18:8f:a2:ac:33:c4:77:61:12:0e:1d:65:72:66:09:
b1:08:d2:d2:dc:1e:f3:6a:75:14:62:7b:c7:1a:a7:bf:93:c7:
5a:5a:f4:da
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjMx
OTA4MjhaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEE3OThCMkY2OTRDOTk0
MjI0MUY1MjgzQjQxQTk5MUE4RDI3MDRBQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDM6tht7MGWNEfD44y+/HPr8t60uwVZdEDabGZ5VkkKCcmXInG9
V3JFdzTxc6QR4bcM37I8x76Pzl2yeOifw0SerEENARka/CY2gOTxtDDMYBsjzak0
xEXBKtrmQcOF0XbsznCDPN1rBI2OVs5r3+OouuaERwMRK3AoXg+Cy6nmRbPwtepw
2Wn5yHns7iz86/VtDGsjMrit9m4OJjDtth6c/5d7RFbzDDo6+KQMCoRKn//ja4qt
aiUDy6hUIAvu+oqB5LwQy0Oc4te/d07EOXdAt5oN/DDcamOcjQjrM8dK528cbivj
M6FeCRo5N5s2OVO6+W5AMptP4BSIoBMybzaBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUp5iy9pTJlCJB9Sg7QamRqNJwSsswHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9wNWl5OXBUSmxDSkI5U2c3
UWFtUnFOSndTc3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAJhSzlJp1ZvaQ/JtruvpD18ritp7NiuDFaWV
vHZVRGK5CuqvPGHANyaiuCgK2wNnBN0/N9oGpebs2iYev8S5ZMUY9yuM/D4N+99b
vzAOBZUZs97v5zH171+6qc74O8Tu8xU+UjmwR9OAolyLHkK6x/TmxeFqxNWwZXGc
KAafMqjOMdo5VCK9nMhLCmKCQthAST9r6q5gdAQXLlVMkq9THeMOMgV3bszVpIMb
LEXQA3WNKn7pFznc+PCeOLbXNgRW3jVNLBsLySQf43cLLVUq9zOChbbaSAQRFepQ
5BiPoqwzxHdhEg4dZXJmCbEI0tLcHvNqdRRie8cap7+Tx1pa9No=
-----END CERTIFICATE-----
Generated at Sat Jun 21 03:19:25 2025 by rpki-client