Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/poBTc5aIN7FqckW-Oc0khuPvFsM.roa
File: poBTc5aIN7FqckW-Oc0khuPvFsM.roa (raw, json)
Hash identifier: sxz+fuoNEDRm4p39DxWstxE/4I8PMJpVBdiddGGHBDA=
Subject key identifier: A6:80:53:73:96:88:37:B1:6A:72:45:BE:39:CD:24:86:E3:EF:16:C3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 14D5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/poBTc5aIN7FqckW-Oc0khuPvFsM.roa
Signing time: Tue 03 Jun 2025 20:39:17 +0000
ROA not before: Tue 03 Jun 2025 20:39:17 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5333 (0x14d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 20:39:17 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A6805373968837B16A7245BE39CD2486E3EF16C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:8a:79:ab:3e:95:e0:5b:cb:f4:3c:07:00:
c0:da:5a:c2:c9:df:1f:6d:3b:cc:1e:15:09:9f:eb:
fc:e2:28:9c:78:1a:c8:5d:05:46:01:a9:3c:ee:d4:
52:17:e6:b9:94:33:56:bc:07:ca:6a:9b:90:40:8d:
e9:3f:f4:d0:60:66:cf:e4:46:21:e2:a5:ab:7d:62:
8d:18:db:f0:83:a1:56:d4:ac:58:95:8e:a8:16:c6:
d7:35:62:5e:db:bb:15:fe:68:be:47:92:9a:8e:0e:
15:ca:ae:72:98:cc:e7:8f:5a:d8:f2:a5:18:f0:d2:
a8:45:e4:4a:56:3f:37:ea:53:52:ed:7d:54:11:41:
db:df:c0:7f:8d:a8:c1:91:f4:30:8c:c6:27:89:69:
78:79:b3:90:f0:8e:de:e6:70:00:60:f8:e5:8d:16:
5d:18:ee:2e:c9:6c:79:fa:be:0b:35:55:b5:8e:ae:
7a:5e:c1:2d:a8:aa:7b:c6:80:8d:98:ad:29:6f:3a:
4b:60:0c:03:71:3a:eb:4e:89:d6:39:f4:a7:65:ab:
f0:10:46:7f:11:ab:1d:24:5a:23:d8:98:48:ea:1d:
16:b5:39:23:39:38:06:6c:e6:9d:95:76:79:3e:b6:
9c:0a:82:84:22:a8:55:32:3e:a5:4c:7f:46:64:f6:
58:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:80:53:73:96:88:37:B1:6A:72:45:BE:39:CD:24:86:E3:EF:16:C3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/poBTc5aIN7FqckW-Oc0khuPvFsM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:79:05:ec:39:b5:01:c1:d5:6a:a1:26:68:c1:93:5f:fa:71:
70:f9:89:61:20:84:af:7f:17:4c:0b:32:52:64:41:4c:fc:b9:
16:8b:35:d8:c7:3d:33:87:64:1c:03:f9:5b:86:b7:a5:14:9d:
d8:27:11:13:4b:22:7c:4b:79:53:e6:bc:6d:8d:1c:c4:25:fe:
8f:be:66:3e:92:b2:8c:b6:13:db:aa:be:ea:6a:52:a3:f9:16:
b4:71:77:d9:85:73:d2:88:31:ce:06:de:57:03:d7:8b:1b:99:
7c:cb:02:31:df:27:71:0a:4c:77:18:4b:90:31:39:83:fa:fe:
55:9e:71:ae:46:02:11:d0:99:85:64:b5:cc:a7:f6:98:d5:bc:
87:77:80:22:2b:a0:46:4b:d6:db:f2:dc:ef:6f:a9:df:7c:25:
54:8a:b3:f2:10:20:bc:54:6e:06:04:92:c3:09:4d:8c:d2:27:
d1:44:05:9b:dc:d1:5e:56:ab:fa:51:17:3a:05:35:ed:4c:b4:
64:09:9f:10:5a:bf:27:e8:7b:d8:ec:7d:0b:70:52:04:98:20:
f8:14:4e:f3:22:23:63:3b:0a:70:35:fe:32:51:1c:f6:e4:01:
e3:95:e2:63:ed:ce:64:41:5e:5a:2f:80:23:bc:da:de:6c:4f:
29:0f:40:81
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFNUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDMy
MDM5MTdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEE2ODA1MzczOTY4ODM3
QjE2QTcyNDVCRTM5Q0QyNDg2RTNFRjE2QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHlYp5qz6V4FvL9DwHAMDaWsLJ3x9tO8weFQmf6/ziKJx4Gshd
BUYBqTzu1FIX5rmUM1a8B8pqm5BAjek/9NBgZs/kRiHipat9Yo0Y2/CDoVbUrFiV
jqgWxtc1Yl7buxX+aL5HkpqODhXKrnKYzOePWtjypRjw0qhF5EpWPzfqU1LtfVQR
QdvfwH+NqMGR9DCMxieJaXh5s5Dwjt7mcABg+OWNFl0Y7i7JbHn6vgs1VbWOrnpe
wS2oqnvGgI2YrSlvOktgDANxOutOidY59Kdlq/AQRn8Rqx0kWiPYmEjqHRa1OSM5
OAZs5p2Vdnk+tpwKgoQiqFUyPqVMf0Zk9lh/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUpoBTc5aIN7FqckW+Oc0khuPvFsMwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9wb0JUYzVhSU43RnFja1ct
T2Mwa2h1UHZGc00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAG55Bew5tQHB1WqhJmjBk1/6cXD5iWEghK9/
F0wLMlJkQUz8uRaLNdjHPTOHZBwD+VuGt6UUndgnERNLInxLeVPmvG2NHMQl/o++
Zj6Ssoy2E9uqvupqUqP5FrRxd9mFc9KIMc4G3lcD14sbmXzLAjHfJ3EKTHcYS5Ax
OYP6/lWeca5GAhHQmYVktcyn9pjVvId3gCIroEZL1tvy3O9vqd98JVSKs/IQILxU
bgYEksMJTYzSJ9FEBZvc0V5Wq/pRFzoFNe1MtGQJnxBavyfoe9jsfQtwUgSYIPgU
TvMiI2M7CnA1/jJRHPbkAeOV4mPtzmRBXlovgCO82t5sTykPQIE=
-----END CERTIFICATE-----
Generated at Sat Jun 21 18:28:58 2025 by rpki-client