Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ruB9YK8cepY2L7gSmogt2QU6PqY.roa
File: ruB9YK8cepY2L7gSmogt2QU6PqY.roa (raw, json)
Hash identifier: uB5Ne8bUBVa9T4dLtAr9bWsA7BUqHEof/GjZI/f3TnU=
Subject key identifier: AE:E0:7D:60:AF:1C:7A:96:36:2F:B8:12:9A:88:2D:D9:05:3A:3E:A6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 082D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ruB9YK8cepY2L7gSmogt2QU6PqY.roa
Signing time: Sat 17 May 2025 23:38:07 +0000
ROA not before: Sat 17 May 2025 23:38:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2093 (0x82d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 23:38:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AEE07D60AF1C7A96362FB8129A882DD9053A3EA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:16:56:e4:0b:ba:16:68:d6:d8:e8:54:fc:
a5:97:8e:a4:10:64:4a:64:fb:4f:c6:03:f7:67:11:
40:ef:3b:62:db:d1:64:70:88:50:89:e7:70:9f:d2:
fa:ac:3f:56:f9:6e:bd:eb:38:08:2a:9b:af:2a:91:
f9:31:20:79:2a:23:5a:3d:3f:e4:01:59:c2:60:92:
62:2e:c7:51:68:c4:58:c4:69:ad:59:31:a6:ed:1b:
10:58:26:db:0a:0d:6e:48:59:ff:28:48:4d:ef:53:
c1:10:e6:60:6f:43:15:da:2f:2f:d2:27:c7:06:ee:
1b:aa:58:24:df:c4:70:ed:02:d5:e5:47:21:7c:58:
56:93:d9:65:c3:b6:32:5c:69:91:7b:6d:08:f6:56:
e2:e5:a2:3f:f8:94:40:67:55:28:a4:68:90:90:fd:
dc:9d:e8:fc:42:a5:f4:73:e9:98:fe:9c:56:45:48:
54:74:c0:a9:92:f9:fb:09:c2:e9:ed:cb:dd:49:de:
b0:7e:26:94:d4:29:69:d0:28:fe:45:61:84:cc:b9:
42:78:e0:7a:15:de:4e:b8:20:27:be:67:38:c0:22:
9d:6c:93:3b:48:90:e8:77:ab:3d:e6:cd:ee:c2:81:
9d:de:04:ff:2a:2c:a7:5e:e0:33:0c:d6:35:b1:0c:
21:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E0:7D:60:AF:1C:7A:96:36:2F:B8:12:9A:88:2D:D9:05:3A:3E:A6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ruB9YK8cepY2L7gSmogt2QU6PqY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:cd:a0:48:0d:95:39:61:b3:cb:47:e4:ca:4d:ed:cf:f5:d4:
51:74:80:37:44:f4:27:60:96:17:5c:ad:8e:6b:fc:00:2e:04:
ab:d5:0e:a5:17:57:5f:f2:fe:c1:1f:b5:51:e0:01:fc:91:47:
4a:bb:16:88:f5:80:7b:b5:4c:45:d2:72:25:cc:78:9c:25:7f:
d1:02:74:6f:52:28:eb:80:67:b7:bb:7f:0b:dc:8b:1b:e6:2a:
e2:5e:e1:ac:44:83:27:50:e6:81:03:b8:b5:12:50:e1:55:01:
3d:7f:19:6f:76:4f:92:a0:07:2d:07:c2:87:17:a6:ec:1d:e6:
9f:75:cf:73:04:54:ad:39:12:d6:c8:1c:e3:f8:58:ff:2e:33:
b4:f7:b0:c3:3a:98:89:f6:9f:2b:38:8d:35:50:e8:e9:53:ba:
26:9e:4a:10:ec:aa:7b:61:51:3e:d3:f1:55:6a:de:e1:0f:09:
3c:72:2c:1f:a8:7b:bd:d8:79:16:e0:05:0c:27:7e:a1:cc:57:
ac:74:b7:aa:0c:d1:e9:75:ca:6e:8c:aa:e7:1d:e1:40:c8:01:
f0:7d:43:ba:5c:08:b7:78:ee:76:ec:d9:a2:a8:ed:bf:8b:e9:
e6:6d:fa:87:a4:cd:bd:eb:48:1a:3a:53:99:c2:5a:f1:01:1e:
3b:a4:7c:ae
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCC0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTcy
MzM4MDdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEFFRTA3RDYwQUYxQzdB
OTYzNjJGQjgxMjlBODgyREQ5MDUzQTNFQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC59BZW5Au6FmjW2OhU/KWXjqQQZEpk+0/GA/dnEUDvO2Lb0WRw
iFCJ53Cf0vqsP1b5br3rOAgqm68qkfkxIHkqI1o9P+QBWcJgkmIux1FoxFjEaa1Z
MabtGxBYJtsKDW5IWf8oSE3vU8EQ5mBvQxXaLy/SJ8cG7huqWCTfxHDtAtXlRyF8
WFaT2WXDtjJcaZF7bQj2VuLloj/4lEBnVSikaJCQ/dyd6PxCpfRz6Zj+nFZFSFR0
wKmS+fsJwunty91J3rB+JpTUKWnQKP5FYYTMuUJ44HoV3k64ICe+ZzjAIp1skztI
kOh3qz3mze7CgZ3eBP8qLKde4DMM1jWxDCETAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUruB9YK8cepY2L7gSmogt2QU6PqYwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9ydUI5WUs4Y2VwWTJMN2dT
bW9ndDJRVTZQcVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBACzNoEgNlTlhs8tH5MpN7c/11FF0gDdE9Cdg
lhdcrY5r/AAuBKvVDqUXV1/y/sEftVHgAfyRR0q7Foj1gHu1TEXSciXMeJwlf9EC
dG9SKOuAZ7e7fwvcixvmKuJe4axEgydQ5oEDuLUSUOFVAT1/GW92T5KgBy0HwocX
puwd5p91z3MEVK05EtbIHOP4WP8uM7T3sMM6mIn2nys4jTVQ6OlTuiaeShDsqnth
UT7T8VVq3uEPCTxyLB+oe73YeRbgBQwnfqHMV6x0t6oM0el1ym6Mqucd4UDIAfB9
Q7pcCLd47nbs2aKo7b+L6eZt+oekzb3rSBo6U5nCWvEBHjukfK4=
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:26:47 2025 by rpki-client