Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/z4E4VWuaUFSPd_QlmEf89mU5g54.roa
File: z4E4VWuaUFSPd_QlmEf89mU5g54.roa (raw, json)
Hash identifier: yWXuNj3OJnaKTFjmJKrcoIe5uAzaVwZLC0H3Ph9ajNU=
Subject key identifier: CF:81:38:55:6B:9A:50:54:8F:77:F4:25:98:47:FC:F6:65:39:83:9E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1C0D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/z4E4VWuaUFSPd_QlmEf89mU5g54.roa
Signing time: Fri 13 Jun 2025 11:40:51 +0000
ROA not before: Fri 13 Jun 2025 11:40:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7181 (0x1c0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 11:40:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CF8138556B9A50548F77F4259847FCF66539839E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:6d:eb:0e:6b:c5:1f:96:0c:e0:ce:88:dd:
bd:8a:fd:97:eb:60:4d:ea:7f:55:cf:b8:f3:eb:be:
83:64:50:e1:de:ad:21:fc:fb:b7:13:a9:0f:2b:07:
c6:0b:80:48:b1:da:90:9a:80:eb:2f:d8:bd:10:2a:
ec:9d:93:4d:ae:0a:45:10:8c:fc:89:0a:4e:6e:3b:
05:2d:be:7b:ab:91:03:ea:26:af:d7:8e:78:49:8f:
e9:56:5c:2f:d2:0a:d7:6c:08:52:dd:e5:71:0c:7c:
de:8c:d1:5c:c0:26:83:2c:fe:55:e3:47:ec:19:8a:
e9:ae:13:69:40:f3:98:32:8d:dd:de:d3:a9:d2:6a:
b3:de:b3:e5:07:92:ae:5c:47:57:14:2a:08:22:a8:
c7:67:6e:0b:e7:49:34:6c:0a:be:64:8a:74:34:9c:
85:21:c8:c1:53:f5:31:a2:d3:82:de:6d:37:af:9d:
1a:c2:9e:55:d9:9c:9b:40:fd:e9:14:88:d6:3b:c7:
c9:19:49:ec:63:ae:1c:bc:f5:5a:21:96:cc:d6:b1:
a4:e7:9a:78:b9:b3:14:26:cb:e7:20:2f:84:3c:2f:
77:e0:3d:63:90:ba:b0:59:dc:2a:0f:b5:2c:df:9a:
5b:29:f8:58:ac:d3:de:0e:a4:05:44:49:77:42:79:
6e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:81:38:55:6B:9A:50:54:8F:77:F4:25:98:47:FC:F6:65:39:83:9E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/z4E4VWuaUFSPd_QlmEf89mU5g54.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:bd:cb:f8:e0:87:ba:2d:51:5a:73:47:ef:57:f5:8d:4c:5d:
3e:e2:4b:47:cc:9f:7e:27:a1:9b:2e:2d:63:fe:2c:7c:ae:4b:
ed:b3:8c:5c:8d:bf:1d:79:65:4e:46:00:04:3b:42:22:7c:fc:
14:72:13:b4:fc:c3:e8:72:bf:97:d1:e9:a9:a4:70:bb:c5:61:
da:cb:37:b2:83:81:61:b7:66:74:1f:0c:a4:62:cf:e0:03:28:
a7:b2:70:14:a3:6b:6a:9e:11:87:ce:eb:c9:74:0f:92:e3:da:
36:8d:3d:10:9c:a6:12:39:4a:d3:a4:b7:24:c4:3b:2a:48:3e:
ac:36:77:ac:db:77:b8:35:9a:e5:3d:5a:37:60:24:28:64:70:
be:02:29:6d:af:54:5a:bd:0b:e0:2a:22:5a:59:2f:3e:fd:98:
62:ec:e1:10:2c:9f:b2:40:88:5a:29:0a:2d:81:4f:79:54:c6:
16:41:b8:58:45:71:71:f7:30:50:96:48:b7:42:ee:06:ab:69:
c1:c6:e1:2e:19:eb:0b:1a:2e:a6:6e:22:4b:c0:0f:92:2e:77:
3a:d3:49:02:fc:e4:54:b7:d6:5c:0c:57:3f:fd:fd:85:31:34:
06:b1:bc:17:ec:60:9e:4e:80:cd:c8:b3:ff:65:fe:34:2f:9a:
f2:b3:26:18
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHA0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTMx
MTQwNTFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKENGODEzODU1NkI5QTUw
NTQ4Rjc3RjQyNTk4NDdGQ0Y2NjUzOTgzOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5Fm3rDmvFH5YM4M6I3b2K/ZfrYE3qf1XPuPPrvoNkUOHerSH8
+7cTqQ8rB8YLgEix2pCagOsv2L0QKuydk02uCkUQjPyJCk5uOwUtvnurkQPqJq/X
jnhJj+lWXC/SCtdsCFLd5XEMfN6M0VzAJoMs/lXjR+wZiumuE2lA85gyjd3e06nS
arPes+UHkq5cR1cUKggiqMdnbgvnSTRsCr5kinQ0nIUhyMFT9TGi04LebTevnRrC
nlXZnJtA/ekUiNY7x8kZSexjrhy89VohlszWsaTnmni5sxQmy+cgL4Q8L3fgPWOQ
urBZ3CoPtSzfmlsp+Fis094OpAVESXdCeW5HAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUz4E4VWuaUFSPd/QlmEf89mU5g54wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni96NEU0Vld1YVVGU1BkX1Fs
bUVmODltVTVnNTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAA29y/jgh7otUVpzR+9X9Y1MXT7iS0fMn34n
oZsuLWP+LHyuS+2zjFyNvx15ZU5GAAQ7QiJ8/BRyE7T8w+hyv5fR6amkcLvFYdrL
N7KDgWG3ZnQfDKRiz+ADKKeycBSja2qeEYfO68l0D5Lj2jaNPRCcphI5StOktyTE
OypIPqw2d6zbd7g1muU9WjdgJChkcL4CKW2vVFq9C+AqIlpZLz79mGLs4RAsn7JA
iFopCi2BT3lUxhZBuFhFcXH3MFCWSLdC7garacHG4S4Z6wsaLqZuIkvAD5IudzrT
SQL85FS31lwMVz/9/YUxNAaxvBfsYJ5OgM3Is/9l/jQvmvKzJhg=
-----END CERTIFICATE-----
Generated at Sun Jun 22 08:18:17 2025 by rpki-client