Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/08lbBYd3loHaC5Klq1Bl5yvI-BQ.roa
File: 08lbBYd3loHaC5Klq1Bl5yvI-BQ.roa (raw, json)
Hash identifier: HAkH4rKgCrgQWeTHpwy36LuMs9keRTfRbKhB1PrnlEU=
Subject key identifier: D3:C9:5B:05:87:77:96:81:DA:0B:92:A5:AB:50:65:E7:2B:C8:F8:14
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1819
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/08lbBYd3loHaC5Klq1Bl5yvI-BQ.roa
Signing time: Sun 08 Jun 2025 05:09:33 +0000
ROA not before: Sun 08 Jun 2025 05:09:33 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6169 (0x1819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 05:09:33 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D3C95B0587779681DA0B92A5AB5065E72BC8F814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:7c:a7:b4:dc:b5:65:8f:8f:d5:8a:0a:32:
76:45:94:d6:53:5f:3e:d3:38:38:50:6e:13:35:a5:
28:52:a4:ec:50:b0:24:b6:6a:91:93:4e:f7:e7:f2:
f8:02:d7:fd:68:7e:8d:41:cf:13:e5:1b:fd:77:a7:
57:14:8f:d4:5c:c3:76:b8:12:06:31:85:a5:7d:eb:
da:36:31:3c:2b:ef:fa:20:50:6f:cb:f6:15:08:6f:
11:1d:e3:8d:fc:d1:57:c0:a1:44:df:6e:c0:f5:e9:
fa:48:7a:12:de:27:33:64:22:c1:b2:4a:f9:31:ba:
a9:d8:54:f0:87:bf:7e:84:c7:3e:bb:33:f4:10:0b:
ea:c3:0b:a7:61:d5:df:29:9e:93:b3:90:90:93:d2:
c2:32:97:41:d5:a3:54:a1:41:ce:d2:78:07:a5:f0:
75:42:21:53:7c:50:98:aa:de:18:85:ca:85:09:6d:
f3:74:ec:79:72:8b:84:35:68:aa:27:8a:92:bf:20:
00:ce:b1:37:37:30:09:06:0e:b8:ba:b1:1a:f5:0f:
f4:cf:a6:8d:18:0d:e9:ab:5c:45:56:fb:a4:ce:b0:
01:3b:28:ab:93:0e:cd:7a:19:9a:5c:39:15:d1:5a:
3f:75:5d:37:28:59:50:9d:4c:74:84:87:fd:0e:0e:
3f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C9:5B:05:87:77:96:81:DA:0B:92:A5:AB:50:65:E7:2B:C8:F8:14
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/08lbBYd3loHaC5Klq1Bl5yvI-BQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:17:dd:7f:aa:1a:f0:86:6f:d0:22:ab:4e:79:31:dd:84:41:
8b:35:25:06:6d:a1:50:ee:f5:b1:aa:ce:1e:7b:3e:59:cd:87:
d1:b7:63:ce:31:3d:32:57:44:80:b9:32:f8:ff:e8:0c:a6:fc:
3d:a9:99:44:66:93:d8:d6:58:d1:50:6c:94:64:c7:74:41:a5:
0e:97:5e:a4:de:b7:94:32:5e:f3:82:d2:d4:dc:7e:6d:1d:bb:
06:66:f0:bf:6a:16:02:fe:a6:de:3c:97:e4:47:a4:d4:8c:dd:
39:00:93:db:5d:fc:81:ea:69:b5:cb:d5:f3:fc:3e:9e:0e:1f:
10:ce:4b:15:dc:7a:68:ed:c0:6e:6a:3c:ee:59:17:07:fa:f5:
81:23:a0:20:47:b4:96:89:78:3e:00:1a:3e:59:18:0b:2b:ff:
4b:ea:1d:02:79:aa:9b:90:06:a1:f1:43:9d:ed:d7:c9:73:4b:
cb:04:97:0f:b1:27:3e:12:6f:00:06:1a:71:4b:b3:3c:79:dc:
fe:dd:3c:11:f7:cc:10:17:db:88:3d:a8:d9:86:71:0c:31:db:
17:d2:73:bf:82:c0:ec:bd:41:dc:87:76:90:47:88:66:db:6b:
e2:ac:95:c1:d4:da:15:d5:6b:c7:c0:d0:6b:f6:a2:a9:36:be:
43:72:69:82
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGBkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDgw
NTA5MzNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEQzQzk1QjA1ODc3Nzk2
ODFEQTBCOTJBNUFCNTA2NUU3MkJDOEY4MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+mXyntNy1ZY+P1YoKMnZFlNZTXz7TODhQbhM1pShSpOxQsCS2
apGTTvfn8vgC1/1ofo1BzxPlG/13p1cUj9Rcw3a4EgYxhaV969o2MTwr7/ogUG/L
9hUIbxEd44380VfAoUTfbsD16fpIehLeJzNkIsGySvkxuqnYVPCHv36Exz67M/QQ
C+rDC6dh1d8pnpOzkJCT0sIyl0HVo1ShQc7SeAel8HVCIVN8UJiq3hiFyoUJbfN0
7Hlyi4Q1aKonipK/IADOsTc3MAkGDri6sRr1D/TPpo0YDemrXEVW+6TOsAE7KKuT
Ds16GZpcORXRWj91XTcoWVCdTHSEh/0ODj+DAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU08lbBYd3loHaC5Klq1Bl5yvI+BQwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni8wOGxiQllkM2xvSGFDNUts
cTFCbDV5dkktQlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAJAX3X+qGvCGb9Aiq055Md2EQYs1JQZtoVDu
9bGqzh57PlnNh9G3Y84xPTJXRIC5Mvj/6Aym/D2pmURmk9jWWNFQbJRkx3RBpQ6X
XqTet5QyXvOC0tTcfm0duwZm8L9qFgL+pt48l+RHpNSM3TkAk9td/IHqabXL1fP8
Pp4OHxDOSxXcemjtwG5qPO5ZFwf69YEjoCBHtJaJeD4AGj5ZGAsr/0vqHQJ5qpuQ
BqHxQ53t18lzS8sElw+xJz4SbwAGGnFLszx53P7dPBH3zBAX24g9qNmGcQwx2xfS
c7+CwOy9QdyHdpBHiGbba+KslcHU2hXVa8fA0Gv2oqk2vkNyaYI=
-----END CERTIFICATE-----
Generated at Tue Jul 22 06:10:57 2025 by rpki-client