Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/C0iCULVIhXwFYO5oSu2UpKgKgJw.roa
File: C0iCULVIhXwFYO5oSu2UpKgKgJw.roa (raw, json)
Hash identifier: ZNj+ZedvtMklc9EVEy2PSWZC3lXcX3JIGPmnEMHZm6E=
Subject key identifier: 0B:48:82:50:B5:48:85:7C:05:60:EE:68:4A:ED:94:A4:A8:0A:80:9C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0949
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/C0iCULVIhXwFYO5oSu2UpKgKgJw.roa
Signing time: Mon 19 May 2025 11:08:12 +0000
ROA not before: Mon 19 May 2025 11:08:12 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2377 (0x949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 11:08:12 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0B488250B548857C0560EE684AED94A4A80A809C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d3:cc:26:d0:c6:77:4c:d7:e0:d3:bd:6a:8a:
b3:de:a8:b8:5c:f8:8b:48:e6:09:d3:4a:0b:76:8e:
db:bc:b6:a4:17:9b:06:fe:fd:e7:5d:45:05:e1:e3:
ed:b8:1b:91:11:3f:db:ae:14:91:41:af:bc:e7:be:
1f:f7:93:cc:a2:86:60:8b:10:f9:1a:09:5d:06:86:
6b:5a:9a:50:4b:98:bc:5d:6f:38:b2:3a:c3:3a:a0:
13:0e:75:1e:38:cf:50:aa:ea:05:5e:11:17:db:82:
ec:34:3a:44:68:6e:1f:d5:64:01:0b:8d:82:a9:d9:
4a:88:6a:3a:d8:24:cd:c9:a0:8e:49:68:c2:b2:a4:
ac:83:52:11:c6:83:d6:a4:d3:69:97:b2:df:6c:9a:
12:d7:d1:1d:b5:bd:32:5f:58:e0:8a:7b:90:22:c2:
b0:7e:57:09:9e:9a:07:4a:4f:4d:66:d0:65:9a:48:
24:09:11:f0:07:6b:38:ec:ed:fb:2a:91:e6:e6:b6:
c1:07:78:a5:7f:86:f6:e1:c6:77:ea:6c:c7:ec:1d:
46:f8:6b:d2:26:a5:01:3d:9c:b8:38:64:ef:7f:7c:
36:9f:ab:f7:7e:23:31:c1:3e:07:12:93:64:38:34:
5d:04:ba:25:a3:40:4f:0b:9c:3f:b5:f8:18:83:f2:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:48:82:50:B5:48:85:7C:05:60:EE:68:4A:ED:94:A4:A8:0A:80:9C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/C0iCULVIhXwFYO5oSu2UpKgKgJw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:67:b6:82:6e:64:28:88:1f:fd:f2:4d:00:53:17:7e:61:f9:
00:f6:8c:c0:dc:fc:19:34:aa:0f:29:e6:5d:b8:9d:3d:2c:9a:
3e:3d:43:2a:c4:31:ba:ff:97:3a:2b:bd:ac:28:af:fe:42:09:
da:42:00:24:3b:ac:f4:61:11:64:d6:1d:61:09:a7:4d:c0:d6:
19:d6:f9:b6:7b:25:6f:99:1e:35:8e:84:cb:7a:1e:e7:fc:1a:
19:47:c1:e3:6d:e9:52:b9:67:ef:da:1f:6f:41:5d:81:98:c0:
62:92:8e:4c:10:84:71:5b:20:07:a0:2e:9f:38:77:82:f6:af:
50:bd:f8:26:bc:c9:f9:69:26:68:ff:84:05:46:5f:53:55:9b:
d8:99:e2:84:54:66:ca:32:43:4a:61:7f:39:a7:16:56:91:79:
c1:40:2c:e0:fb:cc:d6:2b:e0:e3:dd:79:45:18:3b:a4:12:74:
93:ff:0f:2d:3c:95:5c:89:d3:9d:4c:e0:32:6d:d3:75:c3:d7:
a6:03:f7:d3:5b:d7:20:0b:e9:aa:bd:59:81:f6:5d:51:4a:a0:
34:43:e2:bf:19:a1:83:58:0e:cd:9b:dc:da:b3:9f:9f:18:19:
9b:7e:4d:b2:04:01:e7:2c:58:32:e1:38:c2:4f:6a:89:21:d3:
ab:27:0b:75
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCUkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTkx
MTA4MTJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDBCNDg4MjUwQjU0ODg1
N0MwNTYwRUU2ODRBRUQ5NEE0QTgwQTgwOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDs08wm0MZ3TNfg071qirPeqLhc+ItI5gnTSgt2jtu8tqQXmwb+
/eddRQXh4+24G5ERP9uuFJFBr7znvh/3k8yihmCLEPkaCV0GhmtamlBLmLxdbziy
OsM6oBMOdR44z1Cq6gVeERfbguw0OkRobh/VZAELjYKp2UqIajrYJM3JoI5JaMKy
pKyDUhHGg9ak02mXst9smhLX0R21vTJfWOCKe5AiwrB+VwmemgdKT01m0GWaSCQJ
EfAHazjs7fsqkebmtsEHeKV/hvbhxnfqbMfsHUb4a9ImpQE9nLg4ZO9/fDafq/d+
IzHBPgcSk2Q4NF0EuiWjQE8LnD+1+BiD8rVBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUC0iCULVIhXwFYO5oSu2UpKgKgJwwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9DMGlDVUxWSWhYd0ZZTzVv
U3UyVXBLZ0tnSncucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAJVntoJuZCiIH/3yTQBTF35h+QD2jMDc/Bk0
qg8p5l24nT0smj49QyrEMbr/lzorvawor/5CCdpCACQ7rPRhEWTWHWEJp03A1hnW
+bZ7JW+ZHjWOhMt6Huf8GhlHweNt6VK5Z+/aH29BXYGYwGKSjkwQhHFbIAegLp84
d4L2r1C9+Ca8yflpJmj/hAVGX1NVm9iZ4oRUZsoyQ0phfzmnFlaRecFALOD7zNYr
4OPdeUUYO6QSdJP/Dy08lVyJ051M4DJt03XD16YD99Nb1yAL6aq9WYH2XVFKoDRD
4r8ZoYNYDs2b3Nqzn58YGZt+TbIEAecsWDLhOMJPaokh06snC3U=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:59:55 2025 by rpki-client