Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/DaGMBY0dDk3UViwVa0j9aTgnpGE.roa
File: DaGMBY0dDk3UViwVa0j9aTgnpGE.roa (raw, json)
Hash identifier: e/yAfPHSq3ZMv0CblS1Wo9r0mjULXniHtGrvOcYtdqs=
Subject key identifier: 0D:A1:8C:05:8D:1D:0E:4D:D4:56:2C:15:6B:48:FD:69:38:27:A4:61
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 23C9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DaGMBY0dDk3UViwVa0j9aTgnpGE.roa
Signing time: Tue 24 Jun 2025 06:41:57 +0000
ROA not before: Tue 24 Jun 2025 06:41:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9161 (0x23c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 06:41:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0DA18C058D1D0E4DD4562C156B48FD693827A461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:67:51:7b:74:9f:de:dd:d6:3a:f2:f7:d4:
a5:a8:65:ea:bd:e4:fb:e7:72:cb:fa:5f:1c:95:da:
f8:b0:d6:52:cf:2f:80:d7:1b:1f:69:40:aa:fb:66:
6c:08:50:85:4e:3c:b9:d2:3d:cd:06:51:24:84:2a:
6e:f6:9c:73:3a:d1:62:52:12:55:4d:a7:ee:70:b4:
c5:fb:d3:fc:f1:86:36:45:77:d0:b5:2e:52:1c:8a:
75:5c:46:1a:81:78:66:f1:82:6b:65:0f:54:8d:c3:
67:74:55:cc:25:5e:13:4b:96:78:41:5d:02:9d:b4:
d3:06:8e:94:50:09:29:a0:3e:ea:d8:af:83:34:83:
da:33:c1:3e:99:d3:88:2e:9e:84:a2:4c:a7:d2:00:
34:f1:f3:39:78:59:70:a9:88:68:28:29:08:48:58:
2b:56:39:66:ba:89:21:c4:97:e8:f1:fb:9d:f1:1b:
4f:35:29:41:e0:22:8b:b0:d1:fa:dd:e4:4f:85:e0:
50:c8:9c:1b:54:71:1f:7b:08:24:91:21:c8:ec:6c:
72:24:e1:2b:22:b0:71:ef:9c:ae:8a:90:fc:42:14:
3d:cc:eb:9c:5e:c3:7d:e3:f9:26:b2:84:e5:eb:0f:
cb:92:01:b2:81:6c:77:79:eb:0a:49:c7:8e:b2:15:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A1:8C:05:8D:1D:0E:4D:D4:56:2C:15:6B:48:FD:69:38:27:A4:61
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DaGMBY0dDk3UViwVa0j9aTgnpGE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:aa:09:bb:43:5f:87:ba:40:13:bb:27:8e:a2:69:8d:15:25:
9f:a1:9c:c3:47:f4:4c:f5:56:c0:c8:2b:22:9b:08:4d:5d:31:
c3:26:94:14:9c:54:16:23:63:a3:c9:e3:23:fb:ad:5a:65:ae:
b1:82:95:08:85:ac:de:f2:54:96:08:50:30:ce:8f:72:78:bb:
e5:7e:22:3e:87:08:b5:f3:40:e9:d9:72:bf:5d:8a:9c:bc:15:
a5:6d:67:ff:04:60:09:7b:ae:af:e3:99:a7:6f:4b:82:51:9f:
be:f0:a0:a7:e7:3c:92:40:b4:18:9b:ac:e3:12:b0:2a:ae:6f:
cb:f3:c3:10:f5:29:65:81:36:e8:04:df:69:b0:0f:1a:51:9a:
33:85:f9:57:51:1c:2e:74:29:cd:e1:74:7e:21:23:27:0a:60:
ea:b4:0c:7f:9b:4c:4c:6c:05:e1:1a:ea:c3:58:81:6e:74:4f:
1f:42:1c:a0:5f:ec:1d:52:43:41:cb:d0:6f:a9:02:98:60:1e:
c8:8f:ac:e0:2b:29:8b:00:67:ac:6f:f8:d9:a5:2c:4f:d8:fd:
01:82:18:f7:8d:c8:d4:b5:67:28:ef:43:93:4b:5b:69:2d:76:
b3:fc:b7:91:dd:db:cd:95:3c:a6:06:2d:af:62:b4:8c:d2:fb:
1b:f6:d5:53
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICI8kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MjQw
NjQxNTdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDBEQTE4QzA1OEQxRDBF
NERENDU2MkMxNTZCNDhGRDY5MzgyN0E0NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEzmdRe3Sf3t3WOvL31KWoZeq95Pvncsv6XxyV2viw1lLPL4DX
Gx9pQKr7ZmwIUIVOPLnSPc0GUSSEKm72nHM60WJSElVNp+5wtMX70/zxhjZFd9C1
LlIcinVcRhqBeGbxgmtlD1SNw2d0VcwlXhNLlnhBXQKdtNMGjpRQCSmgPurYr4M0
g9ozwT6Z04gunoSiTKfSADTx8zl4WXCpiGgoKQhIWCtWOWa6iSHEl+jx+53xG081
KUHgIouw0frd5E+F4FDInBtUcR97CCSRIcjsbHIk4SsisHHvnK6KkPxCFD3M65xe
w33j+SayhOXrD8uSAbKBbHd56wpJx46yFRPnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUDaGMBY0dDk3UViwVa0j9aTgnpGEwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9EYUdNQlkwZERrM1VWaXdW
YTBqOWFUZ25wR0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBABSqCbtDX4e6QBO7J46iaY0VJZ+hnMNH9Ez1
VsDIKyKbCE1dMcMmlBScVBYjY6PJ4yP7rVplrrGClQiFrN7yVJYIUDDOj3J4u+V+
Ij6HCLXzQOnZcr9dipy8FaVtZ/8EYAl7rq/jmadvS4JRn77woKfnPJJAtBibrOMS
sCqub8vzwxD1KWWBNugE32mwDxpRmjOF+VdRHC50Kc3hdH4hIycKYOq0DH+bTExs
BeEa6sNYgW50Tx9CHKBf7B1SQ0HL0G+pAphgHsiPrOArKYsAZ6xv+NmlLE/Y/QGC
GPeNyNS1ZyjvQ5NLW2ktdrP8t5Hd282VPKYGLa9itIzS+xv21VM=
-----END CERTIFICATE-----
Generated at Mon Jul 21 08:28:06 2025 by rpki-client