Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Nlr1lW17aUhH07VivMmjrJeF1x4.roa
File:                     Nlr1lW17aUhH07VivMmjrJeF1x4.roa (raw, json)
Hash identifier:          wZ8LisKVmoP/+JC5G74d03OveEvX+/CHCTCjAzZcBPs=
Subject key identifier:   36:5A:F5:95:6D:7B:69:48:47:D3:B5:62:BC:C9:A3:AC:97:85:D7:1E
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       14F9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Nlr1lW17aUhH07VivMmjrJeF1x4.roa
Signing time:             Wed 04 Jun 2025 01:09:17 +0000
ROA not before:           Wed 04 Jun 2025 01:09:17 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        27.103.0.0/16 maxlen: 16
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5369 (0x14f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: Jun  4 01:09:17 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=365AF5956D7B694847D3B562BCC9A3AC9785D71E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:b4:46:d5:fd:ab:d2:dd:a0:5a:46:e5:21:
                    4a:ad:dd:c7:17:d6:f7:04:1d:7c:1f:1f:b7:03:8a:
                    fc:5f:af:e9:aa:0d:0c:01:85:3e:5f:39:7f:7a:84:
                    a0:e7:11:26:d9:5e:fe:06:62:8d:7d:a9:78:8c:1d:
                    90:5e:6d:5c:f0:f1:9e:d1:48:27:cf:a5:fe:9b:75:
                    60:60:67:b4:f5:bd:46:f4:3d:0d:69:9b:24:dd:c6:
                    3d:ae:40:33:c6:b4:0c:5a:13:f8:1a:68:f1:d7:28:
                    d2:df:2d:4d:a2:27:cc:3f:7e:7b:b1:a8:95:b2:d6:
                    bb:22:e4:f2:49:27:3f:22:5a:d5:2f:6a:68:65:7a:
                    c8:e4:70:b7:c9:a3:e7:3f:39:e8:32:04:47:95:91:
                    37:fd:f0:ae:32:74:f8:7e:55:5f:f3:02:f6:98:c9:
                    17:61:d0:ad:fb:5b:58:d1:c7:9a:c7:35:a9:88:df:
                    57:2d:d6:f0:61:82:f7:84:b1:9e:57:ed:e1:a8:a7:
                    33:09:bf:da:de:02:de:d2:76:fc:a5:41:ca:80:32:
                    22:e9:ab:bc:43:c2:1a:d9:76:05:ab:fa:f0:ee:a5:
                    2f:a5:bb:d9:1c:12:8f:ca:83:d1:19:ab:d6:40:91:
                    55:3b:03:8f:3f:dc:0b:f6:c0:13:90:91:f0:84:bf:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5A:F5:95:6D:7B:69:48:47:D3:B5:62:BC:C9:A3:AC:97:85:D7:1E
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Nlr1lW17aUhH07VivMmjrJeF1x4.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1f:aa:f0:68:c2:43:d2:8c:fc:58:30:0f:6d:93:bb:7e:e2:96:
         0e:15:d5:fe:df:18:32:99:80:99:23:f2:34:46:77:d6:22:9e:
         ca:d2:b2:a8:7b:95:f3:69:eb:2e:47:93:95:e1:1b:8f:54:1e:
         6d:9d:4d:0d:04:2e:86:cd:07:3d:1d:74:16:31:6b:02:f0:50:
         1c:ba:a3:07:4f:61:45:4a:73:5a:eb:30:48:be:c6:14:4f:e9:
         03:c7:54:2d:e9:da:3c:8f:e3:80:33:c6:84:51:55:f3:cb:52:
         ad:63:76:d7:4a:56:c5:0c:6b:32:09:66:02:c7:c0:8a:52:60:
         db:a5:e0:2b:22:cb:97:bb:07:a5:53:36:34:2c:eb:de:c2:bb:
         14:a3:cd:e5:c1:b6:22:d8:67:60:27:bc:af:50:8b:0f:00:36:
         26:cb:32:3d:b9:0b:f3:ea:83:79:fc:90:88:0d:e0:c5:06:c8:
         53:b4:9c:19:28:00:e3:77:d3:a4:cd:61:3c:66:65:a9:4e:97:
         31:e9:1c:aa:20:2d:59:59:4a:79:5f:c8:8d:00:bb:9e:38:99:
         2f:d6:3c:77:74:03:98:c9:f2:30:8e:d0:38:16:fa:5e:80:bd:
         1c:a5:36:03:92:18:0e:92:2c:ac:c9:04:da:81:2a:4f:b5:db:
         bf:9e:37:02
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFPkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDQw
MTA5MTdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDM2NUFGNTk1NkQ3QjY5
NDg0N0QzQjU2MkJDQzlBM0FDOTc4NUQ3MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIALRG1f2r0t2gWkblIUqt3ccX1vcEHXwfH7cDivxfr+mqDQwB
hT5fOX96hKDnESbZXv4GYo19qXiMHZBebVzw8Z7RSCfPpf6bdWBgZ7T1vUb0PQ1p
myTdxj2uQDPGtAxaE/gaaPHXKNLfLU2iJ8w/fnuxqJWy1rsi5PJJJz8iWtUvamhl
esjkcLfJo+c/OegyBEeVkTf98K4ydPh+VV/zAvaYyRdh0K37W1jRx5rHNamI31ct
1vBhgveEsZ5X7eGopzMJv9reAt7SdvylQcqAMiLpq7xDwhrZdgWr+vDupS+lu9kc
Eo/Kg9EZq9ZAkVU7A48/3Av2wBOQkfCEv5pdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUNlr1lW17aUhH07VivMmjrJeF1x4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9ObHIxbFcxN2FVaEgwN1Zp
dk1tanJKZUYxeDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAB+q8GjCQ9KM/FgwD22Tu37ilg4V1f7fGDKZ
gJkj8jRGd9YinsrSsqh7lfNp6y5Hk5XhG49UHm2dTQ0ELobNBz0ddBYxawLwUBy6
owdPYUVKc1rrMEi+xhRP6QPHVC3p2jyP44AzxoRRVfPLUq1jdtdKVsUMazIJZgLH
wIpSYNul4Csiy5e7B6VTNjQs697CuxSjzeXBtiLYZ2AnvK9Qiw8ANibLMj25C/Pq
g3n8kIgN4MUGyFO0nBkoAON306TNYTxmZalOlzHpHKogLVlZSnlfyI0Au544mS/W
PHd0A5jJ8jCO0DgW+l6AvRylNgOSGA6SLKzJBNqBKk+127+eNwI=
-----END CERTIFICATE-----
Generated at Mon Jul 21 03:05:45 2025 by rpki-client