Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/QEEDADYKaQYk0wteS5ejABu8uAM.roa
File: QEEDADYKaQYk0wteS5ejABu8uAM.roa (raw, json)
Hash identifier: kidrFo3K5jNmgGGYuNIutbjTXItfdA8pX5gbZJVMy6w=
Subject key identifier: 40:41:03:00:36:0A:69:06:24:D3:0B:5E:4B:97:A3:00:1B:BC:B8:03
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1FD9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QEEDADYKaQYk0wteS5ejABu8uAM.roa
Signing time: Wed 18 Jun 2025 13:25:56 +0000
ROA not before: Wed 18 Jun 2025 13:25:56 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8153 (0x1fd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 18 13:25:56 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=40410300360A690624D30B5E4B97A3001BBCB803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:1e:12:83:ed:aa:db:74:a9:e6:f1:ab:94:
dc:d2:16:17:be:54:5b:d9:a7:99:31:6d:2c:8d:2a:
11:ac:05:e6:15:9f:f6:7c:81:7a:34:18:47:f8:61:
00:35:b9:3c:f3:cb:5a:b1:66:75:fe:3a:67:8e:47:
17:13:34:05:72:3e:c6:48:50:ef:21:8a:73:dd:e5:
de:51:db:5d:ca:e6:ec:2f:da:08:35:39:06:f6:92:
cd:2a:8b:c5:2e:df:a3:64:f2:ad:9e:81:af:00:ac:
ab:cb:ab:37:8a:cc:ce:c1:34:53:a1:2a:0d:be:cd:
d9:fc:83:d7:75:4d:5f:f0:92:a8:2f:5b:c6:1e:79:
59:67:d0:93:59:7a:aa:5b:a4:c1:36:a1:20:98:87:
0c:27:78:b7:7c:b0:9a:3b:92:f3:16:af:68:72:84:
99:38:ac:23:b2:c2:63:e7:fe:10:29:7b:e3:08:a1:
92:db:d1:e7:10:70:2e:4e:78:2c:e9:92:2f:65:ae:
55:4b:f4:3f:53:4a:c0:0d:c6:fa:85:59:ba:2c:8e:
df:65:a8:e2:53:01:7f:a0:cd:92:cd:30:3c:6e:6f:
2c:25:42:54:6d:40:c7:cd:a8:66:70:7e:6f:8b:d7:
a2:95:1f:c6:c8:11:8c:44:b5:d9:c1:37:87:c1:96:
cb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:41:03:00:36:0A:69:06:24:D3:0B:5E:4B:97:A3:00:1B:BC:B8:03
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QEEDADYKaQYk0wteS5ejABu8uAM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:24:a8:9f:f0:fb:78:bf:68:10:f6:10:f5:6c:41:f7:e7:de:
50:c9:99:da:82:70:79:d2:2b:03:b2:29:07:8f:84:6c:86:78:
c4:25:64:8b:f1:51:25:27:8a:b8:87:ab:a6:15:82:64:40:cf:
b9:85:31:1a:3e:6c:c1:9e:dd:4a:ec:3d:b5:fa:65:27:a1:cd:
c3:cc:78:dd:74:05:df:41:57:3e:b7:7f:dd:1b:4a:a6:35:ee:
d0:4a:f1:9b:28:48:90:c3:b3:0a:5a:bd:45:f6:f2:29:81:12:
e1:5a:7a:01:ea:09:a2:cd:6d:11:fc:34:da:08:f1:46:c4:d3:
7f:bc:e7:31:fd:14:ca:89:ec:e7:24:ef:0a:eb:f2:15:a3:50:
d5:00:b2:eb:f4:34:ba:dd:66:f2:ef:57:0f:22:9c:61:e1:d2:
75:60:a4:17:2f:6c:f5:34:96:95:ac:e6:87:7d:18:c8:6c:0e:
43:fc:f8:0e:35:70:f7:6c:98:cf:e8:6d:30:2d:f0:fc:98:ba:
24:91:df:41:74:a8:50:12:a1:a0:bb:83:14:d5:03:ce:74:47:
47:79:6a:fa:e2:ae:41:f8:36:9e:c5:7d:fc:ff:e1:43:23:62:
d8:aa:3d:a7:f3:60:ee:fe:b6:be:33:69:7c:2a:b0:ca:67:86:
e0:24:82:76
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH9kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTgx
MzI1NTZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDQwNDEwMzAwMzYwQTY5
MDYyNEQzMEI1RTRCOTdBMzAwMUJCQ0I4MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMzh4Sg+2q23Sp5vGrlNzSFhe+VFvZp5kxbSyNKhGsBeYVn/Z8
gXo0GEf4YQA1uTzzy1qxZnX+OmeORxcTNAVyPsZIUO8hinPd5d5R213K5uwv2gg1
OQb2ks0qi8Uu36Nk8q2ega8ArKvLqzeKzM7BNFOhKg2+zdn8g9d1TV/wkqgvW8Ye
eVln0JNZeqpbpME2oSCYhwwneLd8sJo7kvMWr2hyhJk4rCOywmPn/hApe+MIoZLb
0ecQcC5OeCzpki9lrlVL9D9TSsANxvqFWbosjt9lqOJTAX+gzZLNMDxubywlQlRt
QMfNqGZwfm+L16KVH8bIEYxEtdnBN4fBlssFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUQEEDADYKaQYk0wteS5ejABu8uAMwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9RRUVEQURZS2FRWWswd3Rl
UzVlakFCdTh1QU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAAQkqJ/w+3i/aBD2EPVsQffn3lDJmdqCcHnS
KwOyKQePhGyGeMQlZIvxUSUniriHq6YVgmRAz7mFMRo+bMGe3UrsPbX6ZSehzcPM
eN10Bd9BVz63f90bSqY17tBK8ZsoSJDDswpavUX28imBEuFaegHqCaLNbRH8NNoI
8UbE03+85zH9FMqJ7Ock7wrr8hWjUNUAsuv0NLrdZvLvVw8inGHh0nVgpBcvbPU0
lpWs5od9GMhsDkP8+A41cPdsmM/obTAt8PyYuiSR30F0qFASoaC7gxTVA850R0d5
avrirkH4Np7Fffz/4UMjYtiqPafzYO7+tr4zaXwqsMpnhuAkgnY=
-----END CERTIFICATE-----
Generated at Sun Jul 20 19:09:03 2025 by rpki-client