Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/TkS2fnN8v3bA3izApoVoQhwh1yk.roa
File: TkS2fnN8v3bA3izApoVoQhwh1yk.roa (raw, json)
Hash identifier: 4RaIdebZ5+Uv9WzqP0hCtfn/8Rq9Cj6pc/YWQS2vXMs=
Subject key identifier: 4E:44:B6:7E:73:7C:BF:76:C0:DE:2C:C0:A6:85:68:42:1C:21:D7:29
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0905
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/TkS2fnN8v3bA3izApoVoQhwh1yk.roa
Signing time: Mon 19 May 2025 02:38:18 +0000
ROA not before: Mon 19 May 2025 02:38:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2309 (0x905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 02:38:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4E44B67E737CBF76C0DE2CC0A68568421C21D729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:99:02:7b:f8:99:58:e6:59:c0:1e:ab:e3:ab:
ec:af:f2:11:ea:64:19:43:75:b1:5c:a0:c4:2c:72:
83:a2:63:92:ca:67:c3:2f:f2:c2:61:16:33:56:6c:
79:ce:ed:ba:d4:a9:28:8a:74:95:15:da:1f:70:b4:
c5:15:e9:b8:e2:d0:9d:23:64:28:20:22:8e:6b:5e:
74:0a:4b:8d:b9:94:e4:6c:d9:bc:58:e9:a2:52:30:
ab:8f:6d:86:67:1f:35:54:d1:46:88:28:5e:0b:66:
3a:33:9a:c7:80:03:9c:e4:77:3d:d4:ea:22:96:aa:
98:95:20:a3:1c:60:bc:43:41:b8:c6:ce:79:a5:09:
51:d5:cf:c6:47:b5:2f:04:db:05:33:42:5d:01:ec:
e4:32:87:cb:d2:88:ce:94:11:fb:ac:5f:24:c2:24:
14:e2:59:16:87:a3:d7:41:23:e7:50:f8:2e:0f:f9:
70:d8:f8:f1:15:33:f5:0a:cb:25:f4:55:31:07:1e:
ed:8e:b8:05:40:98:3b:af:fb:86:9e:3f:44:f3:44:
95:9a:aa:5a:49:ed:81:80:64:d8:ea:b6:0c:e7:fd:
42:92:a3:f2:ee:ae:18:e6:60:2b:e4:34:8a:f8:6e:
4f:77:d0:3b:be:01:48:72:c1:f0:38:c1:3c:20:f4:
b4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:44:B6:7E:73:7C:BF:76:C0:DE:2C:C0:A6:85:68:42:1C:21:D7:29
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/TkS2fnN8v3bA3izApoVoQhwh1yk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:01:40:41:f2:c7:88:80:88:74:01:ac:21:52:9e:e1:e4:1c:
74:36:8f:56:9b:b1:e1:b3:f9:27:09:ad:6d:7f:1b:60:4e:1a:
3d:70:1b:cc:87:0a:2d:02:f1:d5:b9:39:f6:40:8c:e1:6c:3b:
59:63:8b:12:4e:09:7d:95:50:b6:6d:2f:d0:53:57:77:70:0c:
08:7e:91:f9:66:b9:b7:81:24:5b:ab:f9:1f:ce:d2:47:1a:8c:
84:38:d6:41:60:c1:a7:12:3b:bc:b1:10:fe:dc:f3:fa:05:17:
b9:9a:b5:16:f2:f0:7e:18:a1:20:91:39:ba:d7:61:c6:50:6b:
e2:ca:39:61:0d:84:f1:1e:c3:a3:5a:74:0f:10:7f:a7:b5:90:
7b:77:0e:04:34:e5:09:de:b6:75:9a:f1:b1:37:3f:4e:00:ef:
e7:36:8b:f5:24:a0:f3:49:b8:65:6d:00:18:97:ad:91:1b:b0:
05:26:fd:e0:04:af:a1:dd:4f:17:98:2c:a7:f2:3a:c4:2d:96:
c3:bb:55:d4:c3:d4:e2:4c:08:f1:fc:11:ef:39:13:29:e9:2a:
d9:7d:bb:94:88:4d:cd:b5:c2:dc:07:ec:61:15:05:ed:7e:a0:
49:95:d7:4a:3e:f3:d3:77:6d:d4:9a:0a:46:fb:66:6b:52:dd:
25:1e:66:20
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTkw
MjM4MThaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDRFNDRCNjdFNzM3Q0JG
NzZDMERFMkNDMEE2ODU2ODQyMUMyMUQ3MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYmQJ7+JlY5lnAHqvjq+yv8hHqZBlDdbFcoMQscoOiY5LKZ8Mv
8sJhFjNWbHnO7brUqSiKdJUV2h9wtMUV6bji0J0jZCggIo5rXnQKS425lORs2bxY
6aJSMKuPbYZnHzVU0UaIKF4LZjozmseAA5zkdz3U6iKWqpiVIKMcYLxDQbjGznml
CVHVz8ZHtS8E2wUzQl0B7OQyh8vSiM6UEfusXyTCJBTiWRaHo9dBI+dQ+C4P+XDY
+PEVM/UKyyX0VTEHHu2OuAVAmDuv+4aeP0TzRJWaqlpJ7YGAZNjqtgzn/UKSo/Lu
rhjmYCvkNIr4bk930Du+AUhywfA4wTwg9LQlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUTkS2fnN8v3bA3izApoVoQhwh1ykwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9Ua1MyZm5OOHYzYkEzaXpB
cG9Wb1Fod2gxeWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAKABQEHyx4iAiHQBrCFSnuHkHHQ2j1abseGz
+ScJrW1/G2BOGj1wG8yHCi0C8dW5OfZAjOFsO1ljixJOCX2VULZtL9BTV3dwDAh+
kflmubeBJFur+R/O0kcajIQ41kFgwacSO7yxEP7c8/oFF7matRby8H4YoSCRObrX
YcZQa+LKOWENhPEew6NadA8Qf6e1kHt3DgQ05QnetnWa8bE3P04A7+c2i/UkoPNJ
uGVtABiXrZEbsAUm/eAEr6HdTxeYLKfyOsQtlsO7VdTD1OJMCPH8Ee85EynpKtl9
u5SITc21wtwH7GEVBe1+oEmV10o+89N3bdSaCkb7ZmtS3SUeZiA=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:39:13 2025 by rpki-client