Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ZRyS1l6k-wbhmx16ZSLxa3UYLtc.roa
File: ZRyS1l6k-wbhmx16ZSLxa3UYLtc.roa (raw, json)
Hash identifier: EJWxnwLaTu2a9zPyWNajiF22Kbb4EPu9KqEiFMUGH9w=
Subject key identifier: 65:1C:92:D6:5E:A4:FB:06:E1:9B:1D:7A:65:22:F1:6B:75:18:2E:D7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2209
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZRyS1l6k-wbhmx16ZSLxa3UYLtc.roa
Signing time: Sat 21 Jun 2025 22:41:53 +0000
ROA not before: Sat 21 Jun 2025 22:41:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8713 (0x2209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 21 22:41:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=651C92D65EA4FB06E19B1D7A6522F16B75182ED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:07:d7:06:c4:b2:04:32:40:00:7a:ce:36:
6a:de:0d:df:35:14:07:fa:e7:a0:38:4e:92:6a:63:
c1:1e:8d:ab:4f:cb:73:c5:82:14:51:72:fa:50:62:
71:19:8d:4f:59:f9:89:0e:03:aa:98:be:45:aa:52:
74:ea:d0:3b:14:71:ca:27:f5:57:ac:69:25:86:98:
bb:21:78:eb:42:c4:d8:45:0a:06:dc:eb:96:a1:ad:
d3:30:22:3c:d5:a5:e1:bf:d4:b7:b0:d3:5c:35:cb:
cd:6f:01:b1:c1:ed:b6:46:07:38:6d:09:53:26:a6:
84:9b:6a:f2:e5:37:49:cb:35:a6:b9:9d:e8:39:4c:
c3:9c:d8:a3:97:ca:51:e1:70:40:eb:48:f1:60:50:
d5:dd:23:dd:41:21:8a:0a:52:96:69:f5:0e:cf:db:
1b:91:a2:91:ad:8a:d7:ca:5a:c1:fb:da:55:0d:55:
26:c3:55:ef:d9:10:75:08:70:57:aa:0b:85:86:b6:
0d:11:9e:71:03:2b:74:79:84:5c:2f:7a:3d:b2:09:
79:fe:52:a4:40:ee:0e:b6:e4:51:00:4e:b0:0a:45:
5e:cf:55:1c:c2:83:59:4e:f0:e9:d3:9b:6a:a0:a0:
1d:ec:f4:1b:0f:94:58:a3:67:77:38:1e:21:20:9b:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1C:92:D6:5E:A4:FB:06:E1:9B:1D:7A:65:22:F1:6B:75:18:2E:D7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZRyS1l6k-wbhmx16ZSLxa3UYLtc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:3d:6c:c3:c0:ba:26:ee:ab:d7:0e:a3:b9:f8:91:cf:a5:ef:
23:d8:d0:a3:94:1f:87:6c:4f:e3:6a:de:d3:cd:44:21:b2:85:
46:7a:5c:f8:d8:59:9d:0e:01:f6:4f:32:24:b7:2d:43:3f:73:
17:99:fd:17:5c:4e:cc:88:d0:54:30:0e:cc:e8:09:9c:55:2b:
25:39:f1:4f:1c:dc:30:df:72:9e:a2:d8:84:d8:7f:bb:39:f1:
af:40:29:2d:bc:8c:92:96:80:96:29:f2:e8:ad:40:3f:01:ef:
80:c3:1b:92:71:7f:fb:98:93:4a:df:64:9c:e0:a2:eb:86:fc:
7c:59:2c:3f:c5:01:38:c0:cc:67:3e:65:6d:06:79:d5:bc:49:
df:e4:54:08:60:9a:61:70:e0:6c:95:5d:4e:f4:56:85:99:e6:
a4:81:d4:96:71:2c:a1:0a:95:86:40:67:0c:6c:5d:70:82:77:
dd:1f:2e:45:74:02:de:45:3d:ee:3a:e6:16:cd:0a:23:52:4f:
e3:e8:b4:29:34:f8:88:bc:06:46:71:cf:83:c4:b3:c7:7a:e3:
82:5a:16:a4:b3:83:88:45:28:2a:92:76:f4:32:4d:6d:33:79:
d8:98:57:c4:8c:59:3b:31:b6:d2:32:2d:11:6e:83:98:46:ee:
07:5f:0c:2a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIgkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MjEy
MjQxNTNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDY1MUM5MkQ2NUVBNEZC
MDZFMTlCMUQ3QTY1MjJGMTZCNzUxODJFRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJbwfXBsSyBDJAAHrONmreDd81FAf656A4TpJqY8EejatPy3PF
ghRRcvpQYnEZjU9Z+YkOA6qYvkWqUnTq0DsUccon9VesaSWGmLsheOtCxNhFCgbc
65ahrdMwIjzVpeG/1Lew01w1y81vAbHB7bZGBzhtCVMmpoSbavLlN0nLNaa5neg5
TMOc2KOXylHhcEDrSPFgUNXdI91BIYoKUpZp9Q7P2xuRopGtitfKWsH72lUNVSbD
Ve/ZEHUIcFeqC4WGtg0RnnEDK3R5hFwvej2yCXn+UqRA7g625FEATrAKRV7PVRzC
g1lO8OnTm2qgoB3s9BsPlFijZ3c4HiEgm+EbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUZRyS1l6k+wbhmx16ZSLxa3UYLtcwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9aUnlTMWw2ay13YmhteDE2
WlNMeGEzVVlMdGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAF49bMPAuibuq9cOo7n4kc+l7yPY0KOUH4ds
T+Nq3tPNRCGyhUZ6XPjYWZ0OAfZPMiS3LUM/cxeZ/RdcTsyI0FQwDszoCZxVKyU5
8U8c3DDfcp6i2ITYf7s58a9AKS28jJKWgJYp8uitQD8B74DDG5Jxf/uYk0rfZJzg
ouuG/HxZLD/FATjAzGc+ZW0GedW8Sd/kVAhgmmFw4GyVXU70VoWZ5qSB1JZxLKEK
lYZAZwxsXXCCd90fLkV0At5FPe465hbNCiNST+PotCk0+Ii8BkZxz4PEs8d644Ja
FqSzg4hFKCqSdvQyTW0zediYV8SMWTsxttIyLRFug5hG7gdfDCo=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:39:05 2025 by rpki-client