Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/esVaweOCLCk3RN5WDINkU7Jmy4c.roa
File: esVaweOCLCk3RN5WDINkU7Jmy4c.roa (raw, json)
Hash identifier: 5cmIs27Vo82hvytzvIUpHd9zum3jR5AV5TLDkDNPwHM=
Subject key identifier: 7A:C5:5A:C1:E3:82:2C:29:37:44:DE:56:0C:83:64:53:B2:66:CB:87
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E69
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/esVaweOCLCk3RN5WDINkU7Jmy4c.roa
Signing time: Mon 26 May 2025 07:09:24 +0000
ROA not before: Mon 26 May 2025 07:09:24 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3689 (0xe69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 07:09:24 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7AC55AC1E3822C293744DE560C836453B266CB87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:54:9d:2c:30:27:2b:6c:51:24:d3:ed:be:
08:c5:59:90:9a:1b:0c:15:bc:33:ea:6c:5f:4a:0c:
76:3d:f6:ef:12:22:50:e5:19:6e:8f:ae:ab:5f:62:
0e:b2:7f:a2:80:e5:9d:b6:af:50:ff:2c:95:84:51:
51:94:1e:4a:b1:3c:58:06:9a:63:9f:24:48:fd:76:
d6:9d:09:a9:af:21:9b:b1:f2:48:00:f4:29:a1:f1:
5f:60:75:e5:c1:af:a5:c7:fa:68:fa:f0:9a:74:6c:
14:0a:5a:f4:1e:95:a3:88:2f:6d:05:19:ed:73:60:
54:42:f1:74:4e:eb:cd:e9:c6:b5:d7:81:05:c6:62:
b7:e4:75:2e:db:04:f5:fe:e8:f5:2a:c3:5a:18:99:
9f:c0:2b:69:e6:a7:62:b0:8c:45:bc:a4:67:cb:ef:
14:09:c8:6e:19:bb:d0:58:85:d4:1a:bd:4d:e3:90:
7a:07:60:14:12:62:e3:a0:61:d5:ec:1b:b8:4b:b6:
f8:75:12:c6:47:ff:93:1e:6f:a4:0c:d7:90:7a:1e:
0f:97:60:b6:87:ab:32:15:43:09:7e:3e:1a:5e:f7:
c1:43:e4:19:b7:da:16:02:ab:d4:77:9e:3d:40:87:
7a:e9:69:13:1b:d5:64:af:12:e8:4c:f5:b7:3f:f1:
b0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C5:5A:C1:E3:82:2C:29:37:44:DE:56:0C:83:64:53:B2:66:CB:87
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/esVaweOCLCk3RN5WDINkU7Jmy4c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:d7:2a:8e:98:4d:76:fc:61:99:93:e9:19:00:d3:09:f6:13:
37:68:e4:f7:97:bb:80:a5:6e:72:83:84:f0:bc:03:ba:8e:14:
8e:3a:5d:0b:fd:2e:48:37:ec:a9:23:cc:fc:31:3f:6c:20:ef:
ad:b1:68:fc:2b:ea:12:ec:3e:b3:b1:d2:43:fe:84:a5:67:e2:
58:aa:f3:80:41:dd:05:cb:df:ac:b0:de:7b:c6:eb:f9:ed:68:
97:be:b4:68:29:87:73:25:89:97:27:b1:8e:7e:e3:c0:db:dd:
80:f3:16:4a:af:bb:5d:9e:e8:c2:b3:35:e4:a8:77:96:25:9e:
52:49:b4:df:bd:70:43:33:0e:66:41:00:f1:f4:84:8b:4b:4f:
ae:ac:c1:7a:53:74:fb:5c:58:2a:42:a4:2d:1e:3a:f7:c2:cb:
e1:33:1c:42:28:df:fe:85:0e:17:2b:3b:91:9e:7e:cc:43:af:
03:4d:cb:85:52:af:26:c3:fd:16:4e:17:8c:e7:ae:82:89:85:
6c:48:aa:bd:89:59:94:b2:ad:f4:e1:85:dc:e8:bc:c1:af:b2:
71:68:01:43:1d:2b:4b:86:fb:36:3e:10:bc:48:08:86:b6:3f:
10:0c:2f:f0:12:d6:db:f3:54:e0:96:63:99:2f:b0:45:43:e9:
96:1c:4d:31
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDmkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjYw
NzA5MjRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDdBQzU1QUMxRTM4MjJD
MjkzNzQ0REU1NjBDODM2NDUzQjI2NkNCODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCu5VSdLDAnK2xRJNPtvgjFWZCaGwwVvDPqbF9KDHY99u8SIlDl
GW6PrqtfYg6yf6KA5Z22r1D/LJWEUVGUHkqxPFgGmmOfJEj9dtadCamvIZux8kgA
9Cmh8V9gdeXBr6XH+mj68Jp0bBQKWvQelaOIL20FGe1zYFRC8XRO683pxrXXgQXG
YrfkdS7bBPX+6PUqw1oYmZ/AK2nmp2KwjEW8pGfL7xQJyG4Zu9BYhdQavU3jkHoH
YBQSYuOgYdXsG7hLtvh1EsZH/5Meb6QM15B6Hg+XYLaHqzIVQwl+Phpe98FD5Bm3
2hYCq9R3nj1Ah3rpaRMb1WSvEuhM9bc/8bCDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUesVaweOCLCk3RN5WDINkU7Jmy4cwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9lc1Zhd2VPQ0xDazNSTjVX
RElOa1U3Sm15NGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBADjXKo6YTXb8YZmT6RkA0wn2Ezdo5PeXu4Cl
bnKDhPC8A7qOFI46XQv9Lkg37KkjzPwxP2wg762xaPwr6hLsPrOx0kP+hKVn4liq
84BB3QXL36yw3nvG6/ntaJe+tGgph3MliZcnsY5+48Db3YDzFkqvu12e6MKzNeSo
d5YlnlJJtN+9cEMzDmZBAPH0hItLT66swXpTdPtcWCpCpC0eOvfCy+EzHEIo3/6F
DhcrO5GefsxDrwNNy4VSrybD/RZOF4znroKJhWxIqr2JWZSyrfThhdzovMGvsnFo
AUMdK0uG+zY+ELxICIa2PxAML/AS1tvzVOCWY5kvsEVD6ZYcTTE=
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:10:28 2025 by rpki-client