Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/jJkF95A9lh1zaMyqX2XaatPmWRE.roa
File: jJkF95A9lh1zaMyqX2XaatPmWRE.roa (raw, json)
Hash identifier: 1XT5A1/mOXb546knkkP4JqFc2CTIKOhg8ollzO7dLQY=
Subject key identifier: 8C:99:05:F7:90:3D:96:1D:73:68:CC:AA:5F:65:DA:6A:D3:E6:59:11
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1E91
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jJkF95A9lh1zaMyqX2XaatPmWRE.roa
Signing time: Mon 16 Jun 2025 20:46:19 +0000
ROA not before: Mon 16 Jun 2025 20:46:19 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7825 (0x1e91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 20:46:19 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8C9905F7903D961D7368CCAA5F65DA6AD3E65911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:b7:82:7a:cb:67:1c:96:b9:50:50:21:d0:
44:93:71:eb:9f:6b:89:3e:30:d5:7a:63:18:b7:e5:
8e:45:83:a4:c2:0e:ee:46:c7:11:86:16:76:73:9d:
f2:2b:cb:86:1f:0b:d2:f3:62:5c:f2:3e:f2:4a:4b:
9e:ec:35:ff:13:cb:80:8f:88:3f:3b:da:b9:ed:0e:
c8:ec:68:81:14:79:11:95:50:7e:cb:1b:ab:e6:4a:
c0:92:3f:0c:f0:38:56:84:82:e0:7f:8f:4b:ab:71:
9d:d6:8f:c3:f2:18:6e:4c:85:95:01:3b:5e:5a:14:
29:aa:b7:e0:b4:c2:66:a5:01:00:49:f6:ce:b1:73:
d1:21:d6:eb:88:b3:42:69:74:94:98:f2:28:4d:31:
b5:82:ea:b9:ef:c7:bf:39:fb:59:5e:79:11:43:7b:
4d:4e:74:10:95:2f:ce:91:2a:43:9e:13:58:b0:81:
40:5f:17:dd:ea:03:c6:6f:6c:4e:bc:14:b2:00:0d:
8a:c0:8d:07:d5:3e:81:a8:49:61:72:65:a6:e0:7e:
a7:6b:02:4e:17:22:2b:59:71:7a:93:83:1e:9c:6b:
37:dd:7b:8a:fc:a4:66:5c:7b:25:cf:ea:b0:da:74:
b0:2a:5f:e1:18:3c:4b:ea:06:87:4e:29:4c:3c:1e:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:99:05:F7:90:3D:96:1D:73:68:CC:AA:5F:65:DA:6A:D3:E6:59:11
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jJkF95A9lh1zaMyqX2XaatPmWRE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:6d:ea:ba:52:49:7b:a8:ff:53:7f:d5:6c:3b:5b:05:3c:7b:
fb:ce:ad:d6:f4:0f:4e:de:f2:90:d4:0d:85:39:92:03:d8:e6:
6c:78:bd:24:b0:f9:73:50:aa:04:28:74:35:08:07:3b:e4:fa:
67:01:34:b9:e9:b3:47:26:e2:7a:9f:30:09:fb:07:47:e6:8c:
b9:01:13:39:2e:f5:1c:0b:ab:3a:bc:af:ea:85:3a:f7:3c:0a:
2e:23:f4:4c:bd:af:cb:66:a0:94:f6:3c:6c:b1:18:9b:e2:c3:
15:b9:18:de:ec:f0:4b:b8:81:70:96:e4:83:d5:fb:6e:3e:de:
8e:ec:3b:87:57:bd:85:6e:31:71:77:69:ff:e4:87:93:d3:ce:
41:f1:d3:e8:67:06:41:70:1a:ad:fd:77:78:11:c3:6e:73:c6:
91:c1:25:40:ef:76:23:99:6e:ab:4c:66:68:04:e9:e5:f6:29:
b0:92:d2:9d:85:06:72:ab:50:cb:ec:11:15:0a:02:9b:c0:fb:
6c:09:16:b8:9a:75:37:27:c2:76:90:c2:ca:e9:9a:c2:4f:18:
35:4a:bb:17:7d:bb:bc:1e:ad:ed:5e:71:80:65:35:db:df:b9:
07:ca:34:a3:99:c6:33:16:83:f1:65:fa:0c:db:1e:ed:91:a2:
51:2e:77:ea
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHpEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTYy
MDQ2MTlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDhDOTkwNUY3OTAzRDk2
MUQ3MzY4Q0NBQTVGNjVEQTZBRDNFNjU5MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDSbeCestnHJa5UFAh0ESTceufa4k+MNV6Yxi35Y5Fg6TCDu5G
xxGGFnZznfIry4YfC9LzYlzyPvJKS57sNf8Ty4CPiD872rntDsjsaIEUeRGVUH7L
G6vmSsCSPwzwOFaEguB/j0urcZ3Wj8PyGG5MhZUBO15aFCmqt+C0wmalAQBJ9s6x
c9Eh1uuIs0JpdJSY8ihNMbWC6rnvx785+1leeRFDe01OdBCVL86RKkOeE1iwgUBf
F93qA8ZvbE68FLIADYrAjQfVPoGoSWFyZabgfqdrAk4XIitZcXqTgx6cazfde4r8
pGZceyXP6rDadLAqX+EYPEvqBodOKUw8Hm4tAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUjJkF95A9lh1zaMyqX2XaatPmWREwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9qSmtGOTVBOWxoMXphTXlx
WDJYYWF0UG1XUkUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBABdt6rpSSXuo/1N/1Ww7WwU8e/vOrdb0D07e
8pDUDYU5kgPY5mx4vSSw+XNQqgQodDUIBzvk+mcBNLnps0cm4nqfMAn7B0fmjLkB
Ezku9RwLqzq8r+qFOvc8Ci4j9Ey9r8tmoJT2PGyxGJviwxW5GN7s8Eu4gXCW5IPV
+24+3o7sO4dXvYVuMXF3af/kh5PTzkHx0+hnBkFwGq39d3gRw25zxpHBJUDvdiOZ
bqtMZmgE6eX2KbCS0p2FBnKrUMvsERUKApvA+2wJFriadTcnwnaQwsrpmsJPGDVK
uxd9u7were1ecYBlNdvfuQfKNKOZxjMWg/Fl+gzbHu2RolEud+o=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:53:30 2025 by rpki-client