Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/l2S1VsYNPW64In062hVsctGzmZc.roa
File: l2S1VsYNPW64In062hVsctGzmZc.roa (raw, json)
Hash identifier: a76I6Q7s54ssGEPV3VtOu2Sf//T1ojAqqaeAzYwFGGY=
Subject key identifier: 97:64:B5:56:C6:0D:3D:6E:B8:22:7D:3A:DA:15:6C:72:D1:B3:99:97
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C05
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/l2S1VsYNPW64In062hVsctGzmZc.roa
Signing time: Fri 23 May 2025 02:38:23 +0000
ROA not before: Fri 23 May 2025 02:38:23 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3077 (0xc05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 02:38:23 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9764B556C60D3D6EB8227D3ADA156C72D1B39997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:71:7f:a8:7c:d6:aa:d0:c2:42:21:8e:cc:
68:e6:84:81:58:6f:2a:db:c5:d8:44:59:fa:33:4a:
a4:81:b8:f3:e8:14:06:87:3a:3f:24:1b:4f:33:56:
ae:96:f4:74:b2:bd:a7:64:e8:69:90:92:ba:c4:f2:
41:77:41:8c:14:6d:24:7f:ca:7a:71:19:7b:89:7d:
67:88:91:3b:71:89:06:61:61:e7:10:bc:30:08:6d:
55:88:aa:2c:6b:da:ee:d4:46:4c:63:36:44:0b:77:
8c:d7:ac:1a:d5:62:88:4e:b7:cb:d7:e3:5b:1f:a7:
ba:6b:bf:20:0e:bd:fb:83:c2:c2:35:c8:55:96:d1:
dc:33:b9:d2:1f:9c:b2:6c:3a:79:73:d5:e8:54:11:
5b:b1:1b:b9:a4:93:6b:66:4a:56:85:6b:a8:03:05:
71:e5:67:84:ba:bd:00:99:03:96:3c:c1:ed:d1:5a:
eb:7e:ea:79:c3:66:c7:05:d9:84:01:a5:b7:2b:f3:
db:ff:6d:76:33:9c:36:47:f2:6d:3b:57:0f:9e:16:
2a:de:ab:8c:97:99:e9:ae:c6:36:a7:1b:65:b6:19:
a9:7f:25:28:e1:15:f4:ee:69:b8:81:7e:27:ab:70:
6a:ab:4f:8c:63:95:02:af:a6:44:f3:d6:84:01:6a:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:64:B5:56:C6:0D:3D:6E:B8:22:7D:3A:DA:15:6C:72:D1:B3:99:97
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/l2S1VsYNPW64In062hVsctGzmZc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:e5:88:e0:34:7b:07:a0:bc:f1:fb:49:65:97:92:02:53:c6:
5f:5d:71:5e:c8:b1:a6:62:87:36:49:49:96:57:b2:3d:d7:23:
68:88:a1:cb:52:b5:eb:9b:71:64:f3:b0:cb:a6:23:33:a7:77:
a6:70:66:e3:92:35:97:2e:d3:98:45:ce:a9:7e:77:ff:64:78:
7e:71:11:c5:aa:a6:ca:60:b3:58:74:f5:77:e9:a2:61:65:6e:
2c:5a:00:de:eb:15:44:37:ed:64:53:a7:be:ce:8b:56:50:79:
66:b1:ce:3b:a4:41:5b:28:ad:b7:42:af:b7:84:65:95:36:32:
6a:28:fc:87:fc:71:b7:dd:0d:73:fe:e7:d9:9f:57:34:ad:8c:
cf:87:c8:6c:e1:c3:98:32:cd:b5:0d:6a:71:22:8b:70:d8:d9:
bb:be:08:73:86:75:9e:61:9f:eb:3a:c4:6e:e0:18:d4:2b:44:
16:8c:ef:36:f5:9a:c1:45:22:51:41:7f:11:a6:f1:3d:80:9b:
74:16:60:e8:fc:36:e2:2f:16:35:51:7b:04:7c:d9:5d:2e:0e:
20:a5:41:e2:3e:ab:8c:61:fd:6d:92:61:5c:5e:d8:0f:a2:1e:
de:e4:ad:0b:7c:14:9b:42:cd:8e:02:1d:82:32:41:34:c5:68:
da:16:03:b9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDAUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjMw
MjM4MjNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDk3NjRCNTU2QzYwRDNE
NkVCODIyN0QzQURBMTU2QzcyRDFCMzk5OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHsHF/qHzWqtDCQiGOzGjmhIFYbyrbxdhEWfozSqSBuPPoFAaH
Oj8kG08zVq6W9HSyvadk6GmQkrrE8kF3QYwUbSR/ynpxGXuJfWeIkTtxiQZhYecQ
vDAIbVWIqixr2u7URkxjNkQLd4zXrBrVYohOt8vX41sfp7prvyAOvfuDwsI1yFWW
0dwzudIfnLJsOnlz1ehUEVuxG7mkk2tmSlaFa6gDBXHlZ4S6vQCZA5Y8we3RWut+
6nnDZscF2YQBpbcr89v/bXYznDZH8m07Vw+eFireq4yXmemuxjanG2W2Gal/JSjh
FfTuabiBfiercGqrT4xjlQKvpkTz1oQBatznAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUl2S1VsYNPW64In062hVsctGzmZcwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9sMlMxVnNZTlBXNjRJbjA2
MmhWc2N0R3ptWmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAHjliOA0ewegvPH7SWWXkgJTxl9dcV7IsaZi
hzZJSZZXsj3XI2iIoctSteubcWTzsMumIzOnd6ZwZuOSNZcu05hFzql+d/9keH5x
EcWqpspgs1h09XfpomFlbixaAN7rFUQ37WRTp77Oi1ZQeWaxzjukQVsorbdCr7eE
ZZU2Mmoo/If8cbfdDXP+59mfVzStjM+HyGzhw5gyzbUNanEii3DY2bu+CHOGdZ5h
n+s6xG7gGNQrRBaM7zb1msFFIlFBfxGm8T2Am3QWYOj8NuIvFjVRewR82V0uDiCl
QeI+q4xh/W2SYVxe2A+iHt7krQt8FJtCzY4CHYIyQTTFaNoWA7k=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:37:45 2025 by rpki-client