Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ozVG7D5RhR4jAOhnjW3dz-lwpj8.roa
File: ozVG7D5RhR4jAOhnjW3dz-lwpj8.roa (raw, json)
Hash identifier: RUDSuU9RtibaJkdFCu9zP76ge/SsWPg979QRx/WM9YQ=
Subject key identifier: A3:35:46:EC:3E:51:85:1E:23:00:E8:67:8D:6D:DD:CF:E9:70:A6:3F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2461
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ozVG7D5RhR4jAOhnjW3dz-lwpj8.roa
Signing time: Wed 25 Jun 2025 01:42:08 +0000
ROA not before: Wed 25 Jun 2025 01:42:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9313 (0x2461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 25 01:42:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A33546EC3E51851E2300E8678D6DDDCFE970A63F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ba:70:fc:bd:a1:c5:82:0a:82:69:5a:a1:6e:
c0:06:b5:9b:2b:aa:29:8c:00:30:03:0b:fc:e4:73:
93:bc:7e:ab:a1:ae:3c:5b:74:67:07:c9:cb:b6:d7:
2c:fb:e3:ba:37:91:5f:3d:06:75:52:f2:3e:bd:4e:
0f:04:a2:b2:39:2a:65:fb:01:13:7d:d5:9d:17:0c:
b4:21:a6:94:3f:c4:57:04:59:4c:b3:a6:ca:fc:48:
26:fc:19:95:af:0b:db:2e:1b:ce:33:86:2a:f1:38:
69:01:0a:ed:8e:a6:ef:34:04:2d:c1:cd:ff:cb:ca:
5d:b3:6a:c2:ae:6a:41:69:90:ea:c0:42:3a:b1:e5:
62:2e:35:7f:91:b1:25:a2:d7:c9:aa:75:0e:96:38:
59:db:60:72:c4:fc:f2:54:e6:4a:09:41:1f:03:43:
96:48:25:97:e7:58:4e:c4:82:57:b4:e3:0f:fd:6b:
76:3b:36:ad:0b:29:cc:d2:1e:d4:26:de:68:b3:4f:
9c:a8:ce:13:2b:ca:4e:b8:76:57:47:ea:b5:51:b0:
d7:51:34:ff:aa:0e:80:64:a8:ff:5d:34:a8:de:e5:
c7:10:ef:ae:2e:b5:09:03:14:b8:2b:21:35:ca:09:
e5:fa:72:87:d4:ac:84:94:c6:e3:32:5f:15:35:85:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:35:46:EC:3E:51:85:1E:23:00:E8:67:8D:6D:DD:CF:E9:70:A6:3F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ozVG7D5RhR4jAOhnjW3dz-lwpj8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:5d:d3:02:39:d4:b2:c0:26:f1:7a:95:51:cb:0c:fe:2b:29:
c1:9b:62:a5:76:07:3f:7c:5d:76:cc:72:60:e2:37:f8:47:6b:
16:87:69:09:cc:1a:d0:14:39:77:6f:d4:c6:50:65:31:a9:96:
70:09:78:f3:6b:8d:7e:de:f3:5b:84:6b:2d:3e:f5:c2:5c:b2:
a0:f8:a7:ef:0c:36:c4:ab:fa:33:02:38:01:eb:cb:51:56:ad:
3c:8f:91:fc:fb:dc:80:81:b7:e2:2a:1f:4b:a9:f3:4e:bf:57:
f6:e2:94:b3:08:6e:29:94:56:80:79:7f:62:c7:b8:53:15:1a:
7a:1f:45:fa:52:2f:cf:ab:f6:df:ee:c4:f0:55:0b:6b:07:a2:
8e:58:97:58:c8:b9:9a:d9:ba:40:b6:bf:46:df:3c:b7:d4:4a:
eb:31:d5:96:dc:1c:b9:38:c4:29:be:55:15:fd:08:3c:1b:91:
d7:79:87:f8:f5:93:02:92:24:dc:63:54:84:c2:d5:88:62:40:
81:0e:4e:a6:2c:d8:52:56:78:3f:7a:c2:9d:75:e2:f2:df:12:
8c:9d:9f:bd:dd:38:b8:02:eb:cb:14:a7:48:cc:d7:17:28:d9:
78:d8:4f:21:21:fe:f3:36:8e:35:94:a0:06:95:83:9a:a2:4f:
92:bd:8e:8d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJGEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MjUw
MTQyMDhaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEEzMzU0NkVDM0U1MTg1
MUUyMzAwRTg2NzhENkRERENGRTk3MEE2M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeunD8vaHFggqCaVqhbsAGtZsrqimMADADC/zkc5O8fquhrjxb
dGcHycu21yz747o3kV89BnVS8j69Tg8EorI5KmX7ARN91Z0XDLQhppQ/xFcEWUyz
psr8SCb8GZWvC9suG84zhirxOGkBCu2Opu80BC3Bzf/Lyl2zasKuakFpkOrAQjqx
5WIuNX+RsSWi18mqdQ6WOFnbYHLE/PJU5koJQR8DQ5ZIJZfnWE7Egle04w/9a3Y7
Nq0LKczSHtQm3mizT5yozhMryk64dldH6rVRsNdRNP+qDoBkqP9dNKje5ccQ764u
tQkDFLgrITXKCeX6cofUrISUxuMyXxU1hdMhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUozVG7D5RhR4jAOhnjW3dz+lwpj8wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9velZHN0Q1UmhSNGpBT2hu
alczZHotbHdwajgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAHhd0wI51LLAJvF6lVHLDP4rKcGbYqV2Bz98
XXbMcmDiN/hHaxaHaQnMGtAUOXdv1MZQZTGplnAJePNrjX7e81uEay0+9cJcsqD4
p+8MNsSr+jMCOAHry1FWrTyPkfz73ICBt+IqH0up806/V/bilLMIbimUVoB5f2LH
uFMVGnofRfpSL8+r9t/uxPBVC2sHoo5Yl1jIuZrZukC2v0bfPLfUSusx1ZbcHLk4
xCm+VRX9CDwbkdd5h/j1kwKSJNxjVITC1YhiQIEOTqYs2FJWeD96wp114vLfEoyd
n73dOLgC68sUp0jM1xco2XjYTyEh/vM2jjWUoAaVg5qiT5K9jo0=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:27 2025 by rpki-client