Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/qtC96UeFHT2SEsNtMmNquqXdnoE.roa
File: qtC96UeFHT2SEsNtMmNquqXdnoE.roa (raw, json)
Hash identifier: slOWaXZOfXMfqGJFfzEg2sJKN2lY4xOftQIPn6YOpis=
Subject key identifier: AA:D0:BD:E9:47:85:1D:3D:92:12:C3:6D:32:63:6A:BA:A5:DD:9E:81
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1AA9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qtC96UeFHT2SEsNtMmNquqXdnoE.roa
Signing time: Wed 11 Jun 2025 15:09:56 +0000
ROA not before: Wed 11 Jun 2025 15:09:56 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6825 (0x1aa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 15:09:56 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AAD0BDE947851D3D9212C36D32636ABAA5DD9E81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:7e:d1:c1:2f:18:4d:77:9b:2a:4f:7f:34:
6a:e7:0e:d6:37:d1:f2:b1:e7:e3:1b:64:ae:cf:42:
c4:93:95:0e:5c:68:91:af:63:98:49:dd:b0:f6:22:
5e:bd:7f:6c:49:82:e7:49:8c:ed:b6:71:0a:df:0e:
42:36:11:65:af:80:b5:84:1f:e4:43:20:67:1f:97:
f1:c6:63:af:31:f6:70:fa:b6:9d:80:69:42:a9:b6:
d8:f8:0c:d1:0a:c9:42:66:16:7f:86:e1:be:4f:a0:
ed:78:41:6f:3e:38:29:75:f8:08:64:a2:14:08:0e:
bf:cd:ba:d6:36:35:38:5e:54:70:c6:aa:ee:c8:15:
3b:16:8d:4f:cb:f7:78:15:45:66:62:97:60:74:c6:
08:ef:d1:9a:02:ef:4f:cd:f0:d6:c9:3d:fe:12:eb:
9d:5a:ca:2c:85:ea:7b:0b:19:5f:1b:74:c7:8c:df:
65:11:3a:a2:db:88:0f:9b:fe:ae:2d:32:9e:b5:4a:
a2:3a:9a:b7:87:f9:ad:31:de:9f:81:b6:04:a9:0f:
b3:07:fc:15:68:ce:96:4a:30:6c:84:90:b5:bf:61:
9a:2a:f1:39:99:0f:1a:66:17:1b:1b:28:d8:ce:2f:
9c:38:e6:f4:0f:7f:b4:58:00:ff:8a:80:28:d2:1a:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D0:BD:E9:47:85:1D:3D:92:12:C3:6D:32:63:6A:BA:A5:DD:9E:81
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/qtC96UeFHT2SEsNtMmNquqXdnoE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:4e:81:79:fc:e0:24:85:f0:63:96:72:8f:4c:47:b9:ab:9e:
f5:25:46:02:91:3f:da:1d:a4:32:1d:6a:38:3b:44:30:ec:16:
b7:61:ca:9e:20:8f:f5:80:f1:98:11:c7:a5:38:5b:f5:44:09:
ff:db:54:56:c4:b4:31:d9:cf:7d:cc:cc:77:cc:94:28:69:24:
76:b9:53:50:58:c3:da:75:cb:27:24:f1:5f:87:b7:f3:57:2e:
4f:a9:66:3a:df:80:45:f4:42:bd:9e:0b:7d:72:a0:a2:aa:a7:
c6:f5:17:21:1f:14:e7:68:cf:a1:28:d4:ae:51:6f:e2:9d:3f:
3d:8a:cb:48:51:3a:89:fa:9c:1b:a5:e7:cf:e4:0e:54:6c:07:
1d:dc:65:a1:31:79:be:b5:87:7d:1e:b8:7c:5e:fa:27:66:c5:
bf:ab:1e:50:2f:9f:fe:e3:3c:33:c5:e8:0c:32:dd:7a:6c:33:
f8:5b:fa:d7:21:c3:b8:20:12:f1:87:86:6a:9a:d2:31:b9:70:
4f:f8:9a:44:39:32:78:63:d7:b8:08:90:3f:9c:63:a2:64:66:
71:0c:b8:ed:98:61:3d:f8:18:7b:28:92:ad:71:31:13:67:57:
f4:18:a2:29:8c:82:15:f3:b3:7b:af:3c:14:08:d4:ce:61:49:
2a:db:67:91
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGqkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTEx
NTA5NTZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEFBRDBCREU5NDc4NTFE
M0Q5MjEyQzM2RDMyNjM2QUJBQTVERDlFODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8c37RwS8YTXebKk9/NGrnDtY30fKx5+MbZK7PQsSTlQ5caJGv
Y5hJ3bD2Il69f2xJgudJjO22cQrfDkI2EWWvgLWEH+RDIGcfl/HGY68x9nD6tp2A
aUKpttj4DNEKyUJmFn+G4b5PoO14QW8+OCl1+AhkohQIDr/NutY2NTheVHDGqu7I
FTsWjU/L93gVRWZil2B0xgjv0ZoC70/N8NbJPf4S651ayiyF6nsLGV8bdMeM32UR
OqLbiA+b/q4tMp61SqI6mreH+a0x3p+BtgSpD7MH/BVozpZKMGyEkLW/YZoq8TmZ
DxpmFxsbKNjOL5w45vQPf7RYAP+KgCjSGssDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUqtC96UeFHT2SEsNtMmNquqXdnoEwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9xdEM5NlVlRkhUMlNFc050
TW1OcXVxWGRub0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAFtOgXn84CSF8GOWco9MR7mrnvUlRgKRP9od
pDIdajg7RDDsFrdhyp4gj/WA8ZgRx6U4W/VECf/bVFbEtDHZz33MzHfMlChpJHa5
U1BYw9p1yyck8V+Ht/NXLk+pZjrfgEX0Qr2eC31yoKKqp8b1FyEfFOdoz6Eo1K5R
b+KdPz2Ky0hROon6nBul58/kDlRsBx3cZaExeb61h30euHxe+idmxb+rHlAvn/7j
PDPF6Awy3XpsM/hb+tchw7ggEvGHhmqa0jG5cE/4mkQ5Mnhj17gIkD+cY6JkZnEM
uO2YYT34GHsokq1xMRNnV/QYoimMghXzs3uvPBQI1M5hSSrbZ5E=
-----END CERTIFICATE-----
Generated at Sun Jul 20 21:20:57 2025 by rpki-client