Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/rjXX7td5cnFxVNWDDognnpF7bF8.roa
File: rjXX7td5cnFxVNWDDognnpF7bF8.roa (raw, json)
Hash identifier: aUz6RUX4iUv1Leu2LSlT1WZsAhlThsUgoV0YYuqabKs=
Subject key identifier: AE:35:D7:EE:D7:79:72:71:71:54:D5:83:0E:88:27:9E:91:7B:6C:5F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01D1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rjXX7td5cnFxVNWDDognnpF7bF8.roa
Signing time: Fri 09 May 2025 12:07:48 +0000
ROA not before: Fri 09 May 2025 12:07:48 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 12:07:48 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AE35D7EED77972717154D5830E88279E917B6C5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:35:5c:a4:e0:0e:37:fa:d2:7b:8f:8d:c9:
2e:81:e7:ae:10:4b:af:81:eb:ce:05:75:00:f2:50:
4d:f9:22:49:ff:06:d6:50:19:d1:cf:4f:84:c9:1f:
3e:4b:80:01:93:9e:b1:2d:03:2e:69:73:25:4f:d6:
8b:0b:9f:ce:6d:45:45:16:80:44:4e:a0:b3:29:08:
5a:d3:07:be:3c:e4:85:b6:d9:d0:fe:6a:64:ed:c1:
18:b9:10:c0:ec:c1:5c:38:96:9f:be:72:8c:c4:cf:
65:2d:eb:50:34:7c:43:a9:59:a4:da:ff:de:f5:99:
cf:78:8d:17:0c:47:77:4d:7f:43:11:c4:c0:c2:f5:
cd:7f:57:31:bb:0f:50:f8:df:71:55:1d:ad:bf:d1:
8b:51:be:ba:4a:fe:74:31:2a:83:dd:0d:1e:44:d7:
5b:2c:cd:4b:0c:cc:25:a5:a1:b0:76:d2:87:17:be:
1d:e2:38:64:98:33:8e:b5:70:64:dc:57:69:4f:1e:
43:f2:e9:02:2c:42:1c:9e:a7:da:60:0c:d2:e4:6a:
63:e6:11:f3:f6:52:09:2d:2b:14:5d:0c:3a:08:a4:
ff:3b:57:c0:27:b7:e0:b6:83:b1:72:52:b6:6f:f2:
b1:7c:d9:36:1c:c0:ca:d6:a0:91:a4:95:d6:87:a7:
e9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:35:D7:EE:D7:79:72:71:71:54:D5:83:0E:88:27:9E:91:7B:6C:5F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rjXX7td5cnFxVNWDDognnpF7bF8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:c2:dc:6e:d6:32:a3:8a:09:ef:a0:5c:68:85:5b:91:c7:a9:
0c:74:37:93:de:a3:93:c1:12:6f:22:68:14:63:ec:11:03:1b:
f0:a7:5b:aa:e5:d7:8e:20:31:ae:02:f5:f2:bc:fc:67:1d:1d:
20:1a:c7:68:c1:e5:4d:70:68:e9:35:59:1d:7a:76:e5:61:80:
3d:19:57:60:4f:23:6a:b9:b2:53:87:58:11:07:7d:90:f7:6d:
40:e4:f7:99:45:17:eb:27:48:8f:df:6b:e2:00:16:de:11:1b:
87:3a:f2:d1:0f:cf:38:29:02:0d:d9:dd:66:ca:63:70:69:53:
65:40:9b:46:6e:69:43:c0:e9:73:2b:17:46:f5:ed:14:a6:7f:
05:55:72:f1:a6:cf:e1:b7:7d:93:1b:df:63:b1:66:c9:be:87:
41:be:4f:a8:5d:79:bc:ae:6f:87:e8:6c:9e:13:6d:21:7b:d0:
fd:66:d3:5f:6a:72:d1:84:fd:8e:ee:83:25:31:65:f1:38:24:
40:e8:e4:f6:37:9b:1c:6e:f2:b9:d5:50:bd:01:58:46:3c:93:
c0:42:cc:78:12:e2:2e:ab:80:ff:e1:2f:98:0a:f4:f9:ab:fb:
4f:95:e3:8d:99:c2:54:cd:e9:c7:1f:c3:80:cf:80:b2:57:7d:
c4:ed:c6:bc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDkx
MjA3NDhaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEFFMzVEN0VFRDc3OTcy
NzE3MTU0RDU4MzBFODgyNzlFOTE3QjZDNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUmzVcpOAON/rSe4+NyS6B564QS6+B684FdQDyUE35Ikn/BtZQ
GdHPT4TJHz5LgAGTnrEtAy5pcyVP1osLn85tRUUWgEROoLMpCFrTB7485IW22dD+
amTtwRi5EMDswVw4lp++cozEz2Ut61A0fEOpWaTa/971mc94jRcMR3dNf0MRxMDC
9c1/VzG7D1D433FVHa2/0YtRvrpK/nQxKoPdDR5E11sszUsMzCWlobB20ocXvh3i
OGSYM461cGTcV2lPHkPy6QIsQhyep9pgDNLkamPmEfP2UgktKxRdDDoIpP87V8An
t+C2g7FyUrZv8rF82TYcwMrWoJGkldaHp+nXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrjXX7td5cnFxVNWDDognnpF7bF8wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9yalhYN3RkNWNuRnhWTldE
RG9nbm5wRjdiRjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBADTC3G7WMqOKCe+gXGiFW5HHqQx0N5Peo5PB
Em8iaBRj7BEDG/CnW6rl144gMa4C9fK8/GcdHSAax2jB5U1waOk1WR16duVhgD0Z
V2BPI2q5slOHWBEHfZD3bUDk95lFF+snSI/fa+IAFt4RG4c68tEPzzgpAg3Z3WbK
Y3BpU2VAm0ZuaUPA6XMrF0b17RSmfwVVcvGmz+G3fZMb32OxZsm+h0G+T6hdebyu
b4fobJ4TbSF70P1m019qctGE/Y7ugyUxZfE4JEDo5PY3mxxu8rnVUL0BWEY8k8BC
zHgS4i6rgP/hL5gK9Pmr+0+V442ZwlTN6ccfw4DPgLJXfcTtxrw=
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:04:06 2025 by rpki-client