Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/u43ZqODxsGRffDaW6l3Zzk1go3s.roa
File:                     u43ZqODxsGRffDaW6l3Zzk1go3s.roa (raw, json)
Hash identifier:          ypn8wMRi0COYPCKfhBKP7TptrzIEOVGZSvKYhxNdFkg=
Subject key identifier:   BB:8D:D9:A8:E0:F1:B0:64:5F:7C:36:96:EA:5D:D9:CE:4D:60:A3:7B
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       2071
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/u43ZqODxsGRffDaW6l3Zzk1go3s.roa
Signing time:             Thu 19 Jun 2025 15:43:39 +0000
ROA not before:           Thu 19 Jun 2025 15:43:39 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        27.103.0.0/16 maxlen: 16
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8305 (0x2071)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: Jun 19 15:43:39 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=BB8DD9A8E0F1B0645F7C3696EA5DD9CE4D60A37B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:11:0c:e8:ff:7a:18:c0:42:d5:21:54:4c:
                    7c:6d:af:ec:54:95:72:3b:0d:52:c1:1a:90:48:e0:
                    dc:66:2d:a6:4b:e0:9e:36:30:26:b5:80:ee:59:5e:
                    fc:57:0b:24:ff:ca:82:c7:1f:47:57:e1:57:a3:be:
                    7b:7c:32:38:52:06:56:0a:00:21:3d:5d:37:2c:eb:
                    e6:8f:38:22:01:64:c7:3a:0c:98:c4:25:35:d5:9d:
                    1b:b3:4f:59:aa:11:b5:bd:2a:5e:0e:16:cb:f3:22:
                    3b:c0:30:01:79:0c:14:27:d9:96:80:22:ea:54:6b:
                    36:e5:0d:ae:8d:be:41:a8:34:ed:5a:b7:c3:bf:74:
                    a7:08:e8:9e:01:fd:27:28:0c:a1:91:76:0c:5f:57:
                    92:74:5e:06:ca:6e:39:35:e8:62:c1:a2:cd:b9:b4:
                    75:34:1f:23:07:98:65:67:ae:cd:c3:75:69:32:50:
                    9f:89:14:11:a1:41:4a:29:c6:bc:23:07:9b:38:92:
                    cf:00:89:b0:9f:9f:bd:7c:cf:9d:39:f8:12:57:be:
                    80:29:a4:7b:99:b1:5e:0f:2f:93:1d:41:ec:0e:e6:
                    51:a8:b0:bc:bd:74:bf:dc:75:f2:82:8b:89:3e:82:
                    82:4a:70:b7:2c:e1:88:46:49:02:29:bf:be:d7:80:
                    b9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8D:D9:A8:E0:F1:B0:64:5F:7C:36:96:EA:5D:D9:CE:4D:60:A3:7B
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/u43ZqODxsGRffDaW6l3Zzk1go3s.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3c:52:97:1e:fd:30:e9:7b:75:24:96:e5:b8:f0:d3:6f:f2:2f:
         85:10:b4:a8:3d:0d:6d:3d:1e:5b:6e:b3:a3:43:ab:3a:d4:d0:
         da:e4:23:7a:96:b6:3e:20:f0:c1:1a:04:df:18:75:2c:6f:a3:
         86:ac:55:18:5a:e6:da:0b:d6:ca:3c:43:95:ff:7e:d7:11:e7:
         05:73:4f:71:73:f5:57:41:6d:76:34:b9:94:88:7e:1e:6a:c8:
         db:bb:74:7e:28:73:6a:42:a0:e5:a6:d4:87:69:7f:72:e0:54:
         2c:cb:b9:77:e7:84:8a:ea:f4:1f:27:e3:e7:2d:72:e5:f9:c9:
         3d:c1:2b:42:73:76:2d:37:8d:46:94:b1:01:34:2f:4a:37:0c:
         1a:64:1b:ed:0e:bf:8e:12:37:88:7c:f6:69:5e:ef:bb:19:8c:
         d8:e8:dc:11:b8:22:5f:eb:f4:ae:3d:97:aa:bc:a8:83:30:21:
         25:b7:e6:d0:50:69:c7:1c:a4:58:cb:85:3b:f6:7e:c8:6a:85:
         b3:83:b3:ed:86:99:54:1a:63:2b:4a:86:8c:8e:e0:43:6f:52:
         7a:1e:e8:be:1c:3b:50:0e:52:b5:f8:2a:49:02:9c:e8:6b:65:
         38:bd:ce:c6:30:80:e8:e3:9f:64:60:d7:b8:8c:f0:02:80:11:
         0f:59:64:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:48:43 2025 by rpki-client