Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vd9brsxf7tSw7wGAagBx1sMIB5A.roa
File: vd9brsxf7tSw7wGAagBx1sMIB5A.roa (raw, json)
Hash identifier: KZtBwP4K8brbLxtEEWNxzy6kwbGMDKu9TjW+zfxIqY4=
Subject key identifier: BD:DF:5B:AE:CC:5F:EE:D4:B0:EF:01:80:6A:00:71:D6:C3:08:07:90
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2181
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vd9brsxf7tSw7wGAagBx1sMIB5A.roa
Signing time: Sat 21 Jun 2025 05:41:44 +0000
ROA not before: Sat 21 Jun 2025 05:41:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8577 (0x2181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 21 05:41:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BDDF5BAECC5FEED4B0EF01806A0071D6C3080790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:13:3f:11:0c:8a:8b:c8:39:04:8b:20:87:
25:3e:ac:78:c1:77:c9:ea:5f:70:c7:27:d5:62:a1:
45:05:49:80:af:c2:37:a1:8f:77:22:df:c0:dd:ad:
e7:92:84:3f:e9:f0:04:93:53:1a:c0:18:26:ba:be:
9c:5b:34:a3:d2:2f:aa:d6:d7:28:5a:f5:2b:55:d9:
ab:dc:80:da:c8:6b:b5:35:f3:0a:ee:a1:ff:92:d0:
3a:45:0e:9b:c6:78:a2:38:54:3a:1c:4b:02:85:5c:
96:45:de:34:d3:ce:83:07:8a:18:31:2d:c3:a9:2d:
28:72:f6:9d:41:3c:81:7c:ba:81:d7:9c:86:87:e7:
dc:4b:e0:5e:47:bd:60:e4:f0:23:1d:a2:e6:e5:81:
21:e0:6b:5c:f9:93:27:31:16:9b:c6:5a:8e:c3:c6:
67:76:9a:83:15:9c:13:e6:8f:e7:6f:57:59:03:e6:
b7:05:76:c9:a1:65:c6:94:90:08:32:87:83:8e:81:
16:64:cd:85:c1:7d:6c:c5:b9:b9:2c:8b:5a:c0:8b:
4e:5d:19:1d:2d:2b:dd:88:e2:0b:90:d7:8f:d1:4f:
08:f4:31:03:3f:8c:23:71:4c:2a:fa:e1:0f:59:92:
02:19:72:d2:29:b8:e3:4a:93:9e:48:12:95:12:2e:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DF:5B:AE:CC:5F:EE:D4:B0:EF:01:80:6A:00:71:D6:C3:08:07:90
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vd9brsxf7tSw7wGAagBx1sMIB5A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:b2:ce:4c:1f:ba:6b:c5:c6:90:53:fb:a6:b5:c9:71:23:c1:
71:78:84:94:f0:e0:8f:13:32:c2:71:3a:c2:72:ee:1f:03:72:
dc:c5:3c:b5:da:56:ee:9e:cf:b0:10:81:ba:db:bc:22:2f:bb:
85:c0:cd:56:df:aa:cd:c9:e4:0e:27:b7:36:c4:38:3f:08:a1:
99:67:c7:5c:7f:56:d7:f4:03:ac:78:95:f4:35:a2:30:9f:60:
89:f4:fc:a1:c5:b2:33:2d:20:d8:64:ec:f8:86:b3:99:40:b6:
36:33:19:c7:26:ef:33:de:92:ab:8b:51:a2:d9:15:fc:10:f1:
e3:e8:b9:59:e9:c8:cd:b6:20:d4:08:9c:b0:10:76:c8:ec:ec:
5c:fd:fe:9e:be:fd:f9:de:7e:a6:46:85:c8:84:cd:00:cf:ee:
8d:b4:03:71:18:d8:08:a5:a8:b8:04:e1:d2:cf:a5:99:15:c2:
58:4b:68:54:35:b4:99:39:c0:0f:d8:6d:ab:6f:71:21:13:6e:
90:45:d3:28:c4:76:de:a6:8f:cf:5e:88:dc:07:65:33:f7:09:
5e:13:dc:8a:72:53:4d:1b:a2:22:05:2d:d7:7e:df:83:c2:15:
49:5d:e8:24:9c:36:5a:0f:8d:7b:58:79:09:03:b4:d1:77:7c:
d7:65:80:5c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIYEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MjEw
NTQxNDRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEJEREY1QkFFQ0M1RkVF
RDRCMEVGMDE4MDZBMDA3MUQ2QzMwODA3OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtnxM/EQyKi8g5BIsghyU+rHjBd8nqX3DHJ9VioUUFSYCvwjeh
j3ci38DdreeShD/p8ASTUxrAGCa6vpxbNKPSL6rW1yha9StV2avcgNrIa7U18wru
of+S0DpFDpvGeKI4VDocSwKFXJZF3jTTzoMHihgxLcOpLShy9p1BPIF8uoHXnIaH
59xL4F5HvWDk8CMdoublgSHga1z5kycxFpvGWo7Dxmd2moMVnBPmj+dvV1kD5rcF
dsmhZcaUkAgyh4OOgRZkzYXBfWzFubksi1rAi05dGR0tK92I4guQ14/RTwj0MQM/
jCNxTCr64Q9ZkgIZctIpuONKk55IEpUSLnYTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUvd9brsxf7tSw7wGAagBx1sMIB5AwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni92ZDlicnN4Zjd0U3c3d0dB
YWdCeDFzTUlCNUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAGyyzkwfumvFxpBT+6a1yXEjwXF4hJTw4I8T
MsJxOsJy7h8DctzFPLXaVu6ez7AQgbrbvCIvu4XAzVbfqs3J5A4ntzbEOD8IoZln
x1x/Vtf0A6x4lfQ1ojCfYIn0/KHFsjMtINhk7PiGs5lAtjYzGccm7zPekquLUaLZ
FfwQ8ePouVnpyM22INQInLAQdsjs7Fz9/p6+/fnefqZGhciEzQDP7o20A3EY2Ail
qLgE4dLPpZkVwlhLaFQ1tJk5wA/YbatvcSETbpBF0yjEdt6mj89eiNwHZTP3CV4T
3IpyU00boiIFLdd+34PCFUld6CScNloPjXtYeQkDtNF3fNdlgFw=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:52:10 2025 by rpki-client