Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/wzilsmN1HQCgY4AOSHlTBPHWqGY.roa
File: wzilsmN1HQCgY4AOSHlTBPHWqGY.roa (raw, json)
Hash identifier: l3mSW8mw4Wd+T7R2jjaTHLPItNpaovLSKDDklDiOGfw=
Subject key identifier: C3:38:A5:B2:63:75:1D:00:A0:63:80:0E:48:79:53:04:F1:D6:A8:66
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D39
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wzilsmN1HQCgY4AOSHlTBPHWqGY.roa
Signing time: Sat 24 May 2025 17:08:32 +0000
ROA not before: Sat 24 May 2025 17:08:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3385 (0xd39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 17:08:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C338A5B263751D00A063800E48795304F1D6A866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:8a:84:58:18:1a:e1:00:ac:25:66:e7:1b:
1e:69:ec:78:38:91:eb:7c:76:9e:44:9d:c3:50:cf:
44:f0:86:97:90:ca:1a:3c:9b:38:5a:d9:8f:a1:dd:
30:6c:1e:c3:06:62:c9:41:22:8d:c2:09:89:4d:2f:
d9:46:2d:77:d8:d2:52:de:76:5c:c1:c1:fc:17:5d:
c0:00:1f:86:43:0a:c6:e3:6c:30:19:2d:c1:48:cf:
81:3f:58:3d:74:95:8b:61:8d:ff:da:6c:d9:e5:30:
7b:4a:1a:33:1b:34:20:11:a2:50:8d:14:86:53:df:
4b:14:db:05:23:92:c6:3b:2e:b8:9e:0e:df:b2:67:
a3:04:3d:30:82:d0:63:f4:ef:e7:26:4a:d9:69:a4:
bf:3c:f9:86:6a:7c:2b:fd:21:e5:b7:d2:8e:eb:df:
04:36:22:99:7e:c9:6b:7b:17:d9:07:68:6d:6e:e1:
8a:2e:dd:17:a8:46:1a:b7:eb:e6:d7:7e:6e:51:77:
c5:b6:ad:47:6d:8c:c2:61:0a:53:ca:d7:f2:8e:4c:
c5:6c:04:bc:25:6b:46:90:4e:4d:99:7a:34:13:10:
be:44:80:c1:88:3e:22:b1:8c:64:c0:e9:41:42:25:
0e:e5:a3:7d:33:60:52:b4:45:11:11:76:f9:71:e4:
2e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:38:A5:B2:63:75:1D:00:A0:63:80:0E:48:79:53:04:F1:D6:A8:66
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wzilsmN1HQCgY4AOSHlTBPHWqGY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:d7:39:e3:c9:cf:d5:94:d2:4a:c4:f8:fa:a6:1a:1d:81:16:
96:44:61:6e:1a:4a:7d:b7:bb:99:74:a6:af:3d:ef:56:8e:36:
a8:90:a8:61:c7:b6:e0:e8:89:1d:f2:6a:2e:80:cf:97:58:5a:
35:77:5e:f2:1e:e0:dd:4b:02:4c:46:dd:da:44:cd:8f:4e:c3:
fc:2b:2a:17:f3:a2:6e:48:3a:6e:a9:25:2a:02:43:da:81:d0:
2c:27:8b:91:bd:a9:c8:e5:ca:29:c1:df:50:8e:e3:e8:71:f6:
e4:fa:27:55:3e:59:b6:11:b3:39:4f:b0:73:9d:a0:d5:db:a8:
22:ae:53:0d:4e:1e:cc:a4:33:df:6a:39:1f:cb:2f:65:49:22:
aa:d9:ab:63:b1:79:80:57:7d:76:2e:2e:e0:08:f1:b7:71:6d:
f7:8c:33:1b:e7:c3:24:05:c4:98:d7:74:18:1a:17:6a:4d:eb:
f1:29:ec:ef:89:ba:9b:d0:1c:3b:a3:ed:c9:bc:db:09:52:cd:
9b:a7:6c:31:f9:2b:4f:3f:64:24:7e:e3:61:d5:63:cc:2b:32:
be:35:b3:16:c4:d7:9a:56:6d:4a:4d:72:b8:61:21:46:2f:fc:
47:30:f4:b5:c6:68:c4:ca:ba:21:bf:ec:04:82:da:37:71:8a:
e4:1b:36:ee
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDTkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjQx
NzA4MzJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEMzMzhBNUIyNjM3NTFE
MDBBMDYzODAwRTQ4Nzk1MzA0RjFENkE4NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK7YqEWBga4QCsJWbnGx5p7Hg4ket8dp5EncNQz0TwhpeQyho8
mzha2Y+h3TBsHsMGYslBIo3CCYlNL9lGLXfY0lLedlzBwfwXXcAAH4ZDCsbjbDAZ
LcFIz4E/WD10lYthjf/abNnlMHtKGjMbNCARolCNFIZT30sU2wUjksY7LrieDt+y
Z6MEPTCC0GP07+cmStlppL88+YZqfCv9IeW30o7r3wQ2Ipl+yWt7F9kHaG1u4You
3ReoRhq36+bXfm5Rd8W2rUdtjMJhClPK1/KOTMVsBLwla0aQTk2ZejQTEL5EgMGI
PiKxjGTA6UFCJQ7lo30zYFK0RRERdvlx5C6lAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUwzilsmN1HQCgY4AOSHlTBPHWqGYwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni93emlsc21OMUhRQ2dZNEFP
U0hsVEJQSFdxR1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBADvXOePJz9WU0krE+PqmGh2BFpZEYW4aSn23
u5l0pq8971aONqiQqGHHtuDoiR3yai6Az5dYWjV3XvIe4N1LAkxG3dpEzY9Ow/wr
Khfzom5IOm6pJSoCQ9qB0Cwni5G9qcjlyinB31CO4+hx9uT6J1U+WbYRszlPsHOd
oNXbqCKuUw1OHsykM99qOR/LL2VJIqrZq2OxeYBXfXYuLuAI8bdxbfeMMxvnwyQF
xJjXdBgaF2pN6/Ep7O+JupvQHDuj7cm82wlSzZunbDH5K08/ZCR+42HVY8wrMr41
sxbE15pWbUpNcrhhIUYv/Ecw9LXGaMTKuiG/7ASC2jdxiuQbNu4=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:56:53 2025 by rpki-client