Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/2Y_GpofAt5Fh7gqW1E4MMOvmRcE.roa
File: 2Y_GpofAt5Fh7gqW1E4MMOvmRcE.roa (raw, json)
Hash identifier: j7jT+5ziCj/cK5hKk4a/Bxc57k4ybLZFeMUAZ4ojAGw=
Subject key identifier: D9:8F:C6:A6:87:C0:B7:91:61:EE:0A:96:D4:4E:0C:30:EB:E6:45:C1
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 05C5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2Y_GpofAt5Fh7gqW1E4MMOvmRcE.roa
Signing time: Wed 14 May 2025 18:38:02 +0000
ROA not before: Wed 14 May 2025 18:38:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1477 (0x5c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 18:38:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D98FC6A687C0B79161EE0A96D44E0C30EBE645C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:66:98:52:75:a4:37:90:d3:80:6c:52:96:6e:
8b:6a:22:94:bf:0a:5c:05:87:f7:5b:80:f8:4e:e2:
e0:02:07:fb:98:b3:ed:a7:c5:51:cb:10:04:75:d0:
15:f6:dc:c0:04:b4:2a:e2:89:6c:7f:52:cb:fb:4d:
2d:44:92:ce:41:0b:f3:38:c6:4e:b3:0c:01:e1:e7:
00:4a:15:f3:6a:32:d2:73:df:09:56:f6:56:b6:d1:
68:19:8a:40:9b:f2:8b:fb:2e:bd:79:43:1c:6c:9a:
09:de:33:8c:68:a1:94:de:3e:0c:d8:da:bf:f0:27:
af:15:b1:42:f8:b7:fa:73:cd:94:4e:ab:15:d3:ea:
6f:6c:b5:7f:f2:8c:f6:20:55:75:88:14:bf:f6:c3:
dc:e7:f0:70:76:e9:b5:27:9e:81:2f:85:2e:fe:7e:
31:1f:8a:be:98:fe:50:f7:3b:cc:c5:b1:81:92:92:
76:65:63:b9:17:29:75:6d:e0:9b:16:02:6a:e5:d7:
f6:7a:dd:30:19:8d:da:93:b8:4f:29:9b:69:ec:7b:
74:87:89:84:4e:6e:14:71:0a:11:f1:66:84:50:c2:
1b:57:f2:03:98:ee:46:e3:28:de:35:62:da:c7:d8:
b2:2f:87:a3:f5:6f:82:47:c1:d8:04:d7:88:c3:42:
22:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8F:C6:A6:87:C0:B7:91:61:EE:0A:96:D4:4E:0C:30:EB:E6:45:C1
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2Y_GpofAt5Fh7gqW1E4MMOvmRcE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:c6:7f:36:cf:c7:1f:e2:bd:b7:3c:15:b7:b8:65:e6:a8:01:
3a:2a:f5:e5:96:ca:a5:6c:c2:9f:20:ff:7e:3c:4b:a3:4a:b2:
af:be:2a:5b:7b:b8:b6:e6:c7:65:28:64:b7:66:f8:7d:b7:26:
8e:1a:d7:54:05:7c:ff:c1:02:01:82:d9:5f:a9:27:f0:ea:5f:
a9:82:ee:35:0c:d6:d5:c5:5b:aa:0c:3c:f6:07:f1:0e:2f:f6:
4c:7b:ef:e6:23:4a:7c:c8:22:4f:53:c1:90:5b:1a:0c:c1:11:
f4:ae:a5:ca:bf:ed:f0:b0:a6:67:09:b6:51:13:56:4f:db:3c:
00:6a:bd:65:7b:c4:ae:07:71:31:01:f1:cb:a5:f0:84:9f:bb:
45:9c:39:84:c7:f3:82:8b:13:02:3e:37:d8:11:cb:0a:c4:34:
05:51:a4:5d:0e:95:d8:47:26:65:f5:9c:77:a0:a5:69:99:6c:
53:21:7d:85:d9:43:cd:7a:a1:2f:fd:98:ce:f9:ca:47:bc:34:
08:4b:29:7f:eb:c0:8d:70:75:dc:bf:e3:2c:2f:79:a8:34:1a:
9e:a6:0d:2f:ba:25:6e:f9:db:50:16:5d:4f:94:d2:a0:fb:76:
a1:95:53:b4:6b:f8:48:6d:46:a7:71:d4:14:02:4d:18:5c:a2:
c8:6e:ea:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:55:50 2025 by rpki-client