Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/YC1qm1ax3K6NzcJg6GmO5B4d0EM.roa
File: YC1qm1ax3K6NzcJg6GmO5B4d0EM.roa (raw, json)
Hash identifier: 2cvhufvnHSlOYWSd06ZZNoHauLUfJEJ1sVkXJRp4z5I=
Subject key identifier: 60:2D:6A:9B:56:B1:DC:AE:8D:CD:C2:60:E8:69:8E:E4:1E:1D:D0:43
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1BB9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YC1qm1ax3K6NzcJg6GmO5B4d0EM.roa
Signing time: Fri 13 Jun 2025 01:09:51 +0000
ROA not before: Fri 13 Jun 2025 01:09:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7097 (0x1bb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 01:09:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=602D6A9B56B1DCAE8DCDC260E8698EE41E1DD043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:78:45:eb:3f:c5:6e:ee:ca:eb:b1:cd:ab:
22:75:09:ad:a2:f7:40:ff:4d:da:a7:09:03:4e:45:
23:0b:44:d6:99:ac:ee:7f:e9:5d:28:6a:8a:ea:1e:
3d:9b:99:55:27:be:b8:2a:b5:de:ac:06:e5:dc:63:
5e:a5:ae:46:ac:fb:7f:4f:ac:ee:2f:78:e4:66:b3:
2f:44:65:fc:64:a1:60:18:b7:57:19:f2:7d:e2:2e:
94:5f:ed:bc:75:5e:4e:6c:c7:62:56:f1:68:79:87:
90:1d:96:05:e5:3b:b8:8d:67:e7:51:30:be:e9:a4:
c6:6f:96:94:4a:fd:39:6e:12:9f:57:11:1a:21:54:
aa:e9:9d:6f:f6:c7:fb:65:47:c4:bc:12:b2:73:a9:
94:49:24:0e:ac:86:2b:21:44:71:98:3b:f4:93:9f:
1f:89:0a:cc:58:14:d6:c6:1e:13:84:db:e2:b0:8f:
1d:b7:c5:0e:ba:2b:a7:fd:de:56:12:c0:02:60:f8:
90:1b:3b:7a:f7:5b:db:f9:6c:21:16:8d:cf:a6:cc:
ec:07:eb:f1:5f:5c:5b:41:24:ce:ae:ff:09:3d:c8:
c0:ac:6b:80:81:2c:1e:63:e1:a1:01:4e:7e:87:c1:
bf:7e:fa:bd:d7:8e:89:69:96:eb:c7:f8:99:04:7b:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2D:6A:9B:56:B1:DC:AE:8D:CD:C2:60:E8:69:8E:E4:1E:1D:D0:43
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YC1qm1ax3K6NzcJg6GmO5B4d0EM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:2c:82:d8:ed:74:91:0f:7f:d5:cc:df:a7:2c:18:03:df:08:
b4:40:ef:dd:50:88:38:50:d5:0e:f1:44:dc:e8:99:2d:56:bc:
fa:df:e7:9e:33:19:62:71:70:0d:84:49:fa:ba:88:be:53:e5:
d9:87:93:61:71:1c:d3:55:37:e1:ad:23:d9:e6:bd:82:05:96:
66:54:7b:d0:0d:71:77:97:04:ef:df:ea:70:50:b9:a9:e1:1e:
b6:78:d0:fb:b7:00:9d:78:2e:f6:ca:2b:e8:87:63:ac:51:8a:
4e:ed:23:73:64:da:ac:c6:cd:48:d6:94:82:c3:7d:cf:9e:cb:
2d:e9:a9:08:42:8b:59:0e:58:ba:13:f8:50:d7:84:06:e8:9f:
0a:52:d0:35:4a:45:42:58:4c:36:4c:84:97:79:ef:b3:98:71:
13:f2:38:19:28:35:98:a0:f7:13:50:a8:58:51:69:49:28:1c:
52:f4:08:07:3e:ee:80:15:56:ed:4a:1f:cd:64:c2:7f:48:ff:
5a:b5:b9:52:35:9d:c4:7c:c3:e2:c5:81:69:15:64:b8:07:3e:
4e:3b:21:c8:ad:4c:12:a9:9e:98:71:36:d7:84:57:b4:28:8f:
15:b3:4e:6d:e6:0d:32:7d:d5:8d:ef:32:5a:b4:63:3d:5c:b0:
14:c3:29:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:56:41 2025 by rpki-client