Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/YGfhFhCv_oIHPnPmapdFhIKrpPc.roa
File: YGfhFhCv_oIHPnPmapdFhIKrpPc.roa (raw, json)
Hash identifier: Nf/PKKgYUEiGVEAovoHUPOPj3jyIcAGS6IDw9kBLN08=
Subject key identifier: 60:67:E1:16:10:AF:FE:82:07:3E:73:E6:6A:97:45:84:82:AB:A4:F7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1C35
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YGfhFhCv_oIHPnPmapdFhIKrpPc.roa
Signing time: Fri 13 Jun 2025 16:40:40 +0000
ROA not before: Fri 13 Jun 2025 16:40:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7221 (0x1c35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 16:40:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6067E11610AFFE82073E73E66A97458482ABA4F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:f5:43:49:2a:11:c3:88:10:19:ca:01:3a:
28:52:82:ac:ec:c2:0e:60:5f:af:07:1f:b9:62:53:
e5:da:23:ca:04:b4:22:70:e1:1b:dc:89:66:69:33:
b7:09:68:11:b5:e7:84:c2:2b:2a:68:7e:dc:fc:db:
c0:a5:4f:14:11:d7:03:ff:94:e5:41:3c:e2:81:88:
1f:16:60:15:7c:e3:52:bc:98:61:a3:bf:fd:6f:ca:
4f:13:50:a2:ae:27:47:d7:b0:f4:aa:c1:9e:46:c3:
41:c4:c0:0f:0e:5f:9a:e4:b4:d3:3b:44:39:36:5a:
9e:e0:cd:d9:d0:f4:64:55:07:81:ad:c3:a2:08:af:
1e:cc:f3:72:ca:5a:79:41:89:84:3c:4c:a9:0f:c3:
b1:8f:65:47:c5:c2:9f:b6:c1:77:1e:31:16:19:d3:
14:2f:24:44:70:f7:26:8b:6a:ca:0e:48:bf:2f:af:
9a:be:10:6c:66:cc:a7:bb:b1:a8:fc:eb:2c:57:52:
48:23:86:4e:69:a9:07:8b:7c:20:33:a7:11:1d:30:
cb:df:db:2a:b8:c8:48:5c:46:51:71:99:fc:f1:6e:
eb:b7:6e:a0:13:53:80:b3:51:d2:63:b4:ee:fe:4e:
df:a1:a5:07:e2:b4:c2:5f:c7:23:5f:b0:ea:1e:cb:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:67:E1:16:10:AF:FE:82:07:3E:73:E6:6A:97:45:84:82:AB:A4:F7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YGfhFhCv_oIHPnPmapdFhIKrpPc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:2b:1d:0a:24:e0:7f:37:f3:ab:5f:2a:05:a3:3d:d7:a9:20:
97:f2:18:5b:7a:90:7b:6f:00:3a:8b:00:cc:e2:43:d8:05:09:
4a:92:0f:c6:6f:f4:77:39:a9:bf:99:67:f8:8d:b4:0c:f7:49:
60:ab:5a:83:b7:f7:d9:56:57:d8:9f:98:ec:ac:3e:4f:61:8f:
b8:fe:f9:3e:df:7e:6d:04:a9:20:8d:b3:df:3f:a4:0d:6d:dc:
0e:7b:8f:40:7e:73:f6:03:92:2c:1b:46:8d:36:d0:4d:41:69:
cc:7c:99:30:75:dc:34:dc:67:49:18:97:ae:58:3e:bc:d2:c6:
89:3f:5e:e8:6d:ae:f2:f1:fc:17:2e:74:8c:5b:d5:43:fd:7a:
69:61:61:b7:77:dc:6f:60:9e:c5:4a:7f:f6:c7:15:11:8c:6c:
d6:a5:a9:1f:c9:8f:8f:2b:59:a3:c9:ed:65:da:8b:f5:93:38:
81:c8:01:09:3e:fa:31:8c:5b:e9:53:cb:bf:fd:53:36:22:c2:
e2:3f:52:fb:29:f9:d8:75:f8:0b:46:d8:a7:3a:60:f8:fe:4c:
fe:2f:3e:b2:54:57:2a:5e:7b:bc:8d:6f:43:fb:61:8d:55:2d:
a1:e1:96:72:a2:b5:7b:2b:1c:03:5b:fe:a8:b0:19:bf:c3:04:
3d:db:db:0d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHDUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTMx
NjQwNDBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDYwNjdFMTE2MTBBRkZF
ODIwNzNFNzNFNjZBOTc0NTg0ODJBQkE0RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOlvVDSSoRw4gQGcoBOihSgqzswg5gX68HH7liU+XaI8oEtCJw
4RvciWZpM7cJaBG154TCKypoftz828ClTxQR1wP/lOVBPOKBiB8WYBV841K8mGGj
v/1vyk8TUKKuJ0fXsPSqwZ5Gw0HEwA8OX5rktNM7RDk2Wp7gzdnQ9GRVB4Gtw6II
rx7M83LKWnlBiYQ8TKkPw7GPZUfFwp+2wXceMRYZ0xQvJERw9yaLasoOSL8vr5q+
EGxmzKe7saj86yxXUkgjhk5pqQeLfCAzpxEdMMvf2yq4yEhcRlFxmfzxbuu3bqAT
U4CzUdJjtO7+Tt+hpQfitMJfxyNfsOoeyz2HAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYGfhFhCv/oIHPnPmapdFhIKrpPcwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9ZR2ZoRmhDdl9vSUhQblBt
YXBkRmhJS3JwUGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAF4rHQok4H8386tfKgWjPdepIJfyGFt6kHtv
ADqLAMziQ9gFCUqSD8Zv9Hc5qb+ZZ/iNtAz3SWCrWoO399lWV9ifmOysPk9hj7j+
+T7ffm0EqSCNs98/pA1t3A57j0B+c/YDkiwbRo020E1Bacx8mTB13DTcZ0kYl65Y
PrzSxok/XuhtrvLx/BcudIxb1UP9emlhYbd33G9gnsVKf/bHFRGMbNalqR/Jj48r
WaPJ7WXai/WTOIHIAQk++jGMW+lTy7/9UzYiwuI/Uvsp+dh1+AtG2Kc6YPj+TP4v
PrJUVypee7yNb0P7YY1VLaHhlnKitXsrHANb/qiwGb/DBD3b2w0=
-----END CERTIFICATE-----
Generated at Sat Jun 21 17:40:51 2025 by rpki-client