Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/YpRaBclYAhujLHdH3qao8Yk2_wg.roa
File: YpRaBclYAhujLHdH3qao8Yk2_wg.roa (raw, json)
Hash identifier: I2Lok/7SmKCD3HhCgfZnVttAV6YvzkQqYCUcs19UhKU=
Subject key identifier: 62:94:5A:05:C9:58:02:1B:A3:2C:77:47:DE:A6:A8:F1:89:36:FF:08
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01E5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YpRaBclYAhujLHdH3qao8Yk2_wg.roa
Signing time: Fri 09 May 2025 14:37:47 +0000
ROA not before: Fri 09 May 2025 14:37:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 14:37:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=62945A05C958021BA32C7747DEA6A8F18936FF08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:0a:84:88:ee:3a:23:6f:2e:2a:30:bc:6e:
6b:d6:39:b6:7b:e0:17:21:53:d4:cc:80:48:78:1b:
b4:26:3e:07:11:9e:e0:7a:14:e5:43:00:b6:e7:92:
da:e5:55:88:50:7e:34:f9:6b:1e:4c:e9:3c:c2:41:
bf:e6:8c:1f:7d:e7:93:23:00:84:42:21:49:27:31:
90:3b:41:3c:99:56:d9:6a:98:be:c4:b2:68:59:18:
21:c3:62:c3:0a:09:84:b0:66:a2:14:bb:ca:97:34:
12:d8:34:34:12:ca:61:20:ae:18:03:5a:77:cf:3f:
e2:d0:65:e7:4a:f4:94:6b:ec:e0:40:07:80:c6:c2:
91:45:35:f2:71:83:0e:85:23:26:04:8c:88:75:28:
75:0e:c7:99:f7:6d:5c:4a:8f:3f:76:6f:df:f5:91:
60:af:4c:5c:c4:f4:86:94:9a:56:92:36:5f:a8:54:
82:e7:75:d5:88:d1:0b:db:5c:9f:03:38:ff:0f:a2:
4e:ff:6b:31:d9:d4:40:76:03:ef:6a:e4:05:af:01:
18:ca:2e:3f:0a:b0:4c:6c:31:d1:f4:74:ce:62:a2:
bb:fc:6c:0a:43:cf:d2:ee:12:b3:b7:91:ac:10:ea:
f1:67:bb:48:96:61:b5:c3:cd:e2:d9:7e:8f:f3:d6:
09:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:94:5A:05:C9:58:02:1B:A3:2C:77:47:DE:A6:A8:F1:89:36:FF:08
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YpRaBclYAhujLHdH3qao8Yk2_wg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:6d:f9:e2:6b:b9:e1:69:7f:81:40:d0:82:61:cb:4c:f1:bd:
aa:e4:fe:33:43:01:d7:56:ac:51:8a:79:47:b6:db:22:a4:0b:
c4:8d:c8:e8:71:ba:b2:49:3c:5a:35:70:e9:42:de:f3:b3:4a:
42:63:de:fb:d9:f7:de:3d:9f:d2:60:77:bc:b3:bb:6e:76:b1:
d5:58:b8:8c:f1:b3:fe:c2:49:cf:d6:0a:40:4a:b1:b7:c7:af:
54:be:11:60:f4:a7:92:64:cd:8e:a9:dd:ba:9a:bf:e0:95:2b:
10:2b:61:74:3f:7b:f1:04:7b:44:a5:89:b7:c5:dc:8c:89:06:
30:87:12:a2:66:f6:40:46:ff:f6:0b:b7:6e:99:75:4d:a6:47:
08:ab:0d:12:80:3d:cc:ed:de:71:9d:57:1c:b3:95:6a:58:65:
08:91:6a:71:35:23:8a:b4:86:59:a1:c2:bd:d7:ea:ea:7c:52:
8c:31:14:26:9c:35:d3:d8:83:58:00:b3:71:86:c5:85:27:aa:
6a:a0:e7:3e:bd:fb:26:18:6f:ba:86:44:f7:87:76:78:57:38:
b6:84:bf:df:2a:6d:40:b5:ee:c1:9d:d3:a9:7e:42:61:c9:05:
e8:d3:b1:cd:f0:f2:e6:dc:4b:68:cd:6f:46:42:9e:c2:36:45:
aa:48:1e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:53:13 2025 by rpki-client