Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/YtS4RPbnWZroBtjFqCAlasRKUSk.roa
File: YtS4RPbnWZroBtjFqCAlasRKUSk.roa (raw, json)
Hash identifier: z80SHG4ta2t2reOrTOtCy6uZEz2dss6vAjoA9Uai34U=
Subject key identifier: 62:D4:B8:44:F6:E7:59:9A:E8:06:D8:C5:A8:20:25:6A:C4:4A:51:29
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1361
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YtS4RPbnWZroBtjFqCAlasRKUSk.roa
Signing time: Sun 01 Jun 2025 22:09:12 +0000
ROA not before: Sun 01 Jun 2025 22:09:12 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4961 (0x1361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 22:09:12 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=62D4B844F6E7599AE806D8C5A820256AC44A5129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:08:c7:cb:3d:f2:18:5a:3f:3d:36:5b:81:8d:
8b:f0:35:74:9c:57:4e:a9:84:3c:ea:d1:68:56:73:
1b:52:41:9e:5c:94:29:d0:ff:75:e0:4a:d4:c9:df:
db:8b:cc:d4:1c:f2:58:e8:d7:81:e2:50:8c:c0:aa:
d4:92:cb:72:10:96:1f:8d:dd:85:39:15:82:c4:85:
72:15:36:ca:8d:55:29:e0:ab:39:37:24:33:4b:d1:
70:e2:43:24:df:49:0b:cb:4f:7b:07:36:ed:fe:98:
2b:14:0b:5b:f6:fc:77:86:71:ef:6c:3a:5c:18:ad:
d2:d4:f9:2a:da:cb:4d:85:7f:e9:36:d4:35:40:73:
13:c7:28:a9:a4:0c:11:bd:55:57:46:77:1b:81:0f:
02:56:27:8b:74:63:9d:d3:7b:cf:f4:29:9e:4a:df:
6d:54:f0:3b:a0:61:1f:2a:25:35:95:36:d6:36:41:
23:95:3c:9d:82:fc:8d:d6:ed:78:e3:7e:b2:89:fd:
03:5a:47:6b:34:64:ce:e8:11:3a:9e:8a:b0:58:fa:
da:80:bf:fb:a5:77:b0:23:c7:8f:2d:45:1a:ae:e0:
e4:56:85:55:c9:8a:e4:bd:78:1f:70:58:c9:ca:9b:
d2:00:df:f8:a2:4b:1e:3c:69:f2:60:11:52:c4:b1:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D4:B8:44:F6:E7:59:9A:E8:06:D8:C5:A8:20:25:6A:C4:4A:51:29
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YtS4RPbnWZroBtjFqCAlasRKUSk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:b6:11:4d:87:4b:a9:f0:71:77:83:be:10:2e:61:8a:eb:92:
2f:d5:bc:11:b0:15:fd:1b:11:6e:85:91:fa:a9:4e:07:cc:b8:
10:d6:ce:c1:ac:64:08:9c:0c:43:f0:bb:81:fe:b7:17:31:ec:
a6:50:ef:53:f9:e1:f4:08:dc:d0:92:ca:38:fa:8d:76:26:7f:
41:80:cc:4f:cb:13:63:25:0d:db:04:0f:90:20:e0:59:c4:d8:
c0:30:a5:7f:aa:17:28:88:4f:79:ed:3b:c8:18:38:20:37:6b:
da:ca:99:f9:40:33:80:13:82:2c:24:1a:94:01:11:2e:78:0d:
83:8a:c6:a1:5c:44:39:fe:4c:33:3d:29:81:e9:e3:7d:d9:43:
4a:e5:cc:93:8c:f1:70:51:16:a8:1d:7c:61:3c:76:d7:17:f7:
81:80:45:c3:6b:60:96:b0:b5:0f:98:6f:b6:ba:b0:7b:9b:68:
01:22:a3:f7:b0:4f:91:f4:e3:fc:d2:c5:40:61:7d:de:de:29:
ba:a0:4d:bc:6b:e4:af:3c:29:5b:13:15:f1:28:3c:9f:0a:83:
b0:00:1e:91:bb:5a:8a:a0:91:2d:9a:fd:eb:79:e1:01:24:5d:
1d:23:83:37:b1:d6:37:f6:6b:ab:fe:f1:1a:60:55:2f:83:e0:
a5:66:53:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 13:39:18 2025 by rpki-client