Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/y8EPEMlVceq7LtqQn_7czNEyyHc.roa
File: y8EPEMlVceq7LtqQn_7czNEyyHc.roa (raw, json)
Hash identifier: IgGDOfeN4r8QrDpJ2R5LRh9851YH6mX9sx9DxSguPts=
Subject key identifier: CB:C1:0F:10:C9:55:71:EA:BB:2E:DA:90:9F:FE:DC:CC:D1:32:C8:77
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 12DD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/y8EPEMlVceq7LtqQn_7czNEyyHc.roa
Signing time: Sun 01 Jun 2025 05:39:10 +0000
ROA not before: Sun 01 Jun 2025 05:39:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4829 (0x12dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 05:39:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CBC10F10C95571EABB2EDA909FFEDCCCD132C877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:6e:66:fb:e7:25:15:83:ca:72:da:95:82:
95:55:6a:80:51:03:34:bf:26:12:91:58:ae:ff:a1:
a3:e8:f6:bb:ca:a6:e1:e0:7f:e3:46:25:84:a9:ac:
3d:9a:70:60:01:fc:f6:25:a0:82:e3:b5:c6:ce:99:
f2:d8:f1:0e:e7:e5:39:73:62:61:b8:25:be:23:c3:
9b:9d:52:96:ca:7f:38:77:11:82:b4:9d:fd:f4:0e:
56:b7:8d:10:dc:06:00:7f:96:05:cd:8f:17:5a:22:
b5:5a:2d:c9:fd:ba:e2:c8:96:af:95:69:9d:01:38:
5b:a1:b9:1b:6f:f5:4a:86:fd:34:93:f9:5f:25:e1:
ee:5f:20:29:42:b2:ea:cf:2f:c2:a8:dd:7e:33:f1:
02:cf:ad:22:67:7e:79:17:e8:85:a3:fa:ba:5c:f2:
c8:73:8d:e1:dd:0d:cc:7f:1d:98:3f:cc:45:22:3f:
21:cf:51:99:69:72:1a:88:ad:05:2a:70:bb:09:53:
3c:6a:fe:70:33:51:f3:ea:fb:06:92:be:01:12:24:
63:3f:bd:d7:f8:70:68:19:c6:60:2b:8f:41:6b:75:
27:a3:32:a1:a6:68:9a:6e:14:92:d2:bb:0e:b7:73:
37:46:af:0c:9d:00:63:f1:c0:ca:b7:cd:60:8b:2a:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C1:0F:10:C9:55:71:EA:BB:2E:DA:90:9F:FE:DC:CC:D1:32:C8:77
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/y8EPEMlVceq7LtqQn_7czNEyyHc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:9a:1c:bb:7a:f3:ac:f6:60:1c:d4:9d:e7:a4:63:6f:96:19:
44:20:fd:88:3d:dd:b2:d4:14:40:7f:06:3f:af:f6:1a:91:9b:
4e:47:d9:01:59:1a:29:57:0f:be:2a:3d:43:70:6c:5c:49:6c:
f5:1d:c2:e5:3e:cd:cd:3c:86:64:f5:8c:9b:e0:ad:41:bb:e9:
12:e6:ef:4d:39:9b:da:92:a7:52:cf:db:56:9b:f2:a5:19:3e:
95:fa:a9:67:3e:9a:7c:f8:1e:ee:7d:11:5a:d1:51:f3:de:e9:
04:da:c9:2a:fc:fd:ed:d9:05:a7:36:d4:5f:60:fb:b7:7e:f5:
1d:06:84:7e:5b:00:c1:7c:23:b6:3c:3f:2b:c1:cc:b4:8c:a6:
29:da:43:de:1c:5a:90:70:a4:3f:86:76:c1:29:9a:56:13:47:
7f:4d:d5:c3:f7:40:17:4d:de:2d:41:14:c8:23:5e:52:f9:8a:
68:fb:0a:66:d6:be:55:08:64:b6:19:cc:8f:e5:70:7f:28:a5:
14:95:8b:9a:57:78:2e:bf:55:97:f4:e5:00:b9:e6:cb:fa:ef:
1b:f0:45:21:cc:33:f4:97:df:e8:49:86:46:fc:00:9d:f8:a4:
66:58:fa:26:cd:dc:4b:80:5e:78:e9:2d:7d:33:b3:80:b8:1a:
b9:1c:4f:73
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEt0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDEw
NTM5MTBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKENCQzEwRjEwQzk1NTcx
RUFCQjJFREE5MDlGRkVEQ0NDRDEzMkM4NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfum5m++clFYPKctqVgpVVaoBRAzS/JhKRWK7/oaPo9rvKpuHg
f+NGJYSprD2acGAB/PYloILjtcbOmfLY8Q7n5TlzYmG4Jb4jw5udUpbKfzh3EYK0
nf30Dla3jRDcBgB/lgXNjxdaIrVaLcn9uuLIlq+VaZ0BOFuhuRtv9UqG/TST+V8l
4e5fIClCsurPL8Ko3X4z8QLPrSJnfnkX6IWj+rpc8shzjeHdDcx/HZg/zEUiPyHP
UZlpchqIrQUqcLsJUzxq/nAzUfPq+waSvgESJGM/vdf4cGgZxmArj0FrdSejMqGm
aJpuFJLSuw63czdGrwydAGPxwMq3zWCLKrMlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUy8EPEMlVceq7LtqQn/7czNEyyHcwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni95OEVQRU1sVmNlcTdMdHFR
bl83Y3pORXl5SGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAIGaHLt686z2YBzUneekY2+WGUQg/Yg93bLU
FEB/Bj+v9hqRm05H2QFZGilXD74qPUNwbFxJbPUdwuU+zc08hmT1jJvgrUG76RLm
7005m9qSp1LP21ab8qUZPpX6qWc+mnz4Hu59EVrRUfPe6QTaySr8/e3ZBac21F9g
+7d+9R0GhH5bAMF8I7Y8PyvBzLSMpinaQ94cWpBwpD+GdsEpmlYTR39N1cP3QBdN
3i1BFMgjXlL5imj7CmbWvlUIZLYZzI/lcH8opRSVi5pXeC6/VZf05QC55sv67xvw
RSHMM/SX3+hJhkb8AJ34pGZY+ibN3EuAXnjpLX0zs4C4GrkcT3M=
-----END CERTIFICATE-----
Generated at Sat Jun 21 16:55:11 2025 by rpki-client