Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/yDbhGUdktJo3zqEMv7buGIugMVY.roa
File: yDbhGUdktJo3zqEMv7buGIugMVY.roa (raw, json)
Hash identifier: y5XuoeQHpkkKzJu+EGFUZ3HiGMOb0VfnMLBwy4z/gco=
Subject key identifier: C8:36:E1:19:47:64:B4:9A:37:CE:A1:0C:BF:B6:EE:18:8B:A0:31:56
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1259
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/yDbhGUdktJo3zqEMv7buGIugMVY.roa
Signing time: Sat 31 May 2025 13:09:06 +0000
ROA not before: Sat 31 May 2025 13:09:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4697 (0x1259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 31 13:09:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C836E1194764B49A37CEA10CBFB6EE188BA03156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:30:2e:0a:7e:6c:68:e3:87:56:62:1b:70:
a6:c2:11:60:d2:f8:e0:0a:fd:1b:5b:f6:f1:f6:d9:
35:03:fd:5e:3e:19:c2:34:60:b2:16:37:54:a2:cb:
e7:a2:24:59:8b:c0:00:0f:12:5c:bf:f0:19:89:50:
2c:0c:c7:1f:93:07:98:94:db:0e:96:b4:24:75:76:
df:92:d9:41:e2:e2:54:9b:88:59:7d:19:9a:96:c2:
16:92:6d:66:cc:2d:63:36:6e:1a:6c:df:10:4a:01:
e2:5a:7b:f3:4f:78:cb:de:75:30:f7:71:f3:c8:8a:
43:13:10:3b:46:ef:52:49:8d:fa:c1:96:d4:fe:1d:
60:21:33:88:de:49:9d:1f:bb:17:42:df:55:a0:b1:
00:10:67:6d:d9:de:c4:87:15:7f:02:de:04:d7:79:
31:92:e8:71:49:8d:48:c1:4a:ba:48:9c:8f:69:c6:
15:bc:c2:47:ba:83:60:e5:f0:b1:25:a5:66:bb:cb:
81:7a:5f:ed:bf:89:cb:c0:57:43:71:62:66:9a:5b:
5a:5f:e4:9a:77:d7:a7:6f:b2:ba:d8:a3:82:85:aa:
1c:18:02:ab:7a:1f:61:5c:52:63:aa:91:3f:c5:90:
18:1c:0c:4c:b0:a6:d9:e0:5d:b1:96:43:be:9d:7c:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:36:E1:19:47:64:B4:9A:37:CE:A1:0C:BF:B6:EE:18:8B:A0:31:56
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/yDbhGUdktJo3zqEMv7buGIugMVY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:74:dd:9e:be:e7:89:55:1b:b4:44:d3:5d:9b:41:81:03:8c:
1c:60:2c:68:31:25:de:c7:29:09:02:23:78:58:11:2e:e4:bc:
f1:95:bd:ef:c2:48:08:dc:f6:23:e0:35:0d:28:cf:fc:e0:ca:
1b:a7:cf:1f:89:c2:3d:03:47:6d:b4:5a:60:db:57:cd:aa:a9:
b4:f9:43:37:8b:83:de:5d:d8:aa:69:c4:21:1f:56:99:d8:97:
b3:5d:dd:28:96:11:ad:ae:06:5b:f6:77:5a:f9:72:4e:c5:9c:
09:d3:2b:55:fb:df:4b:a7:36:78:db:19:a6:e3:56:c7:f2:ec:
5d:a9:b3:a5:01:e6:f6:62:1b:b5:ea:1b:62:23:ca:54:8e:08:
d9:fd:9b:b0:67:5c:35:80:a6:8c:7a:0b:53:7a:7d:91:eb:47:
67:98:bf:ea:cb:dd:7e:e0:d6:98:29:88:2c:34:2d:cd:bd:6e:
0c:e6:db:ab:6b:1d:73:19:91:36:4c:a8:87:9d:d7:14:74:0f:
f5:aa:4b:d8:55:e2:be:d3:e6:87:0f:3c:4d:37:b9:d8:12:31:
82:45:a3:04:14:a2:67:de:ee:ff:7a:77:79:58:07:18:4c:d5:
ed:ac:9c:f3:66:61:aa:c4:1a:3e:f9:84:e9:27:03:a3:18:03:
69:c7:e6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 23:28:08 2025 by rpki-client