Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/yeYxVgrNWwU520yhj9RUXZK_l-Y.roa
File: yeYxVgrNWwU520yhj9RUXZK_l-Y.roa (raw, json)
Hash identifier: YpOamvrgpEyi+fAUJGurulQLIinXETckAoDntWhoqEI=
Subject key identifier: C9:E6:31:56:0A:CD:5B:05:39:DB:4C:A1:8F:D4:54:5D:92:BF:97:E6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 019D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/yeYxVgrNWwU520yhj9RUXZK_l-Y.roa
Signing time: Fri 09 May 2025 05:38:13 +0000
ROA not before: Fri 09 May 2025 05:38:13 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 05:38:13 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C9E631560ACD5B0539DB4CA18FD4545D92BF97E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:49:63:c9:f3:58:d7:b3:1b:7a:2a:b1:33:3a:
ae:b3:e6:94:66:3a:2e:ef:9b:1c:86:7e:bb:4d:b6:
08:78:f0:ee:33:77:e1:cb:66:52:a5:de:98:6c:c2:
a0:5d:58:49:7b:17:c9:c8:48:fc:cc:ae:0f:5e:f2:
fc:39:87:9e:ea:e8:09:0b:67:b4:14:41:f2:0c:82:
32:d2:c0:69:cb:7e:a3:2b:75:16:15:69:f0:bd:bd:
c8:66:0f:dd:d8:e9:d5:39:3f:b2:8e:d6:d4:c8:e9:
c5:25:c9:a3:26:db:02:6d:90:66:d5:c1:f3:8b:5f:
8a:69:a7:e5:de:45:19:1c:02:13:b5:9a:74:de:41:
bc:ba:0f:97:76:b7:83:6c:15:d7:cb:29:46:74:e0:
67:c4:4f:45:f6:09:46:fc:f6:39:a5:25:b9:cd:b1:
a2:8f:3b:e8:15:22:51:07:24:7d:4c:d5:87:69:b6:
67:15:7f:6f:d5:d9:74:85:1d:f8:22:07:fb:03:87:
33:a5:b7:50:e6:83:a4:48:03:16:6d:32:f7:df:80:
01:1e:32:aa:7e:c7:9d:62:99:34:dc:f5:2a:94:4a:
7a:00:69:bd:1c:fe:9f:82:1e:5a:66:b1:ec:6c:90:
de:6f:91:0e:7d:45:45:c6:33:b7:34:48:ad:de:bd:
0a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E6:31:56:0A:CD:5B:05:39:DB:4C:A1:8F:D4:54:5D:92:BF:97:E6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/yeYxVgrNWwU520yhj9RUXZK_l-Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:48:0f:77:ec:68:19:c4:9a:3c:dd:97:8c:c8:e5:3a:9c:85:
ff:bf:76:70:23:99:22:f5:13:0e:6e:6b:d7:08:63:ff:67:42:
d0:cc:da:38:48:f1:05:20:01:54:55:76:dc:81:36:44:e2:6b:
b7:d9:ff:fa:7d:70:7e:db:91:04:9c:c6:7c:9a:86:9b:33:d8:
00:19:ed:6d:47:08:c5:38:fb:02:a7:0d:e0:ef:f3:11:a5:b2:
02:77:f5:b1:f7:2c:12:7d:6d:62:57:5a:13:a7:f9:4c:9b:d5:
1d:7a:f9:57:bb:4a:80:1a:0b:a2:31:4b:a4:a1:1b:5c:a1:1e:
67:5c:4c:ef:ed:21:0e:4e:dc:b4:61:fc:0e:45:f1:b0:10:8c:
99:90:c4:c4:78:8e:c2:b6:2f:c2:30:72:65:7a:90:12:48:80:
21:a2:33:42:c8:c5:4b:ea:aa:59:78:de:e2:39:51:bd:2f:56:
9c:cf:44:3b:4f:22:d6:32:ed:0c:84:21:18:ad:ee:09:c6:ce:
1a:30:7f:27:d4:41:a7:90:ca:30:03:13:5f:f3:ec:6e:82:ce:
15:0a:fd:24:4e:26:23:0a:af:8e:82:32:fc:92:33:db:cc:f7:
c8:92:4d:7e:58:b3:40:ca:16:04:cd:af:7e:de:8c:7f:6a:0f:
e7:25:9d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 16:48:53 2025 by rpki-client