Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/GpYH_JBRgkCQGo1_2aN95k0Bgnw.roa
File: GpYH_JBRgkCQGo1_2aN95k0Bgnw.roa (raw, json)
Hash identifier: 3h1TYmqjNeB948/1MKPnu6cnDgXZVkiaEycYt+/hbco=
Subject key identifier: 1A:96:07:FC:90:51:82:40:90:1A:8D:7F:D9:A3:7D:E6:4D:01:82:7C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 20A1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GpYH_JBRgkCQGo1_2aN95k0Bgnw.roa
Signing time: Thu 19 Jun 2025 23:04:28 +0000
ROA not before: Thu 19 Jun 2025 23:04:28 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8353 (0x20a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 23:04:28 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1A9607FC90518240901A8D7FD9A37DE64D01827C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:d7:f0:57:31:cd:84:f5:b9:d8:15:d4:00:
96:37:cc:d7:f5:3e:8b:26:b2:0d:cb:29:8d:94:1f:
d9:0a:f4:a5:69:d5:1b:17:f1:88:2d:a5:88:ee:bf:
aa:ce:d1:aa:46:3b:d3:07:9c:77:b6:a4:e9:9a:3f:
85:a1:e4:47:f7:ba:ab:e0:df:01:ee:9d:f1:0e:fc:
40:82:4d:83:02:77:e0:50:6b:2b:bc:19:41:76:d9:
30:a5:ca:68:2f:77:11:bc:b3:37:d2:66:70:f4:06:
79:22:88:27:cd:c0:5c:b6:e0:1f:49:d5:ab:14:ec:
e6:39:df:b1:67:5c:ee:37:3a:34:1b:2a:c6:2b:79:
cd:61:0a:46:65:67:7d:f9:ea:c3:42:e0:77:91:d7:
fa:55:d9:77:77:5f:0e:fb:04:e2:05:10:81:6d:e6:
da:84:54:0e:f3:ea:d5:f5:b1:1d:79:3e:9d:c8:85:
5c:fb:99:15:56:e8:63:83:e8:e3:36:40:81:5a:ef:
6d:91:79:cd:54:61:58:67:c1:4e:0d:01:c6:78:1e:
87:b5:9b:12:3a:47:f6:bf:ef:a3:3c:1b:2e:e9:25:
e3:73:fe:0c:f6:6a:f0:7c:b7:66:3f:af:c0:ed:92:
53:bd:3e:62:61:96:d8:0c:0c:4a:3a:13:72:e8:89:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:96:07:FC:90:51:82:40:90:1A:8D:7F:D9:A3:7D:E6:4D:01:82:7C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GpYH_JBRgkCQGo1_2aN95k0Bgnw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:70:04:14:8e:66:45:b3:1a:1e:ea:2c:31:f7:ff:71:7d:ca:
fc:98:a8:44:1a:77:45:ba:9d:40:9b:8f:70:23:ed:ea:bf:4a:
9a:d4:05:69:e0:29:93:ec:97:76:ba:8a:75:e5:23:99:bc:f1:
82:e3:09:2c:98:22:80:57:33:d0:5f:2e:85:13:a0:ac:8f:dd:
d2:08:db:69:77:06:16:cf:83:6a:90:08:61:35:07:3e:f7:2c:
53:88:d8:dd:24:2d:0b:44:df:d9:3f:20:ba:a5:e4:fe:b1:ce:
80:e0:67:f1:a5:2e:0e:cc:7e:32:28:c6:67:84:b7:9e:4e:62:
95:8e:46:e1:a4:6b:c7:8d:4e:44:8f:5a:22:e5:59:30:c0:62:
3d:d9:9c:0e:68:08:99:93:0c:55:06:2d:a6:66:29:ea:36:a9:
06:01:a4:5d:55:77:7c:e8:90:85:a5:fd:27:b6:da:e5:11:1b:
23:f8:30:2e:fb:0c:82:87:65:18:42:98:17:1a:77:a0:9c:d8:
12:98:a1:40:7e:57:4b:41:59:b1:a8:85:13:38:d3:45:85:76:
16:92:61:64:c8:9f:7a:b9:5a:7f:a9:5b:17:ef:4c:51:40:ec:
cc:a6:d0:f4:9c:4e:f9:d4:56:41:aa:f5:0e:58:96:1d:98:ba:
35:e6:94:8b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIKEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTky
MzA0MjhaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDFBOTYwN0ZDOTA1MTgy
NDA5MDFBOEQ3RkQ5QTM3REU2NEQwMTgyN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmEdfwVzHNhPW52BXUAJY3zNf1Posmsg3LKY2UH9kK9KVp1RsX
8YgtpYjuv6rO0apGO9MHnHe2pOmaP4Wh5Ef3uqvg3wHunfEO/ECCTYMCd+BQayu8
GUF22TClymgvdxG8szfSZnD0BnkiiCfNwFy24B9J1asU7OY537FnXO43OjQbKsYr
ec1hCkZlZ3356sNC4HeR1/pV2Xd3Xw77BOIFEIFt5tqEVA7z6tX1sR15Pp3IhVz7
mRVW6GOD6OM2QIFa722Rec1UYVhnwU4NAcZ4Hoe1mxI6R/a/76M8Gy7pJeNz/gz2
avB8t2Y/r8DtklO9PmJhltgMDEo6E3LoifIhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUGpYH/JBRgkCQGo1/2aN95k0BgnwwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9HcFlIX0pCUmdrQ1FHbzFf
MmFOOTVrMEJnbncucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBADBwBBSOZkWzGh7qLDH3/3F9yvyYqEQad0W6
nUCbj3Aj7eq/SprUBWngKZPsl3a6inXlI5m88YLjCSyYIoBXM9BfLoUToKyP3dII
22l3BhbPg2qQCGE1Bz73LFOI2N0kLQtE39k/ILql5P6xzoDgZ/GlLg7MfjIoxmeE
t55OYpWORuGka8eNTkSPWiLlWTDAYj3ZnA5oCJmTDFUGLaZmKeo2qQYBpF1Vd3zo
kIWl/Se22uURGyP4MC77DIKHZRhCmBcad6Cc2BKYoUB+V0tBWbGohRM400WFdhaS
YWTIn3q5Wn+pWxfvTFFA7Mym0PScTvnUVkGq9Q5Ylh2YujXmlIs=
-----END CERTIFICATE-----
Generated at Mon Jul 21 03:03:37 2025 by rpki-client