Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/GyL7d2voK1aK2lhJsGc9h6w3yO0.roa
File: GyL7d2voK1aK2lhJsGc9h6w3yO0.roa (raw, json)
Hash identifier: RKsg97RV+TsEPCRc1aVvySef6zxlLrI8tjrf6azHCtk=
Subject key identifier: 1B:22:FB:77:6B:E8:2B:56:8A:DA:58:49:B0:67:3D:87:AC:37:C8:ED
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E7D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GyL7d2voK1aK2lhJsGc9h6w3yO0.roa
Signing time: Mon 26 May 2025 09:38:40 +0000
ROA not before: Mon 26 May 2025 09:38:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3709 (0xe7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 09:38:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1B22FB776BE82B568ADA5849B0673D87AC37C8ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:e1:35:eb:c1:aa:df:cd:47:f5:3a:91:fd:
48:6a:f4:b1:6f:8c:63:6d:74:14:df:be:2f:4c:8c:
e9:fe:bd:cb:ba:0f:5e:4a:5c:9f:f7:05:4d:ae:69:
fd:62:93:bd:73:6d:25:ea:e9:86:55:05:c7:ea:0d:
84:95:3c:eb:cc:fb:f5:29:db:4a:e3:9a:4d:a8:6d:
5a:08:b5:a3:dd:e3:cb:72:31:88:c8:05:a2:57:ce:
eb:40:30:71:21:92:3e:e3:4c:82:52:c7:8b:75:75:
4c:4e:0f:e9:fd:59:e5:72:e9:1a:49:a6:74:a4:2b:
6d:28:2e:2c:e9:16:41:1e:b1:a1:8c:f9:4c:78:03:
82:bd:ba:62:72:fe:29:0f:83:d3:43:0e:3c:72:c4:
c4:9c:cf:3f:cc:92:6e:e4:94:a3:10:7e:b0:dd:10:
14:64:db:bb:52:18:90:e2:cb:c8:27:a8:ff:5c:a1:
dc:f8:fa:b8:e3:8c:91:64:ac:46:b0:e6:43:2b:17:
9f:61:af:78:a8:23:0a:88:fd:0e:a1:b4:6e:43:17:
90:ba:a7:1b:3c:78:43:88:b2:cc:22:03:31:ec:88:
49:45:e1:73:72:ac:8e:36:1b:83:a1:3a:d8:68:d2:
18:07:f1:ee:6e:e8:a4:12:e0:03:fc:e4:ba:61:25:
76:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:22:FB:77:6B:E8:2B:56:8A:DA:58:49:B0:67:3D:87:AC:37:C8:ED
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GyL7d2voK1aK2lhJsGc9h6w3yO0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:70:93:9c:4f:bb:3d:50:e6:d1:a8:0d:bd:23:47:7b:d7:ae:
ae:bc:23:87:96:7a:d8:68:a3:7a:05:85:57:7f:20:2f:45:37:
b6:06:61:fe:13:2d:66:85:d2:a2:be:b2:64:d6:25:7a:42:ea:
80:60:26:37:70:ab:02:f6:7e:ec:05:f4:dc:0a:e9:f7:df:fc:
1e:2d:53:94:ae:a3:ff:d3:17:b1:cd:24:ab:cf:3b:8a:f3:cd:
7b:ca:91:ef:bb:12:c4:27:78:50:35:4b:96:98:23:46:61:22:
21:09:73:f6:68:7d:d0:f0:97:d6:12:93:df:cd:18:16:1b:ca:
e2:f8:7f:ef:bd:b7:f3:73:9d:16:31:06:87:eb:99:b6:0f:df:
61:d5:70:c4:26:40:e4:fd:ed:3e:2c:66:9a:06:88:e9:af:88:
23:0b:eb:c5:17:d2:04:1a:3b:2d:f6:91:30:24:55:bd:64:df:
b3:da:58:df:e1:3d:29:cf:59:75:da:16:6f:55:31:fe:2b:8e:
dc:a2:29:d8:4f:cd:08:e6:c7:06:a4:c9:30:2f:65:f1:4a:46:
58:1b:cf:28:0d:db:c8:48:0a:b4:69:20:67:7f:54:86:bd:fc:
48:fe:39:7e:54:76:0c:6b:43:21:40:3a:f2:04:7a:22:c6:53:
ae:85:ab:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:51:55 2025 by rpki-client