Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/YLgG7s1qiqALPl1Yhr6VCYrN9BQ.roa
File: YLgG7s1qiqALPl1Yhr6VCYrN9BQ.roa (raw, json)
Hash identifier: yo/Qw6a9ARJ6RSgIwb+eWFcgBQcMpPsutWyJvF38D1M=
Subject key identifier: 60:B8:06:EE:CD:6A:8A:A0:0B:3E:5D:58:86:BE:95:09:8A:CD:F4:14
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0BE1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YLgG7s1qiqALPl1Yhr6VCYrN9BQ.roa
Signing time: Thu 22 May 2025 22:08:24 +0000
ROA not before: Thu 22 May 2025 22:08:24 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3041 (0xbe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 22:08:24 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=60B806EECD6A8AA00B3E5D5886BE95098ACDF414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:c9:ed:91:2b:7c:c5:9a:4f:5b:88:f0:4e:
03:7e:15:9d:97:c3:81:32:84:67:33:be:56:91:f2:
52:0d:d3:6a:81:a9:34:0d:5a:61:92:b6:aa:9e:78:
14:26:c8:38:97:89:d8:cf:ac:25:9b:21:ea:1d:60:
84:65:b7:5d:b2:8f:c6:97:d3:c9:f7:92:17:b0:22:
34:67:f8:52:04:89:eb:cd:00:14:9f:c6:c9:da:b8:
06:64:fb:94:79:51:1e:2b:ff:c5:9c:4a:39:1d:95:
67:dc:de:07:81:c0:89:bd:d3:7c:01:27:7f:70:fc:
a3:88:6b:7c:09:8c:46:4d:a5:28:bf:1f:39:94:71:
61:75:47:4b:a0:6c:0b:77:c8:73:18:16:70:51:9f:
2d:8a:3c:1b:7e:4a:2a:34:c6:93:38:77:8b:b9:17:
09:d3:b3:1d:6f:fe:37:79:5f:ad:6c:92:25:cd:6f:
68:92:dc:02:c1:5a:5c:18:77:05:17:07:b8:d1:c3:
16:93:d4:cd:fd:44:0a:8d:67:72:08:ac:a8:bb:27:
ff:f5:ec:db:5d:f0:66:3e:8f:05:4d:45:94:d0:0e:
80:6a:0e:51:5b:fd:78:dd:89:ec:ed:2a:18:08:c2:
f5:6f:a1:04:22:b6:a0:ba:85:21:86:c9:ed:b8:6e:
62:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B8:06:EE:CD:6A:8A:A0:0B:3E:5D:58:86:BE:95:09:8A:CD:F4:14
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YLgG7s1qiqALPl1Yhr6VCYrN9BQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:36:04:8d:54:5b:c2:62:8f:4a:4f:43:d3:7a:e6:70:3c:74:
7a:a1:16:59:f6:88:b1:02:a7:0e:08:51:bc:7a:b9:90:ae:7d:
be:83:6e:1a:19:21:d3:e2:1a:74:71:f4:61:8a:55:00:47:94:
a7:1b:70:20:22:df:fc:24:8e:61:c2:f4:f9:9f:d2:50:a0:64:
44:af:fb:8e:9b:7c:9e:0e:9b:91:61:16:32:90:14:82:53:67:
9d:ff:fe:e1:5f:18:c7:01:b3:52:e5:4a:62:c3:e5:c4:69:e0:
9b:a3:3e:3c:b1:a1:a1:cd:56:c5:4b:4e:ab:e6:88:b4:05:18:
a1:04:8f:bc:25:41:97:10:04:c3:6e:c0:ca:11:50:a5:a4:3e:
2a:15:99:5d:53:a6:5d:8a:ee:43:da:04:db:17:5a:ff:6a:46:
87:28:51:4d:77:cc:c5:0e:a5:9f:24:8a:22:8a:31:67:df:6f:
43:b8:08:46:7f:21:21:67:ee:a4:05:19:3a:74:76:c8:c4:bd:
d3:06:5f:14:8e:59:d7:b5:57:d9:15:ea:06:d1:60:a1:80:40:
d7:a0:e2:00:2d:5b:5a:41:ac:86:c0:0b:40:3b:4c:d3:75:6a:
a0:35:b4:30:1c:bc:e1:13:4f:74:a3:33:3d:e8:e4:4d:5e:6b:
47:b9:0a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:39:47 2025 by rpki-client