Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/YRxzIqPn7GyZEk4LWz657EXqINw.roa
File: YRxzIqPn7GyZEk4LWz657EXqINw.roa (raw, json)
Hash identifier: e5w+HGu7cI9m5hz7G/gBd8zP4Z0D3/6pdnVXEuReqKY=
Subject key identifier: 61:1C:73:22:A3:E7:EC:6C:99:12:4E:0B:5B:3E:B9:EC:45:EA:20:DC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B85
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YRxzIqPn7GyZEk4LWz657EXqINw.roa
Signing time: Thu 22 May 2025 10:38:35 +0000
ROA not before: Thu 22 May 2025 10:38:35 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2949 (0xb85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 10:38:35 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=611C7322A3E7EC6C99124E0B5B3EB9EC45EA20DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:68:e4:81:bd:2e:92:98:30:18:3f:f8:bc:
09:a3:27:a5:09:2e:ff:a3:c8:f0:0c:be:3a:18:7f:
23:f2:20:88:e3:5d:5b:39:f3:17:bf:08:07:a2:94:
70:bf:b3:fd:55:ec:02:4a:74:a3:07:2f:4a:23:f9:
fb:b6:15:ea:64:cb:0b:80:c3:b6:26:f4:32:3c:0d:
0b:72:aa:7d:43:a2:2f:21:93:72:e4:44:4a:70:b5:
7a:1f:fc:40:58:d8:67:7e:5f:e3:1e:d8:21:f7:3b:
88:55:79:4d:2c:c0:f9:7f:dd:cb:17:ac:6b:a6:a3:
09:ac:38:03:ca:d8:69:21:81:31:fd:1c:f5:7c:8e:
9b:a8:e9:7a:66:93:2a:a7:fb:76:e0:14:fa:50:9a:
21:97:4f:f6:1a:5f:33:59:24:07:1c:ad:ef:4a:3e:
4a:d5:b6:d5:d8:70:d4:6e:1c:11:c2:c8:c9:6a:8b:
1f:4b:00:35:ce:8d:2b:56:48:5c:0e:69:56:54:91:
15:ae:20:e9:ab:20:fe:04:ae:6a:6d:75:2a:1b:0c:
ac:33:0c:e5:43:89:17:25:0c:a3:e1:54:ef:e9:70:
5a:55:e9:ba:28:60:81:22:7d:91:5c:dc:f4:de:58:
29:ff:72:92:b5:ac:14:8f:c4:54:8d:03:61:5e:43:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1C:73:22:A3:E7:EC:6C:99:12:4E:0B:5B:3E:B9:EC:45:EA:20:DC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YRxzIqPn7GyZEk4LWz657EXqINw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:93:9b:03:21:57:f8:ab:60:15:b1:c8:37:06:c6:1e:ed:5c:
bd:91:34:8f:f4:34:3f:41:82:7b:01:10:2e:90:ca:25:10:93:
42:00:78:51:18:a9:86:39:be:0b:55:26:ed:f1:b1:46:a4:5b:
a5:39:e2:14:27:f0:8f:63:f5:b3:67:36:19:65:b1:fd:34:e8:
a5:9d:7c:0c:27:70:01:62:7d:81:7e:95:fc:16:f3:a9:93:82:
10:3e:6e:b7:e3:12:07:74:b4:f8:74:c2:1b:a7:a7:d3:e3:71:
54:19:c0:55:28:f6:63:36:62:73:2f:2d:ff:fa:25:60:60:77:
01:de:62:d9:79:b2:77:db:5f:6f:84:1c:d7:23:5e:b4:ef:62:
58:94:ca:d9:00:37:b4:a8:8b:a2:34:e5:9d:6f:68:de:9f:1c:
76:ed:fd:7a:97:bb:31:d8:59:d1:30:6e:21:25:7c:e4:a2:37:
17:4d:41:9a:6e:c7:4e:71:63:ef:5d:63:06:12:70:38:98:8a:
02:2d:5e:0e:db:4d:e7:5c:3d:0a:32:6c:15:4e:2f:59:ed:80:
3e:2e:76:f4:01:20:68:26:43:c6:3d:58:e0:1b:8a:9a:d5:7f:
f7:f4:49:59:2f:57:94:95:78:ff:05:a8:c4:ef:b5:76:07:5e:
c7:4a:77:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:12:12 2025 by rpki-client