Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/YVh2mv9TiDowQ6Wk6OH3V6Zv3MM.roa
File: YVh2mv9TiDowQ6Wk6OH3V6Zv3MM.roa (raw, json)
Hash identifier: lYr7AF0TN0XGMirl5dZ7jDwxV/5KkLIQE0EgV3Zrr4o=
Subject key identifier: 61:58:76:9A:FF:53:88:3A:30:43:A5:A4:E8:E1:F7:57:A6:6F:DC:C3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 20B5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YVh2mv9TiDowQ6Wk6OH3V6Zv3MM.roa
Signing time: Fri 20 Jun 2025 03:37:08 +0000
ROA not before: Fri 20 Jun 2025 03:37:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8373 (0x20b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 03:37:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6158769AFF53883A3043A5A4E8E1F757A66FDCC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:45:85:7a:50:e5:1f:d8:f1:d5:5e:0c:ec:
bc:8d:3d:b9:41:65:54:df:fb:e4:33:a4:b3:3c:be:
6f:34:72:15:dd:a3:3c:3f:d5:0e:8c:dc:df:b2:4a:
e6:ce:dd:76:2c:18:e0:a3:1f:d9:d8:1a:0b:fc:1c:
74:fd:ca:d1:4b:7d:19:09:06:a5:52:36:ab:6b:4b:
0c:07:44:40:48:15:e8:08:5b:56:d2:42:13:ae:5f:
1e:fc:5c:be:a9:af:52:63:bc:da:c3:27:58:03:38:
4d:37:93:53:b8:5c:e1:37:89:fa:02:04:5f:ad:82:
ce:d6:7e:9d:a0:7d:ca:84:b6:b6:c0:a9:b1:0d:45:
81:9f:a7:dc:e0:ea:ea:e5:b5:7d:2f:03:67:33:c0:
dc:f1:28:42:d7:55:46:0d:bf:a8:54:78:7a:31:f4:
6a:f3:fe:4d:98:e2:4c:88:78:86:b8:64:02:d7:25:
d7:e1:06:8a:c9:cf:38:79:92:7f:d4:7a:da:f3:dd:
fb:f5:9f:62:c4:44:06:e5:64:bc:29:37:df:4b:71:
1c:37:66:80:e4:5a:58:f9:bd:cb:93:fc:78:68:79:
d8:5f:a9:5e:03:cb:62:89:8c:39:eb:e6:11:34:e8:
c5:ec:6d:5b:dd:ad:17:6d:28:af:8c:4d:26:7b:4b:
bc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:58:76:9A:FF:53:88:3A:30:43:A5:A4:E8:E1:F7:57:A6:6F:DC:C3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YVh2mv9TiDowQ6Wk6OH3V6Zv3MM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:88:e3:82:33:57:48:57:89:75:56:3b:18:0b:68:55:a4:a0:
4a:76:70:32:94:a7:b3:c4:b1:07:0d:72:08:88:cb:c2:fa:71:
af:cb:04:5f:3f:e6:78:1e:b7:2d:e3:f5:d8:78:07:ef:df:fa:
ad:9e:8e:f7:80:21:ea:d0:56:7e:e0:ff:56:48:59:d4:d7:ab:
a8:a4:a2:72:9a:6a:9a:3e:d6:b3:03:11:8e:8f:53:97:c6:76:
70:f1:fe:e3:a8:69:53:09:35:ee:c6:d8:95:e8:e5:0e:bc:a5:
d5:5f:b7:73:6d:c4:d1:54:1e:fe:17:e8:92:03:8c:45:bd:01:
9a:49:b0:ba:5e:8b:ab:2a:a4:69:6e:76:88:83:49:dc:28:c9:
e5:80:98:16:51:66:37:3c:7a:f6:24:d1:29:3c:c8:a6:4b:b6:
8a:7d:7d:2c:bd:7a:f3:82:8b:6e:dd:a5:3e:66:a6:b7:a6:c5:
43:62:0f:dd:5b:c2:01:bb:ac:d8:4d:5b:ce:11:a1:c8:56:25:
8b:8c:15:c0:41:d1:1b:58:e9:9e:be:7d:36:02:45:b1:f9:74:
4f:65:1b:a7:ef:27:eb:68:84:a5:e6:9c:ed:0f:ea:03:bd:b5:
5e:af:6d:4b:9f:1f:5f:92:59:3d:dc:7a:3e:4c:fb:d7:14:86:
8c:d5:70:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:42:07 2025 by rpki-client