Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Ysk-55hRIWMeyBm6YkJrWMUGOFY.roa
File: Ysk-55hRIWMeyBm6YkJrWMUGOFY.roa (raw, json)
Hash identifier: weNBaki9NMwY3TlOJ9ulwTT67QjYIXf6lHZ8ai9C1C0=
Subject key identifier: 62:C9:3E:E7:98:51:21:63:1E:C8:19:BA:62:42:6B:58:C5:06:38:56
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0381
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ysk-55hRIWMeyBm6YkJrWMUGOFY.roa
Signing time: Sun 11 May 2025 18:07:53 +0000
ROA not before: Sun 11 May 2025 18:07:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897 (0x381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 18:07:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=62C93EE7985121631EC819BA62426B58C5063856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:15:cc:74:2e:29:50:c1:88:72:bf:1e:c0:
71:06:06:22:f1:fb:e8:e6:96:ae:db:67:ab:b7:a7:
5b:fe:67:22:cb:73:2f:0d:23:b4:d9:9a:ee:1c:15:
55:31:49:fb:d9:cf:4a:bc:54:3b:23:95:4f:68:f1:
a2:98:67:84:2d:aa:ac:5f:1b:da:c8:60:eb:08:87:
49:07:20:60:e4:53:90:69:e4:03:e0:47:ad:9e:ba:
52:86:78:bd:24:57:7b:6d:f3:50:43:11:54:5a:3e:
d0:c4:84:94:59:ac:85:27:a8:17:ef:33:f7:7c:44:
f8:c2:9f:8e:cf:5f:9c:33:df:fb:26:20:e7:7f:4c:
8a:35:4b:ec:d9:57:69:0d:d5:79:69:e9:09:f1:2b:
27:2c:bf:e7:5d:53:4c:47:ec:1b:6c:01:cc:08:20:
98:e1:88:45:87:d2:bd:96:cc:71:cf:14:4a:b5:24:
9c:c9:34:22:52:f8:d0:fb:55:86:e1:24:32:ca:e6:
77:f0:56:37:54:a6:a9:16:73:c3:11:48:b9:88:b2:
c5:f3:c3:3a:36:59:99:06:e7:24:9d:8f:05:b0:20:
7a:51:a4:c3:71:1a:6d:3b:91:60:c1:0b:82:a8:70:
61:48:ed:a4:b4:f7:2e:0f:83:d9:bf:11:63:8c:cb:
5a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C9:3E:E7:98:51:21:63:1E:C8:19:BA:62:42:6B:58:C5:06:38:56
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ysk-55hRIWMeyBm6YkJrWMUGOFY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:01:e1:38:4f:c8:c2:60:cd:b5:48:6b:d6:e1:fc:65:e5:d1:
7b:d6:4f:e3:88:89:e1:4a:3a:e3:dd:b6:25:93:89:e3:09:7d:
2f:6d:59:be:08:7e:46:b6:65:60:c3:e5:ac:2d:6c:49:39:93:
e7:25:b3:fd:97:bc:af:d0:64:5a:5a:c9:62:e4:33:13:8a:e7:
a9:c1:db:26:13:14:0a:dd:be:62:ba:90:e0:f7:71:74:3f:d8:
1a:e5:6d:d5:44:df:c8:bc:b2:c7:4d:3c:c9:d1:96:bd:b2:18:
c4:56:3a:84:3f:47:23:e9:af:c3:47:2e:15:26:1d:74:28:ce:
4d:eb:17:f4:ef:f9:44:78:b0:35:72:62:1b:d9:dd:b3:35:1c:
2c:fc:33:3d:51:96:ad:6c:24:af:ea:1a:5e:3f:36:da:46:53:
6b:d8:3e:e7:d4:a5:aa:36:b6:41:91:82:51:00:88:67:4b:e7:
cc:26:a5:a5:eb:02:72:16:b8:43:37:59:33:9f:be:80:ba:45:
8f:d1:eb:75:27:30:b2:67:7a:5c:e3:b9:5a:8b:a0:67:48:2d:
60:ad:b9:93:47:c0:13:01:a6:d3:7d:ab:63:a4:1b:d7:96:55:
9b:19:70:af:46:66:a3:32:fa:8d:73:3f:87:ac:9f:a6:5f:d7:
b1:db:bc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:17:44 2025 by rpki-client