Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/yMibMCsATfuaJrsCVpKPfAxJUVs.roa
File: yMibMCsATfuaJrsCVpKPfAxJUVs.roa (raw, json)
Hash identifier: tbh7I6KV6AJGLG4y4tXCS8rUtvIzZZmogL9vENIDw+g=
Subject key identifier: C8:C8:9B:30:2B:00:4D:FB:9A:26:BB:02:56:92:8F:7C:0C:49:51:5B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1E01
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/yMibMCsATfuaJrsCVpKPfAxJUVs.roa
Signing time: Mon 16 Jun 2025 02:25:30 +0000
ROA not before: Mon 16 Jun 2025 02:25:30 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7681 (0x1e01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 02:25:30 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C8C89B302B004DFB9A26BB0256928F7C0C49515B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:2a:64:a0:09:b1:0b:20:cb:31:7a:77:21:
82:c5:24:0f:b7:f0:e9:38:00:f5:fe:a5:67:3b:49:
b9:82:f8:32:2e:cc:ed:b3:fc:a7:cd:9e:ae:b4:34:
e3:5c:c9:3c:fa:10:65:ec:84:f5:b3:ac:97:0d:1a:
a9:31:b4:30:6f:98:f5:42:e7:2b:66:3b:7e:88:f2:
89:f9:3c:d5:96:82:1a:62:fc:34:51:88:75:cb:ef:
2a:55:b9:13:a3:06:af:f0:81:31:61:00:da:ba:b2:
4c:28:7e:1a:55:5b:77:2b:50:d1:7c:00:b3:e7:4b:
2b:bc:1c:5c:11:ae:48:fd:30:25:f4:ca:a9:30:e3:
8a:d5:95:f9:42:62:90:84:92:bd:d7:b7:0b:6b:c2:
41:f7:6f:ee:8d:0d:44:67:b6:4b:2c:d5:1d:6b:57:
2a:b5:73:c4:50:58:c3:33:01:85:64:73:84:4d:b5:
6d:89:21:2e:af:ec:fd:56:54:b0:8e:1a:97:b4:34:
42:26:12:42:ed:89:53:74:44:f0:8d:3a:92:44:87:
8b:88:06:7a:a8:6b:04:33:79:95:70:de:5c:f6:e8:
08:89:cd:53:f7:14:09:6c:fd:51:24:52:45:af:48:
33:1b:ab:91:08:fc:28:df:55:30:cd:5c:6c:36:98:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C8:9B:30:2B:00:4D:FB:9A:26:BB:02:56:92:8F:7C:0C:49:51:5B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/yMibMCsATfuaJrsCVpKPfAxJUVs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0b:19:9f:5a:8c:b0:22:e2:ea:c1:8f:28:41:54:ff:40:0f:53:
82:09:21:f8:85:47:9a:bf:a8:53:ea:fc:54:62:4b:59:0e:ec:
e9:52:f3:11:e2:08:a2:79:bd:31:4b:c8:5f:82:12:fd:db:15:
ce:e0:af:2d:da:bf:13:1a:f4:49:f0:34:ca:48:ef:98:b9:eb:
b7:c3:ba:c8:99:75:64:4e:85:be:71:ac:b1:6f:26:35:30:5a:
6d:2b:07:55:2c:82:a8:42:a2:c8:13:25:01:13:b6:e2:c4:16:
b3:6c:77:99:05:1d:4c:1c:fd:99:6b:bd:8f:22:f0:e0:af:13:
ef:34:df:bc:d2:a1:f9:fa:18:90:82:dd:f7:9d:8c:c6:25:9f:
33:e0:92:eb:03:8c:05:8b:7d:4e:eb:a5:d2:c9:e7:da:cc:f2:
76:bd:ae:11:39:b5:d9:2f:39:cf:b6:f0:16:f0:08:6b:05:cc:
4d:7a:8e:b1:9c:ab:93:16:c6:13:28:fa:dd:b0:0c:86:3a:ba:
94:6d:eb:d0:bb:37:0c:71:76:3d:54:a9:47:ed:53:45:bb:94:
a3:02:6a:bb:e3:59:38:79:b3:b5:b3:82:b0:39:46:ce:d5:60:
d3:ff:db:71:cf:3f:77:b6:9e:8f:23:1f:56:ac:5c:64:26:64:
c7:33:ce:68
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHgEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTYw
MjI1MzBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEM4Qzg5QjMwMkIwMDRE
RkI5QTI2QkIwMjU2OTI4RjdDMEM0OTUxNUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5hCpkoAmxCyDLMXp3IYLFJA+38Ok4APX+pWc7SbmC+DIuzO2z
/KfNnq60NONcyTz6EGXshPWzrJcNGqkxtDBvmPVC5ytmO36I8on5PNWWghpi/DRR
iHXL7ypVuROjBq/wgTFhANq6skwofhpVW3crUNF8ALPnSyu8HFwRrkj9MCX0yqkw
44rVlflCYpCEkr3XtwtrwkH3b+6NDURntkss1R1rVyq1c8RQWMMzAYVkc4RNtW2J
IS6v7P1WVLCOGpe0NEImEkLtiVN0RPCNOpJEh4uIBnqoawQzeZVw3lz26AiJzVP3
FAls/VEkUkWvSDMbq5EI/CjfVTDNXGw2mA5jAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUyMibMCsATfuaJrsCVpKPfAxJUVswHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni95TWliTUNzQVRmdWFKcnND
VnBLUGZBeEpVVnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAAsZn1qMsCLi6sGPKEFU/0APU4IJIfiFR5q/
qFPq/FRiS1kO7OlS8xHiCKJ5vTFLyF+CEv3bFc7gry3avxMa9EnwNMpI75i567fD
usiZdWROhb5xrLFvJjUwWm0rB1UsgqhCosgTJQETtuLEFrNsd5kFHUwc/ZlrvY8i
8OCvE+8037zSofn6GJCC3fedjMYlnzPgkusDjAWLfU7rpdLJ59rM8na9rhE5tdkv
Oc+28BbwCGsFzE16jrGcq5MWxhMo+t2wDIY6upRt69C7Nwxxdj1UqUftU0W7lKMC
arvjWTh5s7WzgrA5Rs7VYNP/23HPP3e2no8jH1asXGQmZMczzmg=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:37:08 2025 by rpki-client