Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/yh2RiTpSN70yUQU0qwpiHaQDe88.roa
File: yh2RiTpSN70yUQU0qwpiHaQDe88.roa (raw, json)
Hash identifier: zSdbYhUA8G24u1vhUNVCkpNqqspRKZ97PZAzNjFhJNM=
Subject key identifier: CA:1D:91:89:3A:52:37:BD:32:51:05:34:AB:0A:62:1D:A4:03:7B:CF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0BAD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/yh2RiTpSN70yUQU0qwpiHaQDe88.roa
Signing time: Thu 22 May 2025 15:38:36 +0000
ROA not before: Thu 22 May 2025 15:38:36 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2989 (0xbad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 15:38:36 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CA1D91893A5237BD32510534AB0A621DA4037BCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:66:04:77:cd:99:ef:18:2f:9a:65:76:39:
47:73:cc:ac:62:07:dd:de:f9:58:be:42:cb:da:65:
59:4f:4a:01:96:23:fd:36:07:99:55:88:a8:6e:2a:
d5:1a:b1:e9:3b:b8:a7:5c:d4:27:e1:2f:c2:2f:9e:
9a:91:56:7e:8e:68:e8:f3:66:5d:a7:1b:49:3a:6d:
f2:34:3f:bd:c1:55:0b:91:58:a6:63:47:39:3c:c6:
a9:ce:0a:36:73:0c:25:10:ea:9e:dc:f6:1e:42:21:
79:e5:dd:36:b0:cb:37:14:a8:2d:83:8b:c4:7d:c0:
1d:72:15:60:53:a8:36:f4:5c:30:5b:61:ce:f9:b5:
aa:4f:95:df:36:af:12:14:8b:db:9b:68:b9:17:f1:
cd:43:eb:69:09:8c:64:45:1d:5d:ac:27:5d:c8:ae:
b6:19:56:5f:11:c1:c3:5b:7f:64:10:e3:be:17:4c:
5b:0c:e3:ad:eb:7e:c3:bc:17:ca:34:c8:e0:68:82:
83:49:d8:23:0a:2d:25:31:4b:57:62:62:7f:33:8c:
0a:7c:53:d6:97:df:8e:32:7e:c0:77:39:a1:53:2b:
43:86:16:fe:1b:c7:eb:73:1a:9d:35:29:78:e1:fd:
b1:96:71:78:2c:64:dc:7a:e2:d1:8f:67:65:f1:6e:
b1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1D:91:89:3A:52:37:BD:32:51:05:34:AB:0A:62:1D:A4:03:7B:CF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/yh2RiTpSN70yUQU0qwpiHaQDe88.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:2d:86:7d:77:8e:2b:31:be:d8:d8:d1:a8:08:04:b0:6b:83:
6e:68:a5:cd:ff:44:eb:8c:56:03:70:b8:76:2d:8c:c8:85:3e:
69:7b:f2:a2:f1:9a:00:d5:08:3d:db:f9:b3:02:83:11:f6:14:
7d:18:a3:68:57:39:05:90:2b:34:0c:35:43:b6:99:75:8d:82:
8e:59:7d:50:18:51:f4:ff:d4:9e:e8:72:56:7c:7a:ec:17:79:
69:6d:e7:f1:5e:a8:68:86:40:9a:64:78:0c:79:75:94:05:d9:
8a:77:01:32:e6:8f:92:6f:47:d7:28:82:b1:95:a0:a6:16:df:
bb:d3:62:7a:b7:24:19:b1:22:62:cd:95:d2:ab:fc:fd:b8:ce:
aa:87:cf:c0:11:8e:89:5c:6f:ca:f3:9a:5a:bd:38:e5:9d:94:
89:48:e3:e5:57:c5:86:94:e9:cd:89:47:47:08:fe:72:33:62:
96:0f:6d:30:1a:8a:3a:7b:c5:7f:0c:6d:85:9a:a2:c6:ef:83:
5e:2b:3d:02:07:bc:6f:69:c4:4d:0b:8b:bb:7e:98:94:0b:e3:
d9:0a:e6:3d:2b:7d:86:d5:e3:ad:11:b5:77:14:d4:a9:ec:cc:
8f:2f:79:de:30:50:90:fe:9b:17:30:bc:16:20:8f:06:06:13:
9a:11:cc:ef
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC60wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjIx
NTM4MzZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKENBMUQ5MTg5M0E1MjM3
QkQzMjUxMDUzNEFCMEE2MjFEQTQwMzdCQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDL8WYEd82Z7xgvmmV2OUdzzKxiB93e+Vi+QsvaZVlPSgGWI/02
B5lViKhuKtUasek7uKdc1CfhL8IvnpqRVn6OaOjzZl2nG0k6bfI0P73BVQuRWKZj
Rzk8xqnOCjZzDCUQ6p7c9h5CIXnl3TawyzcUqC2Di8R9wB1yFWBTqDb0XDBbYc75
tapPld82rxIUi9ubaLkX8c1D62kJjGRFHV2sJ13IrrYZVl8RwcNbf2QQ474XTFsM
463rfsO8F8o0yOBogoNJ2CMKLSUxS1diYn8zjAp8U9aX344yfsB3OaFTK0OGFv4b
x+tzGp01KXjh/bGWcXgsZNx64tGPZ2XxbrFpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUyh2RiTpSN70yUQU0qwpiHaQDe88wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni95aDJSaVRwU043MHlVUVUw
cXdwaUhhUURlODgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2cwDQYJKoZIhvcNAQELBQADggEBAFYthn13jisxvtjY0agIBLBrg25opc3/ROuM
VgNwuHYtjMiFPml78qLxmgDVCD3b+bMCgxH2FH0Yo2hXOQWQKzQMNUO2mXWNgo5Z
fVAYUfT/1J7oclZ8euwXeWlt5/FeqGiGQJpkeAx5dZQF2Yp3ATLmj5JvR9cogrGV
oKYW37vTYnq3JBmxImLNldKr/P24zqqHz8ARjolcb8rzmlq9OOWdlIlI4+VXxYaU
6c2JR0cI/nIzYpYPbTAaijp7xX8MbYWaosbvg14rPQIHvG9pxE0Li7t+mJQL49kK
5j0rfYbV460RtXcU1KnszI8ved4wUJD+mxcwvBYgjwYGE5oRzO8=
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:19:07 2025 by rpki-client