Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ywnx4z1UgYsEcNh_vAFWVKK0aLo.roa
File: ywnx4z1UgYsEcNh_vAFWVKK0aLo.roa (raw, json)
Hash identifier: wX/12X2+3bkFLg3AQSbqMy/4IQ9vqyE2gsg4WuauyVc=
Subject key identifier: CB:09:F1:E3:3D:54:81:8B:04:70:D8:7F:BC:01:56:54:A2:B4:68:BA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 23E9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ywnx4z1UgYsEcNh_vAFWVKK0aLo.roa
Signing time: Tue 24 Jun 2025 10:42:04 +0000
ROA not before: Tue 24 Jun 2025 10:42:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9193 (0x23e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 10:42:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CB09F1E33D54818B0470D87FBC015654A2B468BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:08:e6:79:1f:fb:4a:45:5a:a8:1d:9e:d0:
3e:30:d7:21:98:b6:c2:2a:7f:25:00:93:ad:1c:c8:
98:7e:27:ae:6b:3e:bd:cb:fc:21:fa:00:00:3b:52:
9f:2f:51:b5:43:cf:d6:ec:f2:34:4a:84:23:aa:ec:
24:8e:e0:a3:e7:25:4f:38:0f:cd:63:d6:40:2c:0a:
cb:33:ed:57:05:25:b0:c9:c8:ea:14:65:37:7b:36:
c1:bb:8c:f4:d2:23:4e:8d:35:4d:93:e9:13:41:2e:
84:4d:90:cc:2a:0a:90:f4:c4:9c:ee:64:f1:0f:a3:
72:6e:9f:2b:73:75:8e:c4:44:0a:3a:cb:9b:b5:28:
4a:15:a9:65:c9:12:18:04:63:b9:ac:e8:a8:6b:11:
ef:bf:14:cd:60:ac:da:a1:e3:78:ca:33:1b:d4:aa:
48:cc:3e:67:44:84:00:90:24:09:81:81:fe:b8:f3:
44:be:0b:53:29:63:3f:06:98:e5:16:b4:bd:22:10:
cc:92:69:d8:d0:23:b7:4a:c8:55:f1:87:22:28:4e:
92:4e:7a:51:ed:a9:cb:21:66:ce:eb:ae:c6:30:22:
33:8d:53:a4:cf:84:d0:7a:f2:af:e3:98:2d:5e:4a:
bf:f6:45:72:76:25:cb:35:cc:64:0f:1e:2c:3b:06:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:09:F1:E3:3D:54:81:8B:04:70:D8:7F:BC:01:56:54:A2:B4:68:BA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ywnx4z1UgYsEcNh_vAFWVKK0aLo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:18:2d:70:b9:cc:c5:2d:94:2d:e6:9e:76:6a:55:f9:4d:d7:
43:4e:98:2b:64:d6:ea:09:43:dc:95:9d:91:9e:48:11:6f:9d:
4f:e9:f5:0c:3a:01:b5:ca:9c:a1:c9:39:2d:20:b3:26:f0:97:
e8:f4:48:9c:dd:5e:99:b1:e1:f4:de:de:c3:17:59:2a:53:d5:
45:b6:ea:01:fe:e8:70:8b:23:81:a9:67:80:f3:4b:43:cf:c7:
81:b7:da:63:90:8b:62:0d:86:78:38:6a:40:8a:41:f7:ee:5b:
6b:e4:1b:7c:c6:ad:e1:86:f6:6c:f3:32:79:06:84:f0:d6:6c:
28:4d:93:b8:19:8e:a3:66:8a:6c:37:10:dc:31:a0:24:9c:46:
20:83:85:c3:34:09:86:c3:4a:64:21:cf:5a:28:99:e9:c9:ec:
c0:c3:7e:8a:37:8e:b9:a7:5d:30:48:7b:3e:f6:ec:0f:6b:fa:
f6:2d:ac:16:9d:20:05:a9:98:dc:e6:5f:83:54:82:63:64:17:
1d:56:50:9f:52:50:79:bd:25:c6:f0:99:97:8f:f1:5d:6a:91:
db:68:39:5d:04:e3:8a:b9:d5:00:00:15:b9:4a:93:4e:bf:49:
6c:62:b2:42:c6:72:57:67:61:cc:86:93:62:60:2e:6e:52:e4:
01:c9:f2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:33:57 2025 by rpki-client