Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/yzZnFjoguq8iA0jN1QUrxMjS7B0.roa
File: yzZnFjoguq8iA0jN1QUrxMjS7B0.roa (raw, json)
Hash identifier: A6w8dHXsgK8rzwlCAhIvLdLWy/msh+w1j8jCQJms9BI=
Subject key identifier: CB:36:67:16:3A:20:BA:AF:22:03:48:CD:D5:05:2B:C4:C8:D2:EC:1D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1EE9
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/yzZnFjoguq8iA0jN1QUrxMjS7B0.roa
Signing time: Tue 17 Jun 2025 07:10:03 +0000
ROA not before: Tue 17 Jun 2025 07:10:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7913 (0x1ee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 07:10:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CB3667163A20BAAF220348CDD5052BC4C8D2EC1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:44:0b:fc:01:84:a3:bd:5a:93:40:b0:5e:
0d:c9:42:1c:29:06:de:2f:ca:86:3f:d5:42:a1:d7:
fb:ea:50:44:7c:3b:f5:f2:c4:8b:6b:54:ae:bf:9e:
24:96:7c:93:94:61:64:5f:68:c7:52:25:a1:b8:d6:
c5:f9:0a:61:ee:08:10:b4:b4:b1:24:06:fb:65:bd:
27:f4:81:6d:2e:46:c9:3a:42:42:05:6f:31:f6:81:
35:96:ca:fc:7d:09:32:ec:e8:dd:0b:f1:92:e1:e9:
fa:b8:7a:32:1e:b0:8a:51:11:a6:be:4f:8a:65:cf:
a9:5d:d4:85:b1:1a:df:41:50:4c:86:15:13:a3:46:
f6:6d:b9:c9:4f:ba:e7:59:10:bc:59:eb:29:27:8a:
c4:8e:db:8c:4e:a3:b7:89:ed:48:8b:79:9f:86:bc:
c0:00:b9:8e:4f:ad:b8:7a:95:72:65:16:81:55:84:
a9:c8:55:c6:bf:db:b3:de:94:99:23:bb:51:f7:6a:
f1:8f:c2:d6:e7:11:89:e3:d6:63:50:04:b5:ee:2b:
11:a4:de:fd:66:30:ae:d6:10:fd:b6:d8:a9:ff:7e:
4c:a1:f8:59:16:d7:2c:72:6d:75:da:91:8d:48:5f:
84:c3:b7:83:2e:22:1f:e5:46:70:c8:2a:ab:f7:d0:
da:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:36:67:16:3A:20:BA:AF:22:03:48:CD:D5:05:2B:C4:C8:D2:EC:1D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/yzZnFjoguq8iA0jN1QUrxMjS7B0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:12:bd:5b:e9:30:f0:c8:ea:f4:ab:cd:c9:2c:5d:e6:ba:37:
84:6f:70:69:a0:ae:49:1b:04:b5:c5:ef:5e:bd:17:b8:4b:c7:
4e:76:24:67:b7:f9:b4:4f:3a:f5:f5:ed:15:11:a2:87:b8:14:
b5:1b:fe:a9:93:be:bb:70:9d:d4:2a:4f:41:3a:ac:83:20:0b:
2e:19:58:2b:94:02:88:16:92:fa:2f:3c:21:82:36:ad:13:12:
ca:3d:9e:f9:e4:dd:07:87:74:5b:40:bb:65:f1:c4:69:ec:c4:
d1:5a:9f:23:e2:e2:91:86:74:c1:09:58:84:9b:5e:fd:91:2a:
4f:13:05:d7:7c:d5:40:6d:e6:ac:4e:b2:2e:4b:a1:8b:fb:29:
69:ef:5c:c3:3f:a8:12:b9:08:45:9d:28:e7:4e:9e:c1:a2:e8:
51:17:f0:3a:8d:e3:36:a8:f9:84:ab:c6:fc:bf:ee:ea:08:8a:
98:3b:19:55:00:aa:d3:24:80:eb:fb:a5:5d:6a:84:7d:2f:85:
fc:05:2e:f1:7e:d6:94:db:65:c8:95:7f:83:df:80:c9:f7:d9:
c7:dd:fe:94:b4:2a:a0:82:b2:c9:03:25:1e:e1:28:a5:a5:b2:
85:dc:40:c6:f6:30:56:e8:61:78:17:01:0d:d5:5e:cf:b2:cd:
76:07:aa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:54:49 2025 by rpki-client