Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/yYhC_QJXzcfAEnhOlSnLlMQZ_Hg.roa
File: yYhC_QJXzcfAEnhOlSnLlMQZ_Hg.roa (raw, json)
Hash identifier: hl/5cdZj7s2Q8YSEQhkGw3o7I/lsAiBkOAjWdI2ZZNc=
Subject key identifier: C9:88:42:FD:02:57:CD:C7:C0:12:78:4E:95:29:CB:94:C4:19:FC:78
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 012D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/yYhC_QJXzcfAEnhOlSnLlMQZ_Hg.roa
Signing time: Thu 08 May 2025 15:37:46 +0000
ROA not before: Thu 08 May 2025 15:37:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 15:37:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C98842FD0257CDC7C012784E9529CB94C419FC78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:3f:e3:4f:a0:36:ab:b6:3a:bd:71:6b:13:
eb:a6:14:7c:f3:3f:5b:ed:bc:c4:2f:84:e8:e5:3d:
cd:f4:df:90:88:d9:d1:7e:9b:f6:29:af:d0:f3:8f:
ff:d3:15:74:97:50:08:78:55:dd:03:6d:50:83:d1:
33:fb:8c:b7:ec:00:c2:45:d4:1b:f0:3a:44:b1:e5:
e8:dd:13:0c:bd:3b:11:0e:14:06:b1:f5:79:e2:67:
e8:bd:66:c3:55:4d:f3:cd:f8:6a:37:23:3a:46:87:
54:9c:b6:b2:29:e7:1a:53:7e:36:e1:3b:17:e3:4e:
31:06:22:e7:04:55:47:a4:de:c1:27:2f:32:81:3d:
0b:59:bf:48:18:eb:2f:18:c4:54:1d:0f:fb:e4:b4:
ce:96:ca:8f:98:94:a5:00:bd:93:41:12:c7:df:22:
12:96:7f:66:64:d6:ec:89:11:3e:c0:c9:50:f3:a4:
2b:9c:21:86:4a:3e:ab:ff:a7:58:13:4f:7a:70:02:
7d:05:1d:7d:21:e0:6f:72:a7:c0:a1:7f:2a:69:0a:
53:98:71:c6:62:f5:bb:8b:1b:a5:47:5c:9a:ff:f7:
cf:a4:95:f3:fa:38:d5:98:e1:a4:7d:ae:1a:43:5b:
8a:94:8e:4b:9b:1c:c7:30:38:73:07:e4:59:7d:e7:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:88:42:FD:02:57:CD:C7:C0:12:78:4E:95:29:CB:94:C4:19:FC:78
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/yYhC_QJXzcfAEnhOlSnLlMQZ_Hg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:3b:b2:83:45:90:e6:9f:e3:42:e3:f5:a4:ab:ab:19:60:32:
df:a1:14:12:16:c0:d2:b0:0c:89:df:38:89:4b:b4:dc:08:d9:
e8:a2:ea:11:85:da:fd:a9:7f:7b:96:4e:a4:70:44:b3:f9:82:
7a:cc:05:ba:7e:e3:9e:2e:7e:4e:55:5f:97:bf:8e:3d:77:b9:
bd:b1:05:82:c6:5e:5d:47:4d:99:fc:1f:85:77:4d:83:08:c3:
3e:46:64:91:ce:bf:4b:80:09:05:9a:2a:39:76:95:b1:b5:2a:
26:e4:fe:71:08:94:d4:c5:5f:0e:c1:e2:81:0a:9e:90:98:54:
1b:71:41:9e:c6:5c:4c:77:40:72:ae:a2:a6:f3:2c:ad:3e:2d:
80:a8:78:eb:cb:e5:a3:d4:bd:dc:da:02:53:d0:c6:67:fb:50:
7e:93:59:6b:45:0f:97:da:1c:9c:b8:ed:b2:ff:2d:70:c0:73:
0e:db:f4:85:3b:f4:0a:15:d1:60:93:52:04:95:f0:34:eb:08:
19:26:54:4f:0f:2e:7a:3e:9d:51:fe:72:96:a4:d7:47:ac:62:
23:2a:76:f2:41:ea:89:92:24:da:93:d3:35:4a:95:9c:e6:95:
0a:44:3b:8a:84:e9:56:31:4e:7b:42:7f:2f:58:9d:1c:84:3f:
87:43:c6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:45:18 2025 by rpki-client