Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ybfDOmuSSGVpnyZZ2LDcEE8WNLU.roa
File: ybfDOmuSSGVpnyZZ2LDcEE8WNLU.roa (raw, json)
Hash identifier: ur1iooHeoIuS2nDrITf2TNnX0FplJYQKDaX3kFgEuU4=
Subject key identifier: C9:B7:C3:3A:6B:92:48:65:69:9F:26:59:D8:B0:DC:10:4F:16:34:B5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0641
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ybfDOmuSSGVpnyZZ2LDcEE8WNLU.roa
Signing time: Thu 15 May 2025 10:08:01 +0000
ROA not before: Thu 15 May 2025 10:08:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1601 (0x641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 10:08:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C9B7C33A6B924865699F2659D8B0DC104F1634B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:af:b0:7f:17:5c:f8:68:e6:bb:bc:58:df:
f6:e8:62:a8:4e:5e:4a:7e:3c:42:60:fc:79:cc:f5:
db:68:c1:59:71:0a:93:ba:c4:ec:bb:2c:bd:92:79:
77:04:c1:fa:e2:4a:ad:3f:41:17:de:ff:fb:19:7e:
7d:c2:e5:4d:ea:b6:f6:5a:f7:37:1e:08:20:a0:79:
20:49:d0:61:cf:90:58:f5:63:fc:82:51:fd:13:ca:
44:ff:9e:87:58:cb:00:8d:5d:a7:49:f5:5b:95:a3:
b7:c1:64:f2:f2:5a:a9:5c:00:69:5a:42:6f:4e:12:
d2:1a:13:2d:bf:b0:e8:f1:4c:c9:da:a2:37:8f:b7:
d4:d4:9a:0c:41:4a:09:69:b1:42:3f:80:76:80:58:
33:f4:92:39:d4:eb:a8:f2:08:52:f6:dd:63:6d:87:
7e:5c:0b:db:97:3b:a7:2f:38:64:00:d6:d7:2d:93:
9e:d9:a2:cb:b9:e5:01:77:c1:d3:e2:93:4b:3a:1e:
78:d3:3b:46:63:9c:19:fc:c4:b9:3f:a5:b4:df:0d:
54:15:e8:aa:27:44:d1:f2:e1:3f:23:60:3f:c5:a9:
42:30:d6:16:53:82:9d:46:a3:68:50:11:62:2f:3d:
82:61:74:6a:e5:c5:6b:63:29:59:68:dc:83:c0:eb:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B7:C3:3A:6B:92:48:65:69:9F:26:59:D8:B0:DC:10:4F:16:34:B5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ybfDOmuSSGVpnyZZ2LDcEE8WNLU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:7a:de:0b:b5:c0:33:04:fa:05:81:8e:46:38:6c:d5:33:1d:
87:ef:00:02:ee:1d:87:69:54:ea:03:36:ed:b5:d9:65:a1:a4:
52:9b:d4:89:0f:9a:b0:4d:a7:b1:cb:ba:3e:57:9c:a5:75:1f:
af:8f:b7:a2:c0:3f:5e:2f:58:0f:20:b1:82:17:da:7a:f5:24:
a2:75:bb:27:4f:88:80:7d:21:b0:05:52:44:43:92:66:5f:32:
c6:d7:ee:4c:80:8e:9e:25:13:ca:9f:26:88:80:a5:ae:6e:4b:
a9:32:a9:47:76:a0:62:12:30:06:3b:7d:97:9b:94:19:bc:23:
ed:e9:d9:08:00:36:72:62:95:86:22:38:62:3d:8f:8e:3c:e4:
63:52:fc:d5:27:64:df:b1:da:3d:c6:8d:f2:3d:6e:61:40:4a:
a0:da:f3:76:d5:aa:18:80:ac:9b:38:5c:dd:82:c3:34:f4:b3:
4c:8e:d7:b0:c4:e3:09:ca:31:e2:eb:57:12:55:dc:91:ca:24:
82:a3:56:01:64:e9:84:ae:69:13:0f:69:f2:2a:9e:ae:de:b8:
4b:9c:b1:34:fd:de:0f:2a:58:fb:c6:4d:57:47:cd:49:82:56:
a3:c4:ad:07:fd:3c:0c:0a:66:5d:78:ad:2b:6a:6d:f4:fc:0d:
49:4f:d8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:47:42 2025 by rpki-client