Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-qmgPK4lPgKI629lsstoQhEB9ao.roa
File: -qmgPK4lPgKI629lsstoQhEB9ao.roa (raw, json)
Hash identifier: dZ1egBoZDf6P6lljei4cN0GeDjyCAYWNGAxG9ZpQ/8I=
Subject key identifier: FA:A9:A0:3C:AE:25:3E:02:88:EB:6F:65:B2:CB:68:42:11:01:F5:AA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03EA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-qmgPK4lPgKI629lsstoQhEB9ao.roa
Signing time: Mon 12 May 2025 07:07:58 +0000
ROA not before: Mon 12 May 2025 07:07:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1002 (0x3ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 07:07:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FAA9A03CAE253E0288EB6F65B2CB68421101F5AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:03:8c:7a:a8:9e:7e:cc:cf:eb:5b:37:a2:
0e:78:8b:eb:f1:ec:c6:4f:7c:11:0a:80:85:30:ae:
27:f7:3a:7e:98:3d:72:db:a0:26:59:7e:bb:12:0c:
f5:21:ed:87:f5:b6:17:ef:fe:a9:2d:d7:cd:73:ba:
b1:c3:0b:f3:7c:74:24:be:47:52:00:82:01:7c:ba:
93:1f:52:ff:68:c6:0e:a9:f3:bc:da:94:89:78:6e:
a4:05:f5:89:cd:da:24:a2:73:ae:4d:32:73:b3:d7:
1b:13:16:c3:fb:3e:2e:67:30:a1:f5:be:07:56:f1:
f6:a8:7d:02:1e:5e:60:24:bd:6b:51:81:01:3a:c2:
af:99:e5:1f:a4:9e:bf:06:55:4f:64:dc:d5:86:a2:
d3:a0:35:c4:f5:21:ef:03:a3:b7:91:ed:8d:ed:1c:
8c:ea:dd:3f:40:bd:ef:fa:27:82:56:75:77:6b:8d:
51:86:11:65:00:c3:34:a1:74:10:9d:12:09:36:9e:
5f:bf:e9:9f:c2:b9:d9:e1:53:c9:1e:f8:48:fc:e5:
4b:c7:62:9e:cb:c9:aa:e2:95:87:e4:57:19:16:bd:
66:da:39:c4:80:82:e9:f3:9f:31:a8:60:ed:12:a2:
a8:0a:5d:93:24:5f:71:01:95:5d:d4:e4:9c:1b:ca:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A9:A0:3C:AE:25:3E:02:88:EB:6F:65:B2:CB:68:42:11:01:F5:AA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-qmgPK4lPgKI629lsstoQhEB9ao.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:f5:ef:de:4c:dc:ed:27:e7:69:2f:b1:1e:ce:3a:b9:f6:44:
dd:71:65:e6:10:05:cb:fa:cc:41:4f:cf:df:28:95:e7:a8:cf:
2f:d5:7e:3a:42:f3:28:db:e7:56:95:f3:9f:aa:29:7e:df:32:
0a:a4:14:55:18:98:cf:8b:07:67:3f:34:58:f6:e5:32:5f:f0:
86:12:54:23:2a:5c:60:2b:16:ab:f4:ab:3f:c0:7f:b5:22:9a:
2d:7d:fc:e1:15:ed:38:d2:f9:92:eb:63:e9:54:35:56:74:75:
eb:a9:2d:c3:57:4f:5e:16:5e:b2:11:1c:1e:99:1c:c7:38:fa:
d2:b3:a2:f8:72:5f:22:69:03:06:25:05:38:cc:50:52:2f:5f:
81:90:1a:c6:9a:3a:9b:8f:9a:d2:ed:c2:87:a2:8a:a5:4e:86:
e4:c6:d7:5f:ed:20:f0:86:e3:c9:14:db:57:b6:73:e1:75:51:
64:36:e9:6b:6b:70:ae:e5:cf:53:af:20:28:3f:5b:17:51:60:
3c:cc:b5:04:33:14:4b:b8:0d:ac:be:c7:f5:8d:63:4b:cf:51:
f0:81:4b:55:69:a9:08:a5:8c:0d:2b:9a:d4:04:77:f5:05:77:
04:fd:e3:42:e9:71:c0:ed:7c:8b:70:03:28:f7:0a:30:be:77:
96:35:26:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:47:53 2025 by rpki-client