Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-uj7elXFb5Nlxdht9B7yomIC5iU.roa
File: -uj7elXFb5Nlxdht9B7yomIC5iU.roa (raw, json)
Hash identifier: kx1lb0pfTv0W+j8VhDeK6RaLj1iNc5XH3S/cTm2cHqg=
Subject key identifier: FA:E8:FB:7A:55:C5:6F:93:65:C5:D8:6D:F4:1E:F2:A2:62:02:E6:25
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 030E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-uj7elXFb5Nlxdht9B7yomIC5iU.roa
Signing time: Sun 11 May 2025 03:37:51 +0000
ROA not before: Sun 11 May 2025 03:37:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 782 (0x30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 03:37:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FAE8FB7A55C56F9365C5D86DF41EF2A26202E625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:9d:ce:98:bb:46:17:3e:4c:a6:79:b7:ee:
e1:d6:75:09:a1:d2:72:26:b7:5f:af:c6:c4:38:18:
ca:6c:07:43:b8:1a:3b:f0:74:6e:9c:b9:2e:74:ba:
19:46:9a:36:09:84:a3:10:69:fd:22:75:2d:86:1f:
0c:43:e0:a7:ad:54:4a:b1:31:e0:c3:85:6b:19:40:
1c:9b:19:95:a7:dc:77:34:bc:04:fc:f6:b3:5b:86:
76:dc:6f:7f:89:c8:66:5e:f5:2d:d7:58:45:e9:e6:
c5:af:d5:dc:d5:d1:47:42:b4:d1:2b:84:68:ce:11:
39:4d:b9:43:69:ad:cb:d6:1c:b1:3e:00:28:85:03:
5a:dd:f9:3e:d0:12:36:de:17:3f:20:38:c1:c1:cf:
87:b0:4e:78:a3:50:ae:09:ae:68:a9:a7:e2:2c:2c:
d6:b2:9a:b4:e1:54:4b:d7:bc:3e:a7:ba:10:3c:fe:
f1:64:3d:5f:d6:1b:b8:b4:73:36:55:05:a1:2b:da:
bf:63:3b:d5:b7:53:41:74:12:f8:48:ae:ce:bf:1d:
15:31:f3:f2:27:b3:0f:a4:c5:cc:43:03:8a:63:ed:
1a:dd:a9:d5:87:28:f2:1e:e4:77:a5:b1:b7:f2:84:
2b:fd:0e:6b:c9:16:cc:72:95:43:7a:75:48:01:e0:
4b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E8:FB:7A:55:C5:6F:93:65:C5:D8:6D:F4:1E:F2:A2:62:02:E6:25
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-uj7elXFb5Nlxdht9B7yomIC5iU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:05:3e:8a:9a:5d:4f:e5:ab:17:c9:fe:68:c9:7e:ea:6f:8c:
ca:8c:bc:19:2f:ab:73:8b:ce:87:a2:5e:cd:c2:85:33:34:00:
c2:9c:c7:95:30:8a:ea:e0:0c:35:95:6a:63:81:ae:b1:c5:6d:
11:f2:2b:75:b1:be:2d:1f:e0:80:a4:69:48:f8:e0:4b:90:3b:
90:63:8b:07:a0:0b:1b:ec:a5:f6:21:c7:0b:31:f3:81:50:48:
c1:9d:76:31:cb:67:ee:cc:d4:47:77:b4:71:40:bf:77:11:04:
f7:fc:4e:d6:00:be:98:41:fe:59:40:20:44:97:ec:72:dc:0b:
fc:47:08:52:fd:3c:ea:26:9a:b8:2f:05:f6:09:51:14:de:02:
db:ff:3a:6e:2e:94:b0:3f:dc:bc:9b:5c:4c:ae:74:67:a3:12:
6f:83:18:ae:70:7a:e7:d6:c1:e8:bd:28:1e:17:c3:47:eb:db:
be:c1:d3:7d:d7:84:04:43:6c:b0:36:19:82:a4:5f:2a:07:ab:
bc:24:88:f6:76:f5:49:9b:7b:b0:49:ad:6c:51:ed:34:f9:9e:
f0:69:f4:4d:d6:d2:c3:69:ab:b5:00:95:45:8c:5a:51:26:f5:
85:1a:a4:cc:06:5b:82:55:1f:8b:47:f7:9f:33:b6:f3:2a:a8:
45:78:73:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:50:49 2025 by rpki-client