Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/0z3hPRcacfA4dF7w5bBALJkvpbI.roa
File: 0z3hPRcacfA4dF7w5bBALJkvpbI.roa (raw, json)
Hash identifier: +FL9DIn4DkLJSurB5btqh4jAdn7H4qm0J1jfymxW/5A=
Subject key identifier: D3:3D:E1:3D:17:1A:71:F0:38:74:5E:F0:E5:B0:40:2C:99:2F:A5:B2
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03AA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0z3hPRcacfA4dF7w5bBALJkvpbI.roa
Signing time: Sun 11 May 2025 23:07:55 +0000
ROA not before: Sun 11 May 2025 23:07:55 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938 (0x3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 23:07:55 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D33DE13D171A71F038745EF0E5B0402C992FA5B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:d9:99:f9:be:d7:c3:95:b8:5b:96:63:b8:
4b:17:d6:44:1c:f9:79:b2:7c:16:c2:7d:be:6b:31:
07:24:4c:f1:1a:e5:48:89:6b:58:bd:6e:5d:13:58:
26:1b:17:86:6e:00:9d:28:ea:e6:ec:98:da:3f:82:
ab:d6:34:d9:26:5d:9e:85:98:f4:50:26:94:15:db:
f3:80:53:d0:6e:b7:1a:52:0a:f8:83:cc:07:cc:e3:
d7:0b:c7:52:b9:21:b0:da:eb:ee:06:52:32:ed:f7:
5d:29:d9:53:d9:97:e2:e8:a4:87:64:54:6a:cf:ad:
9b:b7:d3:d8:df:e4:f2:f7:b3:a4:7f:8d:3a:35:ac:
d8:e4:c1:ee:f2:9a:6f:a3:ba:af:18:1d:9e:29:0f:
8c:3c:8b:5f:53:40:d8:ab:b6:7a:18:d3:1c:22:11:
ce:48:b9:f1:ab:92:b9:c6:10:9e:5f:0c:a5:f2:cc:
e0:07:60:5d:26:fe:d8:47:4a:7d:9a:43:17:a2:c6:
a9:a3:52:bc:c4:f7:9a:2e:26:b2:ce:ae:7c:b7:ce:
1e:b3:83:0f:12:b8:22:bd:8a:7c:3e:18:ea:a5:a0:
c0:d6:e6:bb:ef:cb:a8:88:1c:0a:b3:b9:97:31:32:
cc:80:eb:52:5b:41:96:b0:c1:54:3a:51:1c:b2:f9:
bc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3D:E1:3D:17:1A:71:F0:38:74:5E:F0:E5:B0:40:2C:99:2F:A5:B2
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0z3hPRcacfA4dF7w5bBALJkvpbI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:6b:a9:0d:bd:cc:5c:d9:ae:c3:5f:0d:c4:c9:87:0f:e7:8c:
ad:30:60:9e:c9:67:b5:65:11:d5:4e:75:55:64:d2:e4:42:fc:
06:e6:ad:5d:f3:07:5f:ea:20:a4:43:c9:e7:8f:5d:37:22:70:
b6:0d:34:b0:4b:a5:c1:b6:37:e7:e5:1d:25:08:ea:80:5b:c8:
4c:39:e0:a6:70:03:d7:7b:d8:a3:a4:90:9c:bc:b4:20:19:75:
4f:c9:94:62:03:7e:bd:53:0b:ee:09:fc:61:e6:b4:7e:69:74:
32:8f:e9:16:7e:ae:27:2e:95:8a:12:e5:3c:34:fe:77:74:a4:
a2:4c:97:3f:bb:6e:ca:15:d9:9c:f8:20:52:c1:dc:62:33:6a:
c4:92:b2:1b:8d:f8:6a:44:b8:18:4c:69:40:32:d9:8b:00:10:
f7:3d:39:34:b9:49:f5:da:b1:ba:ab:48:69:92:1d:59:33:95:
2a:a2:68:60:c2:2f:cd:52:b3:dc:d1:45:51:ff:61:97:f7:38:
38:40:96:19:8a:f3:09:e5:f5:ba:f8:f0:f0:47:ef:29:99:9c:
d5:36:86:0d:86:0b:36:94:c1:01:eb:cf:cc:10:ef:4f:fa:4a:
71:cd:08:dd:f3:81:b2:34:53:db:54:99:81:31:2b:d0:2d:16:
93:fa:a7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:52:46 2025 by rpki-client