Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/2oacnRokjrPgs0SVzLqMaelbEA4.roa
File: 2oacnRokjrPgs0SVzLqMaelbEA4.roa (raw, json)
Hash identifier: bSp5HESsZwKxDqCuoj7Y2F0sQka0He+XEjl0CK06bIg=
Subject key identifier: DA:86:9C:9D:1A:24:8E:B3:E0:B3:44:95:CC:BA:8C:69:E9:5B:10:0E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0622
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2oacnRokjrPgs0SVzLqMaelbEA4.roa
Signing time: Thu 15 May 2025 06:08:05 +0000
ROA not before: Thu 15 May 2025 06:08:05 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1570 (0x622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 06:08:05 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DA869C9D1A248EB3E0B34495CCBA8C69E95B100E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1e:e7:24:65:e8:b6:f7:e2:1e:f4:f4:66:3c:
00:dd:3c:36:02:ce:a7:7e:cb:54:d3:2c:78:5f:6c:
5f:1a:b2:35:95:b5:92:f7:c8:7c:cf:0e:e7:46:bd:
f5:47:56:c2:ab:bf:a1:6a:26:7e:54:86:4c:bf:14:
b2:b6:81:de:e8:3d:35:6d:e4:05:da:c2:1a:f4:72:
44:24:a9:46:38:f1:6e:78:aa:ed:fc:fe:4d:5c:43:
a6:3e:ff:7c:a1:d5:44:86:bf:ca:43:75:64:ac:07:
4e:88:65:18:fe:8b:38:55:01:a7:0d:42:0a:2c:01:
e2:1e:64:9b:8b:29:8c:78:ae:cc:75:cb:06:4e:e1:
89:0c:68:55:c6:74:9b:49:6d:4e:14:4f:c8:02:40:
f6:e5:5b:f7:d3:c6:07:97:6a:0c:d0:98:88:9d:d1:
f0:74:a9:de:ba:0e:95:21:d3:96:f5:ac:df:82:cc:
ef:4d:72:de:82:c8:19:a1:8e:d7:81:39:f7:67:09:
a3:66:70:98:61:b6:d2:45:8c:21:0b:35:39:1b:83:
9c:a1:68:76:6d:d4:e3:81:ee:47:47:d5:ab:6b:73:
27:23:18:08:91:0e:dc:b6:28:88:b7:e7:23:e8:8c:
aa:b6:51:ca:21:0d:43:be:ee:ca:bf:e2:a7:35:9e:
c1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:86:9C:9D:1A:24:8E:B3:E0:B3:44:95:CC:BA:8C:69:E9:5B:10:0E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2oacnRokjrPgs0SVzLqMaelbEA4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:78:7c:35:36:a8:bd:99:3a:70:60:95:92:40:eb:3b:b7:5f:
ac:6a:d9:f7:16:1a:11:ee:5c:d6:f1:e1:50:18:ef:a5:20:88:
f7:dd:6a:9d:79:cd:ab:6e:69:c7:8c:2a:e8:51:e3:55:49:1b:
58:1e:ea:8c:13:99:bf:84:33:b8:18:b8:d9:1d:5c:1f:6a:99:
eb:0f:5a:94:4a:a1:71:7b:77:69:c3:4c:1c:5e:c1:8b:42:d1:
dd:b7:7b:e3:21:38:86:45:c8:b8:a7:17:59:51:a0:5c:cb:d0:
49:77:2f:7c:ef:88:49:9b:eb:b7:be:9c:25:35:8a:6c:b9:68:
1c:7b:61:22:a3:b1:14:0a:1e:f2:dd:5b:3f:3c:7a:3a:1e:56:
d2:57:de:0b:f1:be:84:e0:44:43:34:71:ec:14:b1:ae:be:6e:
34:ad:63:73:5a:78:54:0f:9f:ac:0d:a6:3b:cb:9d:65:5e:ed:
d1:ad:53:94:bf:8c:7e:18:88:b7:d4:a8:4a:45:d6:19:b1:2e:
01:d8:02:db:60:33:b1:a4:52:08:8b:bc:fe:e7:88:6a:06:2a:
3a:2d:01:02:64:4a:e5:4f:1c:ed:a8:5b:68:92:d3:6f:30:6e:
34:8e:b4:db:60:c4:84:e5:d7:9f:c0:bf:c1:21:45:c5:53:ef:
2c:6b:7d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 13:06:01 2025 by rpki-client