Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/3NHjfJ7R8xkhDav7g5BPiKtmKS8.roa
File: 3NHjfJ7R8xkhDav7g5BPiKtmKS8.roa (raw, json)
Hash identifier: 3WUOz2Psca9OmGhdEUZBVd26PJ319K+7RwpVzZmr5p4=
Subject key identifier: DC:D1:E3:7C:9E:D1:F3:19:21:0D:AB:FB:83:90:4F:88:AB:66:29:2F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0296
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3NHjfJ7R8xkhDav7g5BPiKtmKS8.roa
Signing time: Sat 10 May 2025 12:37:52 +0000
ROA not before: Sat 10 May 2025 12:37:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662 (0x296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 12:37:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DCD1E37C9ED1F319210DABFB83904F88AB66292F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:16:93:e0:91:de:d7:26:2d:57:9b:0e:fb:
b5:32:fd:cb:e1:df:78:68:42:5f:29:d3:f5:d4:0f:
68:ae:8d:9d:96:8d:7d:bf:27:db:ec:50:b8:26:47:
b9:06:50:f3:12:6e:07:df:79:3f:de:18:8a:49:2a:
2c:0a:6b:d0:50:df:11:5b:4e:8e:84:a5:12:d2:b9:
85:01:a7:b2:46:96:d4:e9:ff:70:fd:a8:65:7c:ef:
61:f9:67:55:cc:c0:09:07:3a:08:3d:ce:f0:65:d4:
0a:17:b6:f0:19:3d:ef:f4:fb:24:e9:8a:99:05:10:
98:12:e9:be:1d:86:16:5d:78:13:1c:a5:18:8d:ad:
48:3e:85:df:ba:a8:8c:18:e9:09:87:4a:5d:40:0d:
3d:cf:31:4d:9a:1b:12:4f:ff:da:17:a9:33:97:1a:
1c:ff:b4:3f:ef:44:ed:89:36:95:dc:de:3c:21:51:
9a:8c:2e:f9:a4:0d:22:e4:14:90:fb:bf:67:e0:cd:
17:eb:aa:93:a3:1b:b9:b7:95:c8:3c:bf:a4:97:c5:
f2:02:b3:3e:54:ac:4b:4b:49:06:75:38:7c:38:59:
da:bb:96:92:ea:c5:6f:75:31:9d:ff:93:96:21:a3:
6e:c4:c9:74:2b:7f:8e:cb:38:25:b2:c7:2b:ff:66:
e3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D1:E3:7C:9E:D1:F3:19:21:0D:AB:FB:83:90:4F:88:AB:66:29:2F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3NHjfJ7R8xkhDav7g5BPiKtmKS8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:87:14:90:93:dd:87:7a:1f:b9:ea:75:29:e1:d9:a0:9d:6c:
3b:4a:c5:87:8a:1c:aa:3d:b6:f0:8b:5e:20:31:dd:e3:c0:17:
82:f8:3e:ba:85:40:fc:4e:79:15:d0:9d:ba:5e:0f:f4:14:67:
f8:51:f0:7d:1f:0e:9a:88:21:46:88:f1:a5:4c:23:d0:85:b5:
36:90:7c:50:e0:85:a6:4e:78:b0:9c:74:92:cf:a4:2b:53:50:
70:95:e0:ae:da:aa:da:29:8f:4b:21:3f:df:43:5a:4d:8a:0a:
39:58:84:f4:3b:83:e8:95:50:a7:01:10:cc:e0:75:4c:c5:4e:
81:7d:f9:a8:d4:7e:04:1f:28:4c:b2:7a:ed:72:98:7c:5a:fc:
77:4a:1c:c4:4f:47:89:c5:1c:e3:3a:32:5a:e0:4a:9e:c6:61:
59:f5:c1:72:09:38:f9:40:ed:bc:89:70:07:c1:d7:24:60:32:
51:21:59:33:5d:b2:4e:0a:ed:74:82:a2:f3:c3:de:fe:c6:25:
0f:86:04:7f:af:79:14:8f:d9:62:5c:2d:ee:4c:86:be:dc:f6:
04:ea:cb:40:00:13:89:90:3c:96:9d:43:23:f2:3e:1e:11:04:
80:83:27:57:7f:36:04:b1:fd:d3:3b:a9:53:a2:69:d2:39:4e:
d5:19:0e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 12:22:43 2025 by rpki-client