Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/3T1tvve3IlIWlhvuAjFnZrmuuZQ.roa
File: 3T1tvve3IlIWlhvuAjFnZrmuuZQ.roa (raw, json)
Hash identifier: oimefmv1dAcyXWjNyzFptLSSmYLOaLSFzNzcko9/CBE=
Subject key identifier: DD:3D:6D:BE:F7:B7:22:52:16:96:1B:EE:02:31:67:66:B9:AE:B9:94
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 068E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3T1tvve3IlIWlhvuAjFnZrmuuZQ.roa
Signing time: Thu 15 May 2025 19:38:02 +0000
ROA not before: Thu 15 May 2025 19:38:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1678 (0x68e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 19:38:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DD3D6DBEF7B7225216961BEE02316766B9AEB994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:0b:76:da:8d:ef:b7:b2:4c:93:01:1a:4c:
80:72:47:6b:7a:30:75:7e:73:90:0f:5d:f4:26:65:
e0:57:9c:20:33:ff:89:55:58:5b:47:6c:3f:45:14:
5f:01:94:b1:a3:5e:f7:d2:b9:c9:b5:ab:eb:e8:51:
22:8f:7b:f2:a1:d4:19:f1:44:78:33:f0:12:af:c3:
95:05:0a:65:44:9b:a6:05:38:d3:91:b0:5c:9b:04:
2b:f4:04:25:fd:66:51:64:b5:56:0d:ab:d9:e3:68:
ca:03:fb:ef:b9:24:63:b9:57:0d:3e:aa:2b:bf:83:
41:ec:01:ea:7e:7f:ac:3e:c1:ef:5c:0f:8f:a8:80:
2e:1b:3c:51:56:81:46:6a:c7:33:0c:f1:a1:5e:20:
b3:0f:57:b4:df:49:92:42:ff:a7:53:87:06:2b:a7:
37:27:74:86:0c:83:56:b2:d2:20:9e:36:44:3d:f9:
d3:e3:e9:99:ca:a1:4c:d5:6c:7c:8d:9c:f8:31:22:
71:8f:03:08:b2:a5:35:96:68:fd:6c:f2:45:2b:7b:
b6:7a:5c:dc:1b:ac:50:c0:5d:03:b7:59:a4:c7:4d:
98:8c:c1:89:53:fd:62:91:55:5b:01:c1:bf:9a:da:
3d:d9:e0:29:70:88:b3:e2:ca:ee:7d:52:e4:50:42:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3D:6D:BE:F7:B7:22:52:16:96:1B:EE:02:31:67:66:B9:AE:B9:94
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3T1tvve3IlIWlhvuAjFnZrmuuZQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:62:b5:54:f5:88:b6:08:4a:53:6c:90:e9:09:e1:0c:c2:6e:
7e:4e:4a:f5:e6:b1:55:e2:bf:f4:fc:bf:d0:b1:f5:2f:9c:a7:
a8:3a:19:02:88:47:55:da:1f:d9:76:4a:75:71:7c:39:bb:7a:
d8:87:b4:3a:36:d6:13:03:e0:ca:0b:a1:d8:3b:a3:13:ef:64:
e9:c6:53:a0:bd:88:a0:d8:10:5c:fb:c1:b8:36:d8:b8:07:88:
d2:47:87:bb:7f:45:7a:1d:1d:57:0c:7d:a3:30:8b:4b:93:96:
06:0d:f3:ed:ef:7c:87:ce:ce:29:b0:34:b8:59:f2:14:3c:1f:
8f:f1:ca:ea:45:0a:d6:19:e3:0f:3b:1b:bf:5a:46:a8:e0:eb:
57:be:1d:80:28:f4:87:e7:a4:e9:99:86:7a:1b:74:b4:77:92:
fe:dd:8d:57:16:7a:16:20:09:19:e9:18:dd:e6:20:22:c5:5f:
ee:22:68:0b:93:d1:ca:a7:49:87:7e:6e:31:39:0c:83:db:51:
0e:fc:dd:d1:11:aa:8f:29:88:9f:30:2b:25:8a:75:40:77:bf:
6d:cd:1c:cf:bc:87:43:d2:30:69:a1:81:7c:95:32:c8:6b:95:
46:85:32:ed:86:5f:94:dc:66:0f:e2:cd:e4:82:dc:c8:3d:1b:
5f:5a:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 18:51:57 2025 by rpki-client