Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/3Z5ytL5j8ulmB8UAkkagCEjVdc8.roa
File: 3Z5ytL5j8ulmB8UAkkagCEjVdc8.roa (raw, json)
Hash identifier: Ss8UnI/+2vUO9f1HZfgDpl2yYjn/yZJknwlEefKrkVQ=
Subject key identifier: DD:9E:72:B4:BE:63:F2:E9:66:07:C5:00:92:46:A0:08:48:D5:75:CF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0742
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3Z5ytL5j8ulmB8UAkkagCEjVdc8.roa
Signing time: Fri 16 May 2025 18:08:07 +0000
ROA not before: Fri 16 May 2025 18:08:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1858 (0x742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 18:08:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DD9E72B4BE63F2E96607C5009246A00848D575CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:85:54:32:b6:e7:bf:66:b0:53:fd:3b:0d:
d1:e4:b1:6c:ea:1e:c9:53:93:c4:70:2b:78:ec:a3:
2c:c9:fa:e2:8a:e2:fe:97:fa:52:46:99:e9:a9:d6:
60:fe:a3:53:e0:39:e3:58:e0:02:94:d3:71:41:cd:
1e:7a:38:00:5e:61:90:82:26:bc:a5:e0:ec:70:ad:
aa:ca:cc:bd:71:83:2f:21:a4:7b:cf:60:5c:8f:23:
d2:00:57:c0:7e:63:ef:28:3e:cb:53:8a:b2:5b:a1:
5b:26:c6:4d:28:f1:c8:00:e5:17:45:2d:97:f3:f3:
36:1b:b5:d1:cb:b0:66:48:44:3c:c7:99:ee:70:af:
a7:51:1e:b6:2a:f8:c7:46:e1:00:71:43:d9:0c:62:
46:f0:65:00:2c:a7:d6:ce:86:41:69:15:56:8e:80:
df:90:dd:1a:25:85:f0:28:22:98:65:2c:09:fe:9e:
04:15:20:ef:67:93:64:21:64:de:fc:d3:24:56:6f:
47:be:f8:45:62:bb:fe:4a:14:e7:91:3f:ed:da:b9:
9e:52:67:31:d3:eb:3e:18:fa:9a:c8:5c:f5:f8:b2:
d4:95:5c:6b:f8:8e:9a:4c:75:72:5e:88:75:8c:04:
49:0d:b9:cb:17:08:30:fc:1c:cf:fc:e3:2a:ec:68:
bd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9E:72:B4:BE:63:F2:E9:66:07:C5:00:92:46:A0:08:48:D5:75:CF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3Z5ytL5j8ulmB8UAkkagCEjVdc8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:67:25:4e:d3:cf:91:9a:cb:36:1f:0f:22:1c:18:12:8f:98:
d8:f9:59:e9:2b:56:20:62:ca:5b:93:90:8f:89:32:9a:f7:fd:
95:9d:a8:88:fa:f7:5e:b6:10:a7:f7:d4:88:80:43:53:a0:7b:
a4:5b:31:aa:3f:7d:0d:24:79:95:2e:a7:36:41:05:48:78:a1:
ee:a6:31:3f:40:8d:7b:a4:4c:69:17:53:c3:96:8b:8e:96:a5:
24:29:43:67:3d:5f:55:e5:35:d7:33:db:07:dd:29:3e:90:3a:
8d:3e:a7:f7:c2:7f:16:0d:8e:a2:50:7a:0d:9b:5d:c8:93:54:
42:8c:18:81:05:f4:87:2d:60:35:de:1d:80:68:3e:c9:a3:c0:
79:44:b9:04:5c:92:f6:69:03:67:f0:ba:6b:5f:e2:dd:b5:0e:
bc:aa:e6:24:a5:d3:6e:7c:bf:b1:8d:7c:bb:81:be:a8:fc:b7:
40:86:35:07:0b:b6:49:00:69:d6:a9:d0:e4:98:ae:94:55:32:
74:18:79:b9:6b:c5:01:71:65:85:bb:16:c6:24:70:d4:bd:87:
e3:48:c9:d6:5c:77:76:32:e6:2b:25:40:0f:11:91:05:2d:fb:
5d:df:17:79:f9:bd:b5:bc:1c:5b:f8:e0:c3:ae:2b:f7:c0:4e:
23:de:de:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:40:50 2025 by rpki-client