Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/AWGcsh7WMSx6WPa40cVSMXAJNwA.roa
File: AWGcsh7WMSx6WPa40cVSMXAJNwA.roa (raw, json)
Hash identifier: 4MRE4zTj0k+dTpEnv0jHh+uOeSNFS9O9eE/uTsgADDU=
Subject key identifier: 01:61:9C:B2:1E:D6:31:2C:7A:58:F6:B8:D1:C5:52:31:70:09:37:00
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 039A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AWGcsh7WMSx6WPa40cVSMXAJNwA.roa
Signing time: Sun 11 May 2025 21:07:53 +0000
ROA not before: Sun 11 May 2025 21:07:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922 (0x39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 21:07:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=01619CB21ED6312C7A58F6B8D1C5523170093700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:12:a1:a3:49:b6:4f:c9:99:1a:f7:d7:ce:56:
1e:95:14:f1:c9:5b:16:90:70:e1:a0:57:33:a8:8d:
a9:77:91:59:2e:ff:21:72:cf:ce:6c:7e:e7:09:60:
e2:c2:eb:56:da:b1:4e:f2:24:f9:e3:2a:0b:98:20:
18:88:f3:02:4a:76:30:8b:67:0b:96:68:58:52:23:
44:fb:57:a3:4f:b2:df:12:58:a8:eb:1d:5c:1d:36:
7e:83:d0:47:9a:59:dc:b8:44:5a:6e:6b:fc:4e:b6:
5b:fc:bd:a1:cf:b4:89:c5:ab:32:7a:c6:1d:ad:29:
bf:44:24:21:7d:14:fc:1a:00:e6:b5:0b:94:2a:12:
79:3f:9a:c4:c9:50:12:c9:ab:a8:6e:d4:a8:3b:dd:
81:4b:47:87:a1:82:8c:5e:a1:26:bd:56:23:2a:e3:
19:9e:6b:dd:d1:1a:b5:bc:97:15:89:d6:70:f8:8e:
a3:86:82:bb:51:bd:0e:f6:14:14:a0:3a:25:ef:74:
d7:6e:f6:c2:95:f7:3a:ee:7b:5d:d0:9e:f7:28:2f:
0f:37:45:b5:b6:bf:78:52:67:b5:5b:48:11:16:dc:
9e:8c:84:31:1f:7c:34:bb:8d:cf:49:01:ff:f6:63:
23:6a:b8:0d:1c:99:49:32:0d:f1:31:ee:3d:5a:dc:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:61:9C:B2:1E:D6:31:2C:7A:58:F6:B8:D1:C5:52:31:70:09:37:00
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AWGcsh7WMSx6WPa40cVSMXAJNwA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:e4:6b:3f:1c:70:ee:ec:80:5c:fd:e2:34:27:28:3a:1d:62:
99:3c:63:bc:4f:3f:0c:d0:5e:1d:74:eb:6f:47:32:22:c8:48:
4c:e6:55:e1:0b:c0:a7:de:33:69:69:82:ec:79:30:79:ef:60:
55:ec:d9:5e:25:93:d5:0f:3a:81:46:c6:24:f4:73:e9:83:01:
4c:ea:a5:14:e8:5a:9b:bb:c7:84:26:42:4f:85:e8:9b:79:02:
e3:7f:87:e5:49:14:d9:36:9e:ad:a5:9b:6e:80:32:3f:0d:5e:
c8:99:ad:28:1f:7e:41:10:41:d7:41:c9:0c:d8:64:c6:34:ad:
94:df:4d:79:42:a1:92:48:07:73:df:4c:08:66:35:19:2a:f5:
4b:11:be:d9:6c:b0:0d:e1:e3:da:d4:bd:73:44:f9:9e:17:5c:
7c:da:52:19:05:a6:d5:15:86:6f:4f:3b:7f:1b:19:8b:39:75:
f3:0f:65:9c:8a:01:ea:0d:e1:67:f8:bd:3d:c9:e4:3e:77:79:
fd:07:c8:bd:e9:b1:24:0e:a0:29:ed:dc:08:1e:98:6d:9a:36:
93:85:50:75:63:1b:82:ca:36:a6:1f:3f:04:6d:91:5d:80:3b:
f1:86:11:4a:dd:ae:5b:4f:f4:1d:ac:f7:c2:0e:19:dd:92:40:
73:14:86:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:58:51 2025 by rpki-client