Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/FuqdjTOT5IucqkvUY72q35CIs1Q.roa
File: FuqdjTOT5IucqkvUY72q35CIs1Q.roa (raw, json)
Hash identifier: sM3tIuxHf4boZbURdPSayC9dgLRRp3cBopbS3GJMd+c=
Subject key identifier: 16:EA:9D:8D:33:93:E4:8B:9C:AA:4B:D4:63:BD:AA:DF:90:88:B3:54
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01F2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FuqdjTOT5IucqkvUY72q35CIs1Q.roa
Signing time: Fri 09 May 2025 16:07:46 +0000
ROA not before: Fri 09 May 2025 16:07:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 16:07:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=16EA9D8D3393E48B9CAA4BD463BDAADF9088B354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f5:13:b7:37:73:59:b4:72:98:d0:32:65:b5:
cb:85:a4:ee:7a:62:53:43:b3:9f:e2:b0:85:fc:07:
25:25:ba:d6:b2:52:a0:4d:1d:6a:ee:1d:24:8c:eb:
fa:92:2a:3f:37:43:6e:60:9a:65:cd:05:58:41:59:
1a:b1:06:9d:7a:bf:97:9f:3c:37:1e:3b:24:ba:bd:
c4:1b:4d:78:7f:0c:da:0b:32:59:04:4b:50:65:e1:
8c:90:5a:e7:f2:42:57:bd:08:02:cf:92:2d:21:6b:
f0:e3:9b:e4:da:9f:4a:ec:5e:00:fa:9c:24:51:fc:
52:c3:0a:b0:b6:c8:cd:46:cf:f6:db:4c:87:e6:d1:
79:95:d1:d3:34:11:26:48:de:dc:d7:b3:94:e2:d6:
3f:d7:ca:cb:86:b4:f8:e2:09:89:41:ac:1a:ae:53:
94:15:4e:03:86:67:14:58:d4:29:9d:d4:86:cd:4b:
67:02:5f:bd:60:08:e9:5d:1d:d5:64:d8:7e:d4:ed:
5e:02:7b:55:63:13:25:0a:51:f4:aa:9e:1e:39:7e:
99:1d:7d:35:26:63:d7:e5:03:e6:f2:b1:89:2c:35:
fe:65:fb:dd:d0:2a:07:5d:f7:55:ff:8c:dd:cd:b9:
76:c6:d4:64:23:12:3a:45:79:4b:06:ca:03:25:da:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EA:9D:8D:33:93:E4:8B:9C:AA:4B:D4:63:BD:AA:DF:90:88:B3:54
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FuqdjTOT5IucqkvUY72q35CIs1Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:7d:67:65:ec:e6:72:46:2e:bf:43:c4:61:4f:37:3b:81:9d:
b3:25:6c:d9:c4:50:b3:c4:fa:3e:04:4f:22:fa:8d:38:7d:14:
8b:3f:44:ca:e5:75:fe:82:9e:13:9c:ad:6b:1f:a7:b6:c6:50:
01:a8:b2:3e:ba:a3:6b:36:d7:ac:39:74:9c:29:34:6b:5b:82:
ab:12:21:42:91:92:8d:53:51:8f:de:7e:1d:54:9a:e8:be:eb:
5f:54:5a:f6:13:63:3c:e4:1b:37:30:37:ef:80:94:54:f6:24:
26:a5:80:9f:43:3e:7b:21:f9:74:ba:b4:fc:e8:4e:81:93:5a:
03:16:36:0c:a7:f2:68:c2:e8:5c:c1:86:39:72:95:e6:15:b4:
c6:00:82:6e:d2:5a:30:c4:46:8e:88:71:7d:44:a0:5a:29:b2:
55:45:51:47:90:d5:53:d4:ce:d9:c6:66:26:fa:40:76:bc:69:
a5:8f:05:74:90:22:f5:b8:67:72:ee:5b:6a:a9:c8:24:20:83:
68:17:bd:03:c3:7b:c1:73:a7:79:dc:a2:6c:a1:de:f7:ad:b1:
a6:f8:ff:99:fa:5e:97:0c:e3:35:14:dd:8b:89:e9:13:51:cf:
95:f0:ed:50:0a:60:a6:0a:97:20:cd:d4:4f:3d:a1:45:df:36:
06:01:18:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:50:03 2025 by rpki-client