Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Gj9pbqixjiLTR0_k9UEJva1G_hQ.roa
File: Gj9pbqixjiLTR0_k9UEJva1G_hQ.roa (raw, json)
Hash identifier: CNTNDfwNjMUzNhG6UL28e/IiAqwMORXlgrIdQ+PM+eI=
Subject key identifier: 1A:3F:69:6E:A8:B1:8E:22:D3:47:4F:E4:F5:41:09:BD:AD:46:FE:14
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0486
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Gj9pbqixjiLTR0_k9UEJva1G_hQ.roa
Signing time: Tue 13 May 2025 02:37:57 +0000
ROA not before: Tue 13 May 2025 02:37:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1158 (0x486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 02:37:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1A3F696EA8B18E22D3474FE4F54109BDAD46FE14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1e:81:a3:d8:f9:b4:e4:f0:af:18:2a:60:52:
b6:ed:00:3a:43:ea:29:2d:6b:48:d1:1d:93:60:61:
72:5e:11:d2:fc:9f:1d:1d:cd:90:99:24:4a:9f:6b:
c8:f1:27:ee:de:15:92:a2:cc:a2:0b:b9:b5:eb:9c:
e0:4d:a0:a4:34:80:87:85:01:91:f6:09:3f:75:a4:
42:b7:79:ff:20:34:3b:20:aa:cd:1d:4d:77:07:45:
9e:b4:15:0b:7a:ff:f5:d0:88:e4:cc:6d:0e:79:32:
9e:2b:ba:5b:5a:e8:34:e9:e7:88:2c:09:c7:65:66:
e4:15:71:31:f5:1b:d9:67:7e:f5:94:31:a4:bd:35:
33:3e:dd:20:38:2a:ea:71:50:41:f5:1a:6a:97:bf:
23:cf:7a:cd:72:ed:11:7b:a5:cd:5b:87:2d:5f:7b:
f5:0f:dd:44:34:3b:86:80:df:88:5c:c1:9a:b0:7d:
47:06:14:95:c7:56:c4:69:cd:a9:46:a4:56:da:a6:
67:0f:82:57:0c:cd:12:db:16:81:06:bc:09:fc:da:
16:83:d7:56:9e:bc:f7:74:2f:2b:d5:42:75:14:52:
fe:65:bf:83:eb:ae:ab:73:6c:35:5d:7b:53:a7:5d:
16:aa:30:9e:bb:36:74:64:5d:80:67:19:61:19:3e:
8d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3F:69:6E:A8:B1:8E:22:D3:47:4F:E4:F5:41:09:BD:AD:46:FE:14
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Gj9pbqixjiLTR0_k9UEJva1G_hQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:8c:44:4b:7d:ee:19:c5:a0:9e:8c:f0:29:9a:c9:72:82:2d:
86:8d:3b:dd:72:d6:a8:49:9f:63:36:58:b1:56:27:ea:df:46:
a9:95:e4:fa:b4:e1:87:42:d0:17:6d:77:ea:3d:5d:a3:13:ba:
e4:a7:59:36:5e:f1:06:57:1e:9b:98:67:02:79:e6:f1:c5:20:
4e:0b:05:a1:58:dc:d1:30:53:67:0c:13:21:c1:ce:2b:63:dd:
94:d1:47:fc:da:a3:d9:ad:ab:59:c2:e2:64:e0:a1:01:f5:9c:
31:f1:5b:a3:cb:57:e8:24:09:ee:c5:9a:2a:ab:6b:87:70:0c:
89:a1:f2:b4:7b:e6:5c:a2:a5:a9:48:81:93:df:19:28:fb:45:
ca:95:a4:52:d8:69:1a:83:35:22:d1:06:3d:f7:6f:f6:63:0a:
0b:97:c8:76:ed:e2:74:ca:49:87:c1:fe:8f:bb:62:ae:00:5d:
6a:e7:54:80:9b:cb:b7:0a:5c:9b:13:4b:98:bf:69:88:ef:65:
35:d7:ee:06:3e:50:fb:35:8d:31:ca:d0:40:35:09:1f:68:5f:
58:a0:62:42:3d:a9:10:bf:0f:b7:07:c7:1c:b9:15:81:34:b1:
b3:e2:50:4b:d4:bc:4d:a4:b0:b7:7f:6a:ea:3f:db:8b:44:f4:
70:e2:71:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 19:30:02 2025 by rpki-client