Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/H6O-6hY_17n6sU7pARSiEHouKvU.roa
File: H6O-6hY_17n6sU7pARSiEHouKvU.roa (raw, json)
Hash identifier: 9g1QAPzh9FFitww2f+U0DcM7KsI0rRB2CoW5gEkOxjI=
Subject key identifier: 1F:A3:BE:EA:16:3F:D7:B9:FA:B1:4E:E9:01:14:A2:10:7A:2E:2A:F5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 06BA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/H6O-6hY_17n6sU7pARSiEHouKvU.roa
Signing time: Fri 16 May 2025 01:08:02 +0000
ROA not before: Fri 16 May 2025 01:08:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1722 (0x6ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 01:08:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1FA3BEEA163FD7B9FAB14EE90114A2107A2E2AF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:74:2b:6e:65:7d:23:d9:0c:b3:c1:b8:f3:
98:04:4d:f1:2b:6e:70:5c:cf:f6:8d:54:f4:93:36:
67:73:d9:1c:cd:1c:df:09:04:01:cf:e3:f3:cc:0f:
3e:87:2b:cf:bd:c5:35:81:ba:15:a5:5f:41:52:9c:
47:0f:b4:7c:8e:e1:00:04:0a:da:29:44:27:7f:1f:
74:3c:7b:66:03:96:4a:ad:1d:0c:69:f9:83:c5:d4:
37:b7:5e:ed:0c:56:a7:54:a2:fc:e0:52:a1:d8:5a:
ea:40:bf:28:9b:f7:8a:1c:6f:bd:a9:f1:f4:dd:1b:
e8:92:37:7a:87:ae:91:9e:e3:6c:48:73:66:3a:41:
e6:15:be:22:e1:51:68:af:0c:bd:46:cd:d9:75:6d:
57:c0:de:1e:00:68:00:36:53:88:9a:a4:c0:aa:5c:
c8:47:02:d1:25:7c:54:c1:3d:d3:24:5a:b3:8a:43:
31:5b:13:b8:ef:8b:76:78:39:f1:ae:80:9a:5e:3d:
88:9e:18:14:f0:a5:ea:59:0e:39:09:26:f9:1d:20:
b7:75:d8:ad:10:34:f3:a0:a0:3d:d8:92:00:74:8e:
aa:b0:22:d1:08:55:79:b7:38:5f:2a:41:1f:8c:33:
dc:1f:c7:59:de:8a:5e:3b:f0:b5:98:9a:27:6c:9e:
2b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A3:BE:EA:16:3F:D7:B9:FA:B1:4E:E9:01:14:A2:10:7A:2E:2A:F5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/H6O-6hY_17n6sU7pARSiEHouKvU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:23:60:2f:7d:14:50:12:e1:99:9c:21:d5:03:71:d3:37:b2:
f7:c3:5c:d3:84:57:57:4b:a4:fc:85:90:39:2f:6b:69:d4:34:
89:f5:92:91:81:f9:fd:b2:bb:62:ac:8e:d9:29:b6:00:e4:ec:
66:b3:e3:f1:c0:fa:a4:8d:ee:c5:1d:2c:cd:08:0c:30:4a:1e:
eb:fa:18:1e:55:56:9f:eb:16:cf:b0:5c:da:bf:ab:7d:a4:8e:
b3:04:82:ad:0d:5b:bf:7d:56:16:a0:71:1e:b3:c4:b2:2c:80:
8e:b2:fc:57:62:9c:b1:cc:19:00:dd:5d:89:b0:0f:18:71:f6:
80:70:36:db:5d:50:76:15:c7:fc:6c:dc:46:29:0a:e4:a2:7c:
0b:aa:c8:75:5b:23:37:38:e1:a8:d9:83:c2:18:e2:39:fc:75:
9b:0b:fb:cb:6b:1a:42:3c:52:06:45:d4:d9:cc:d8:66:dc:6b:
38:8f:f4:7b:91:f8:5b:dc:ff:cb:b9:ed:06:5b:e5:90:ae:f6:
de:ae:a1:20:c9:c2:6f:20:de:12:bd:2c:29:07:31:e6:c4:db:
fb:fb:76:c3:ed:55:81:c9:6a:5a:ad:24:5c:5b:af:1f:5b:14:
f7:f2:58:e1:ae:9e:c3:98:1d:42:cf:24:f2:ae:73:81:6b:2b:
d2:cc:5a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 13:16:01 2025 by rpki-client