Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Ju7ObDsGoR2CPnbQNc0L9PSaWTo.roa
File: Ju7ObDsGoR2CPnbQNc0L9PSaWTo.roa (raw, json)
Hash identifier: Q/GRSXNaEs4JE2TCqYbRjZQVXfjZBljQsFcLIcEiaLk=
Subject key identifier: 26:EE:CE:6C:3B:06:A1:1D:82:3E:76:D0:35:CD:0B:F4:F4:9A:59:3A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0672
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ju7ObDsGoR2CPnbQNc0L9PSaWTo.roa
Signing time: Thu 15 May 2025 16:08:04 +0000
ROA not before: Thu 15 May 2025 16:08:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1650 (0x672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 16:08:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=26EECE6C3B06A11D823E76D035CD0BF4F49A593A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d1:cc:5a:96:f6:cf:4c:40:e5:d3:80:89:a7:
44:20:59:cf:24:9e:ed:e9:43:e3:d4:6b:a9:25:d9:
ec:9d:72:d1:50:6b:25:a7:0f:0a:a0:be:6b:8d:13:
4c:c2:cc:2d:b0:7e:da:3d:d2:21:df:e2:2b:1a:c9:
29:d0:0c:7e:43:27:05:d7:00:f0:32:91:f6:27:51:
36:47:0a:67:e0:7e:27:d9:65:44:96:d1:72:de:77:
ec:0a:0e:a1:ed:8a:fc:39:05:1e:c4:51:01:48:11:
5c:77:11:67:3b:4d:6f:c3:bd:63:ce:0e:49:0a:8c:
fe:c0:e6:78:c8:10:95:07:d3:28:5b:d4:8a:9e:65:
8a:19:47:0d:46:a0:f9:5a:8f:07:d0:f3:0d:7d:bc:
ff:c2:32:78:28:13:0f:2d:77:82:8e:0f:ce:39:15:
ae:23:7c:be:bb:f3:4f:a1:b4:74:fb:58:6f:41:05:
b6:c3:41:12:79:20:5b:d8:73:ab:76:d1:79:d5:23:
94:5b:0f:83:b4:7b:fb:42:7e:7a:04:a7:d9:a3:16:
4e:11:3b:3d:8b:da:36:6d:fe:aa:75:78:8c:30:5b:
a1:71:3c:80:16:c7:a5:ab:36:7f:2c:c7:ef:1b:67:
0e:e1:f3:0e:d3:de:e7:74:e5:a9:95:fa:f4:7a:47:
87:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EE:CE:6C:3B:06:A1:1D:82:3E:76:D0:35:CD:0B:F4:F4:9A:59:3A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ju7ObDsGoR2CPnbQNc0L9PSaWTo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:61:fb:22:f1:c4:39:ec:ba:04:ab:f2:92:ea:3d:da:ad:61:
1f:c8:48:59:04:b8:82:af:09:eb:63:e0:42:6f:6f:d9:cf:47:
16:69:b9:c5:23:8e:b4:a9:ad:65:a6:87:31:25:76:7e:f9:3d:
50:73:6f:79:95:70:67:69:b4:65:82:d5:f3:52:65:8d:31:6e:
1e:fa:82:07:2e:47:18:b4:8f:55:ff:74:11:e0:4f:eb:59:01:
64:11:e6:b4:16:18:0a:20:7d:97:c3:30:ef:30:26:e3:1b:8e:
70:ec:51:b7:d9:6b:db:9c:3a:20:62:dd:6b:77:d7:d9:66:f3:
d1:5d:6c:d8:a6:e5:30:a7:69:1b:04:be:eb:2c:79:44:1d:27:
02:fe:e6:98:ac:ca:7d:09:62:cd:ec:b6:75:69:1f:a6:4a:c8:
2d:aa:f9:4b:99:c3:db:9a:a2:d2:19:a2:4e:34:31:46:9f:0d:
7d:70:1d:01:f6:f1:23:6a:6d:21:0e:f8:46:ed:01:a1:34:9e:
54:f3:64:5c:31:7d:6c:0e:b2:9d:d2:ef:7a:16:d1:8c:a3:c8:
a6:9b:60:e4:14:2a:bc:d7:b4:12:42:0f:55:07:59:b6:e9:a9:
c8:49:80:95:0a:3a:f3:68:5e:50:be:2a:7a:61:4e:d8:b9:92:
c9:ef:71:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:42:10 2025 by rpki-client