Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LFmJ-SzfYBPW2dT_Ln5Kq1I0_Qs.roa
File: LFmJ-SzfYBPW2dT_Ln5Kq1I0_Qs.roa (raw, json)
Hash identifier: t7wefvyNXyQB3TUHdz5H72nhs5ustt31aMj3jAQxmO8=
Subject key identifier: 2C:59:89:F9:2C:DF:60:13:D6:D9:D4:FF:2E:7E:4A:AB:52:34:FD:0B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0106
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LFmJ-SzfYBPW2dT_Ln5Kq1I0_Qs.roa
Signing time: Thu 08 May 2025 10:37:40 +0000
ROA not before: Thu 08 May 2025 10:37:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 10:37:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2C5989F92CDF6013D6D9D4FF2E7E4AAB5234FD0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a2:98:b4:48:a2:3e:a5:45:99:8b:26:f2:4a:
41:75:9a:1a:0a:bf:74:6a:ad:07:80:37:d0:65:0f:
c6:87:a7:6b:60:96:32:23:71:2f:8c:ee:99:08:89:
a1:31:79:c3:af:d9:37:f2:d1:be:07:89:d0:39:f9:
a1:b6:3f:5d:81:f9:54:8f:fc:d9:17:bc:da:2d:18:
04:8c:80:98:10:90:2d:f3:29:4e:77:06:9a:3a:67:
92:2c:6c:1c:ed:d5:c4:71:66:c3:77:4b:b3:39:47:
8b:35:1b:82:1e:54:70:71:b1:0b:7c:1d:1e:e0:b9:
9c:57:56:b6:3f:2d:df:8a:9b:87:f9:32:b2:18:9f:
50:d5:ce:01:23:b4:2b:69:89:ad:94:50:5f:09:d4:
5d:5c:ce:08:2f:10:1f:c0:46:77:6a:3c:cf:e1:fb:
85:50:28:8f:94:64:ee:0e:b4:b6:3a:01:69:0a:d7:
58:d0:b3:56:d2:08:3a:55:67:e1:24:63:8a:39:4b:
5c:d4:06:5d:ca:a2:61:75:a5:e1:33:3e:ae:1d:e1:
30:4f:3c:08:42:f6:0c:a4:9e:7a:f1:0e:1a:fa:d2:
3d:39:a1:dc:bb:d8:ad:38:10:e3:d6:7f:64:d2:3a:
08:31:e0:e5:51:5e:6b:17:1c:6c:3d:c7:ec:45:00:
fe:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:59:89:F9:2C:DF:60:13:D6:D9:D4:FF:2E:7E:4A:AB:52:34:FD:0B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LFmJ-SzfYBPW2dT_Ln5Kq1I0_Qs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:2b:52:58:9e:e9:50:2d:cb:dd:2d:67:04:7b:d6:6a:b5:1b:
18:f3:7e:6c:65:83:1b:54:a1:52:11:57:38:5b:69:b2:9c:ea:
01:d2:7d:14:15:e3:aa:87:eb:86:a2:94:7f:8a:db:17:0e:44:
88:8a:38:28:d5:00:c8:c8:a0:f7:4c:6b:60:87:9d:e0:73:5e:
10:77:70:ed:df:d0:dc:e8:fa:6c:7b:97:0a:e1:96:30:97:dd:
6f:3a:55:64:0a:f9:42:a1:31:66:19:5e:e0:1d:05:53:61:d4:
02:66:76:68:8a:ab:8b:fc:31:00:66:8d:c8:11:2d:07:e0:4b:
88:be:24:fb:d2:f7:61:f0:80:83:2b:a7:ae:fe:a3:ac:b9:e1:
3f:c3:fd:8f:bd:50:f9:95:12:8a:42:b5:e1:f6:79:8a:21:04:
35:01:90:5f:56:96:0d:7e:14:30:67:9b:5b:7d:8a:97:68:49:
5a:6f:ff:dd:a4:9b:08:7f:de:ea:86:04:b4:12:a6:11:c7:11:
18:82:fc:50:bc:21:00:84:cd:42:1f:bb:37:5e:32:4b:e5:da:
06:c1:4d:93:3d:44:6c:fe:bf:bf:da:99:37:69:3f:e3:65:f1:
42:d2:d6:ea:71:f9:65:56:9b:a9:c2:37:78:42:6d:77:bd:52:
ba:26:d7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:54:00 2025 by rpki-client