Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LsLlhUjtP2IpjI8fHVqBR1N1eRs.roa
File: LsLlhUjtP2IpjI8fHVqBR1N1eRs.roa (raw, json)
Hash identifier: d+VMcHENTn6JwBXtUssrvQDu2pYHBD2+V8XvDE75GA4=
Subject key identifier: 2E:C2:E5:85:48:ED:3F:62:29:8C:8F:1F:1D:5A:81:47:53:75:79:1B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04AA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LsLlhUjtP2IpjI8fHVqBR1N1eRs.roa
Signing time: Tue 13 May 2025 07:08:01 +0000
ROA not before: Tue 13 May 2025 07:08:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1194 (0x4aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 07:08:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2EC2E58548ED3F62298C8F1F1D5A81475375791B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:cc:b3:f6:22:c6:3f:29:fc:ba:79:aa:50:
38:b3:78:4a:e7:77:f8:7f:db:85:43:a5:0d:4a:89:
a3:f9:5c:02:c6:ad:92:d4:c0:a4:93:a6:0b:6b:f8:
55:54:c5:41:02:fe:ab:07:7e:8d:85:ac:36:a3:ff:
fb:94:69:69:f5:7c:6e:6f:9e:d6:09:59:b9:3d:86:
c2:41:a6:42:a6:85:ba:92:fc:52:33:84:d5:4e:7b:
2a:ec:19:a5:d4:6e:22:40:ad:b9:de:84:d5:27:40:
fb:24:66:c7:93:b4:98:c1:50:a2:b6:24:60:4b:0f:
3c:16:1b:02:4b:c0:5e:59:a0:75:ee:e9:9f:fe:d5:
73:4f:6c:9f:4b:56:dc:78:44:14:fc:37:62:b8:dc:
5b:e9:8f:33:ac:9d:58:08:23:00:45:cc:1a:81:b0:
75:49:22:cc:46:a6:97:9c:eb:53:dc:6c:36:b8:2e:
e2:e7:5c:bd:86:bb:0d:d4:5d:ca:44:df:03:21:04:
66:f4:8e:1d:95:ea:08:03:98:7f:fc:6b:8b:85:a8:
c8:2e:51:2b:8e:a9:4c:8b:2c:b8:d0:3c:dc:f9:0f:
2c:32:bb:82:f3:dc:b1:72:10:eb:64:04:16:9f:61:
22:8a:df:be:8c:8e:27:9b:79:85:50:56:60:22:f8:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C2:E5:85:48:ED:3F:62:29:8C:8F:1F:1D:5A:81:47:53:75:79:1B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LsLlhUjtP2IpjI8fHVqBR1N1eRs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:53:28:91:ee:6f:f5:85:39:11:df:64:14:27:5d:94:eb:54:
4b:50:48:e9:5f:43:46:c6:5f:3b:2f:28:f1:3f:0a:2e:04:33:
a5:22:52:b8:4d:b8:86:c7:cd:ac:d0:23:61:32:15:b5:33:63:
15:10:a2:15:41:c3:ce:bc:e9:8d:53:9c:ee:d1:a7:5c:7c:77:
16:d0:96:9f:f4:e5:f6:ed:10:00:0b:56:80:5c:2b:f8:3e:8f:
fe:a8:f8:cc:b2:3a:fa:f3:5f:d2:50:45:c4:2d:6d:37:7d:e3:
58:cf:6a:66:96:0d:d6:02:f5:bf:4c:e8:4d:ba:da:50:01:6a:
4d:d6:21:63:84:c8:35:b1:ca:af:fa:f6:16:7b:e2:c9:76:ad:
e3:06:6b:37:7b:89:66:da:b0:c5:09:57:c3:23:ed:1d:63:25:
f3:f3:26:66:2f:d0:0a:a6:1d:be:d5:9b:06:1f:24:71:24:85:
68:61:09:3c:ee:07:c0:a5:53:4a:18:e6:a4:5e:41:fd:f5:ff:
05:f0:7e:d6:05:7d:a6:1f:e0:17:18:8e:86:e6:1c:52:8b:7c:
1a:c5:bf:61:8a:2d:b1:3e:7a:38:eb:16:04:15:eb:c2:63:ff:
07:c6:98:82:79:72:10:75:78:b3:59:82:99:4e:15:f4:5b:99:
ff:ab:ac:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 00:51:15 2025 by rpki-client