Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/MNBPAmQFeX4Arg29WmOoOMO93fc.roa
File: MNBPAmQFeX4Arg29WmOoOMO93fc.roa (raw, json)
Hash identifier: gudzPXyIzeEd6FIm/hRB91ZYRKbUGWUQTOrT/JdvScg=
Subject key identifier: 30:D0:4F:02:64:05:79:7E:00:AE:0D:BD:5A:63:A8:38:C3:BD:DD:F7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 028E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/MNBPAmQFeX4Arg29WmOoOMO93fc.roa
Signing time: Sat 10 May 2025 11:37:50 +0000
ROA not before: Sat 10 May 2025 11:37:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 11:37:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=30D04F026405797E00AE0DBD5A63A838C3BDDDF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:d9:66:5e:38:33:43:82:3a:06:11:b6:c3:
c2:c2:a1:59:f3:43:2c:5f:0a:b8:ed:cb:d7:12:94:
1d:32:16:1c:42:1a:21:e3:2e:a0:88:8b:0e:1d:2a:
48:dc:d6:51:ee:3a:e4:1e:1b:db:aa:92:e8:00:8b:
6c:7c:9b:c0:c6:9b:47:44:39:65:60:27:34:ab:d2:
eb:6c:fd:25:77:27:d6:12:7a:e8:c8:ba:ae:4a:b9:
1b:67:14:2f:08:f2:12:40:29:4e:12:32:e1:07:ee:
b1:2b:51:31:fa:64:d4:7d:27:dd:59:e3:8a:38:65:
ae:be:a1:d2:bb:e7:12:a2:a7:56:0e:6c:5a:33:c2:
7c:dc:97:48:83:24:ad:23:d9:ad:7f:ae:3e:c9:dd:
28:82:af:00:f6:81:59:9a:4a:a1:5c:be:cb:7a:70:
a6:72:d6:79:15:c8:71:fc:06:78:3e:f6:9d:25:41:
ce:12:f9:3e:9f:f0:6e:a1:56:8f:49:bd:7e:95:de:
3c:37:9a:0c:4b:49:7b:81:2e:87:a0:cd:35:68:ff:
cf:3f:9a:23:99:a8:2c:d1:47:46:45:0f:b4:1f:bd:
c8:1b:c4:c4:62:80:ae:c1:6e:a3:10:a7:24:00:97:
1d:e5:04:be:d7:93:74:b0:ad:d5:79:41:da:09:94:
a1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D0:4F:02:64:05:79:7E:00:AE:0D:BD:5A:63:A8:38:C3:BD:DD:F7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/MNBPAmQFeX4Arg29WmOoOMO93fc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
26:0c:a0:b9:c1:8b:5b:fc:c0:1d:22:93:e9:4a:5c:24:99:71:
c1:f2:9b:00:27:02:c8:da:7f:aa:ea:9f:c2:1d:75:49:92:4c:
17:19:ca:ae:44:09:c2:b1:70:13:58:6a:75:ea:f0:b1:53:37:
a5:f4:d4:e9:fd:91:52:1e:32:5a:6c:ce:ec:3c:8f:49:7c:7e:
90:76:95:7a:e2:d2:8a:36:bc:6f:44:4b:dc:41:a6:ad:4b:d9:
fd:9d:5b:67:17:2b:b8:d0:ae:8e:5b:06:c7:c6:22:7c:61:a2:
3e:a6:7d:7a:60:0c:f0:f4:e2:36:42:a2:68:01:bc:2f:f8:c7:
84:85:f1:ed:84:3e:22:7a:82:4f:7b:fa:39:6c:d5:cb:59:28:
7f:1c:1f:06:bf:33:61:99:02:5b:c3:29:a1:73:db:8d:34:47:
d1:ee:5d:28:48:e2:b8:ce:b1:5f:a3:50:83:2d:c5:1f:14:15:
c0:ec:5b:dc:2e:63:80:e9:1f:e3:bb:a1:b9:46:cd:6e:c7:34:
f9:2b:b9:e3:21:40:bd:09:c8:10:72:4d:24:df:b8:aa:55:06:
dc:7a:bd:fa:94:d5:fd:6d:82:a4:d6:bc:2b:ae:5a:bb:fd:8e:
49:e1:c7:43:bd:a1:01:c4:ec:c0:86:d3:6e:14:cc:9a:f4:d9:
1c:53:08:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:51:07 2025 by rpki-client