Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/N_rTozLXXVsLBE7pJ9ktMLuF1ak.roa
File: N_rTozLXXVsLBE7pJ9ktMLuF1ak.roa (raw, json)
Hash identifier: gFWqBmtOEW17JU638G6ENhG2FXeWeF17Lz6JOrNGpZ8=
Subject key identifier: 37:FA:D3:A3:32:D7:5D:5B:0B:04:4E:E9:27:D9:2D:30:BB:85:D5:A9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0266
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/N_rTozLXXVsLBE7pJ9ktMLuF1ak.roa
Signing time: Sat 10 May 2025 06:37:49 +0000
ROA not before: Sat 10 May 2025 06:37:49 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 06:37:49 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=37FAD3A332D75D5B0B044EE927D92D30BB85D5A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:d6:95:89:27:14:4d:e7:18:eb:2d:de:97:
b6:57:84:25:02:0d:e3:a0:3b:0d:ff:49:3a:f2:7b:
af:f5:64:7f:ff:15:d4:41:5f:13:05:2d:84:e0:c9:
5f:1a:05:d1:90:ff:7e:21:86:64:c8:1a:ad:53:f1:
2d:dd:27:c1:86:34:cb:0e:a4:40:b0:8a:0b:fa:a5:
d2:14:ab:7d:7e:b8:22:44:8d:e3:de:99:1f:6c:4c:
f4:85:fe:45:c0:10:c3:89:12:95:96:32:be:2d:cf:
51:72:96:18:e3:1c:43:97:c5:c8:e3:a7:7c:ce:5c:
d8:92:99:25:2c:5c:8d:25:ed:1a:27:c1:66:2a:cf:
ea:b7:10:27:8f:f0:8f:64:bc:cb:09:71:9e:f0:cb:
2b:b6:1d:bc:ad:55:5f:03:06:83:da:cd:d6:d9:81:
7b:67:17:72:c9:59:0c:ef:fe:0e:4a:ee:dc:ab:18:
8f:b3:f3:40:0c:41:4e:73:09:4d:74:c1:5d:79:e8:
c5:fb:c2:56:2b:4a:54:64:e8:84:23:86:72:8b:f2:
e1:86:a1:70:2d:df:e1:55:3e:2b:2f:45:60:5c:b5:
7d:24:a0:ab:38:c1:ae:44:f0:2e:1d:20:fd:a5:27:
2c:67:eb:21:ab:cc:1d:ad:a0:04:30:f3:ca:38:68:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FA:D3:A3:32:D7:5D:5B:0B:04:4E:E9:27:D9:2D:30:BB:85:D5:A9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/N_rTozLXXVsLBE7pJ9ktMLuF1ak.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:74:f1:7c:9b:19:51:b9:c8:1f:7f:db:18:e9:2d:f2:40:1f:
8a:ec:88:f7:fe:cf:41:e7:7e:58:0e:70:92:08:27:a0:35:3a:
86:e0:24:c1:47:78:37:bf:b6:26:2c:5e:08:2d:68:16:89:c3:
2b:d7:19:c3:ae:83:0c:e7:f5:4e:f3:93:9e:2b:be:13:6b:c2:
33:3d:97:bf:a4:fa:89:0e:96:63:b1:61:f4:76:d5:ef:b8:2c:
92:2f:67:aa:2e:52:3f:31:9c:71:a0:8a:ff:57:4a:25:da:8a:
3a:1c:dc:24:82:a8:b8:87:ad:82:cb:ad:bc:a3:cc:68:d7:d8:
7a:50:db:37:4e:20:bf:4b:eb:a3:82:39:31:93:58:b8:38:ac:
0d:e3:f3:44:39:5f:02:54:e7:75:30:38:9e:da:d9:5a:18:84:
c1:cc:27:3a:01:64:e5:49:0c:85:08:a9:ca:95:03:46:a1:5c:
d0:11:b1:02:c2:ff:8f:59:91:85:b9:9f:18:6f:bb:6b:e7:3f:
67:0b:dd:8a:ce:21:99:b2:55:67:1f:47:f0:88:d1:89:52:1d:
c0:45:b9:49:0d:3b:3d:83:08:94:53:c5:96:76:74:f9:44:a4:
de:55:bd:a2:dd:1c:76:39:80:bf:70:6b:d0:b3:87:47:3f:6a:
7a:d9:31:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:55:14 2025 by rpki-client