Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Nfd48V6voh9x3Y4eEGeBxdfJxbo.roa
File: Nfd48V6voh9x3Y4eEGeBxdfJxbo.roa (raw, json)
Hash identifier: fcDbhGNGXd5PuSHbIe2HT+We4KbYErquxE27aTD5xCU=
Subject key identifier: 35:F7:78:F1:5E:AF:A2:1F:71:DD:8E:1E:10:67:81:C5:D7:C9:C5:BA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 026E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Nfd48V6voh9x3Y4eEGeBxdfJxbo.roa
Signing time: Sat 10 May 2025 07:37:54 +0000
ROA not before: Sat 10 May 2025 07:37:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 622 (0x26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 07:37:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=35F778F15EAFA21F71DD8E1E106781C5D7C9C5BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b6:62:61:d7:7c:b3:11:5f:f5:85:fb:89:e2:
01:bf:a9:55:c0:d9:8e:f8:94:72:f2:78:57:49:16:
c0:72:ad:8c:f0:1e:ce:81:ca:ee:9b:52:f8:4b:0a:
2c:03:0b:89:9f:82:9a:8e:ac:66:02:0a:5d:49:a4:
e6:e3:84:6a:35:57:9c:31:18:1f:c3:1a:38:c4:f2:
67:1d:5e:4c:f3:2e:e2:68:87:7b:9b:92:77:3c:65:
84:29:d4:f7:dc:b7:a4:b4:e5:4f:f8:4d:06:e0:8f:
03:c0:0d:01:c9:e9:61:66:ae:bd:15:a2:6c:39:a1:
85:72:61:5f:b2:94:d8:b9:2d:d7:fe:12:02:29:7a:
24:aa:91:ed:74:40:f0:94:ed:5f:0b:fe:66:36:d7:
27:cf:70:e0:3d:05:91:82:39:77:25:e4:0b:ca:37:
97:16:44:45:49:5b:fc:31:78:10:d3:82:25:a6:53:
da:e5:fc:d0:54:4d:7b:1d:14:ff:01:d0:e9:a5:a7:
a0:d3:f9:b5:78:17:72:af:3e:fc:58:b1:67:2e:ba:
80:d0:ee:e6:12:3b:9b:8f:5a:a8:98:34:08:73:89:
44:f4:29:1e:2f:4a:f2:6a:ff:96:ea:0c:fb:b9:10:
9d:04:d5:8d:cc:ba:db:b9:1a:46:11:57:42:9a:95:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F7:78:F1:5E:AF:A2:1F:71:DD:8E:1E:10:67:81:C5:D7:C9:C5:BA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Nfd48V6voh9x3Y4eEGeBxdfJxbo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:34:69:1b:1d:2d:14:56:b1:ab:1a:32:b5:f9:f9:0c:34:cf:
1d:5e:31:01:94:31:dd:f7:d1:74:94:88:6d:b5:89:1a:5f:77:
bc:7c:97:aa:e3:5c:a7:8a:b9:c4:42:a0:9b:17:32:a0:1f:0e:
82:24:7b:eb:22:d4:04:60:e9:50:14:7f:5f:ff:4b:6e:89:a8:
af:b8:09:b9:77:ef:7b:18:b0:65:e3:85:2b:d8:38:b4:64:de:
bf:2b:40:57:22:ba:d7:f8:f4:40:02:27:91:00:5c:7f:1f:4f:
c0:e9:10:89:20:29:d1:4d:81:8c:bf:b2:78:79:03:a5:14:f0:
f1:18:9c:43:7b:59:b4:a0:b7:e8:5a:9f:2d:05:47:ef:b3:d7:
37:74:cb:ed:c5:92:0b:95:79:b1:94:9f:99:37:3f:ea:85:06:
7f:a7:bc:77:be:44:48:00:9f:10:f9:86:0b:11:06:2c:5b:1e:
03:72:65:15:8b:c1:8a:1a:95:8d:22:44:ee:6a:e7:ad:d1:72:
39:21:32:9e:dc:3e:03:0e:76:53:c9:5c:51:09:a3:02:79:95:
af:a3:6b:98:75:7f:e3:77:05:ac:4e:f0:87:a9:8c:6f:89:2d:
3a:37:b2:cc:c0:a0:52:ce:3b:26:dc:f4:a1:e1:3c:48:cd:16:
01:3c:b9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:55:04 2025 by rpki-client