Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/OnEewVG_xJw4L0Gnn6ycXT95Eq8.roa
File: OnEewVG_xJw4L0Gnn6ycXT95Eq8.roa (raw, json)
Hash identifier: JUKmnVMrb8FZ4GLGoj6J4C7OPskZ1hyFUuoVBgdayHU=
Subject key identifier: 3A:71:1E:C1:51:BF:C4:9C:38:2F:41:A7:9F:AC:9C:5D:3F:79:12:AF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: FE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OnEewVG_xJw4L0Gnn6ycXT95Eq8.roa
Signing time: Thu 08 May 2025 09:37:40 +0000
ROA not before: Thu 08 May 2025 09:37:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 09:37:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3A711EC151BFC49C382F41A79FAC9C5D3F7912AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:2c:e3:86:99:f9:f3:0e:8e:b0:fb:96:ad:
14:96:2a:d7:9f:4f:0c:47:7a:0a:da:34:d7:9e:67:
16:8c:d7:72:4f:ec:e6:96:71:44:c7:49:af:19:a6:
03:ac:f8:fa:5f:e9:25:37:26:31:5b:11:43:d3:db:
4c:6d:64:a8:cc:38:7e:7d:27:43:ff:a1:e4:32:0d:
7c:28:9f:2d:4c:38:ed:3b:6f:8c:d8:16:7a:ca:36:
a7:2e:f6:09:61:e4:e1:8c:48:c7:db:9c:02:ff:c7:
ac:97:da:4f:29:24:58:19:a2:81:0d:b5:87:d6:d4:
de:5f:78:f7:31:cd:68:36:de:a8:3a:d6:7c:53:5d:
ad:0d:27:81:5a:24:88:d0:ee:6b:80:e3:f2:cf:ba:
07:58:99:7f:f5:9f:f9:e9:14:99:8f:c3:28:0a:79:
1e:b4:26:57:5a:ed:27:90:ab:aa:c5:c1:ab:1c:e8:
ff:79:36:d6:fa:40:3f:e4:eb:f2:a8:24:3b:ae:41:
07:bc:55:f6:3b:a6:d5:21:39:e8:c8:47:db:73:fa:
be:10:e3:5e:dc:ec:c6:8b:d3:c5:e7:5f:92:64:7e:
7d:de:0e:cb:02:3d:64:9c:62:32:98:9a:62:77:09:
84:0e:1b:6b:b0:22:00:d6:7b:07:25:91:d2:75:8d:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:71:1E:C1:51:BF:C4:9C:38:2F:41:A7:9F:AC:9C:5D:3F:79:12:AF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OnEewVG_xJw4L0Gnn6ycXT95Eq8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:f8:7f:78:20:25:4b:44:fa:8e:cf:6c:08:de:66:06:0f:e5:
bb:b2:11:e7:2e:01:19:22:2d:0a:4a:90:a2:6f:74:da:34:8f:
9e:95:ea:57:42:53:3c:b4:5e:f2:72:bc:d0:48:0d:31:81:05:
ac:91:b5:c9:e7:4f:dc:fc:9a:fa:d1:16:5e:c1:a7:2e:8b:ed:
dc:ba:48:d7:4d:ed:57:d0:9c:d3:e3:43:de:aa:bc:40:4a:62:
1d:58:04:7c:35:44:8e:b9:71:b4:6a:b5:2e:53:c8:e5:79:af:
9a:9b:6b:b0:30:3d:4d:37:33:d9:ea:03:bb:60:fc:ab:da:8e:
bc:b8:c2:3a:83:8d:18:e4:98:8b:97:98:78:c5:3e:99:b4:0e:
6f:24:d6:30:d8:27:b1:c8:5e:6e:33:84:f5:31:52:8a:bb:39:
8f:ba:2b:b3:aa:36:66:bd:62:c2:58:35:25:17:12:57:1c:3d:
70:e0:5f:30:91:b4:b1:91:20:88:63:d7:7a:f6:f6:03:c3:39:
ad:da:85:06:58:62:d2:56:0f:cd:8c:93:b0:b8:66:df:37:d8:
97:b4:c2:64:70:55:0f:83:f9:15:fc:ba:eb:55:96:1c:51:a7:
46:5f:ba:1e:1a:53:5a:fb:b8:b6:0b:57:7a:2d:a0:c0:0d:cd:
e9:09:54:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 12:24:13 2025 by rpki-client