Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/P9QbDLGMsZgSfB4qoZM244-1xTs.roa
File: P9QbDLGMsZgSfB4qoZM244-1xTs.roa (raw, json)
Hash identifier: z5S+v5HRIbppuyVEq6OVDarDj75NRnLdl7UiAF4f22A=
Subject key identifier: 3F:D4:1B:0C:B1:8C:B1:98:12:7C:1E:2A:A1:93:36:E3:8F:B5:C5:3B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01AA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/P9QbDLGMsZgSfB4qoZM244-1xTs.roa
Signing time: Fri 09 May 2025 07:07:47 +0000
ROA not before: Fri 09 May 2025 07:07:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 07:07:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3FD41B0CB18CB198127C1E2AA19336E38FB5C53B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b2:1c:0f:fb:38:d2:dc:17:ab:e5:b2:c6:0d:
7f:54:79:58:ba:5b:f0:1e:32:21:17:02:08:1f:62:
6c:ab:9a:f8:3c:f8:3a:0a:98:e0:dd:ae:c8:7b:54:
0a:c2:2d:ac:5b:6e:dc:13:c7:a6:bc:58:34:68:59:
de:1d:d5:05:c8:fc:79:30:f8:92:2d:4d:71:f5:dd:
fa:62:58:14:32:c1:f3:9b:84:7f:33:ac:5b:07:44:
00:a2:22:c9:3b:3e:4a:87:ed:08:10:5c:17:02:38:
50:6c:c7:07:e6:7d:ec:cd:16:4f:a3:48:f5:88:ef:
9f:cb:45:9e:7e:ca:7e:f0:86:13:68:29:b2:30:34:
06:b2:ca:68:b6:69:c6:c4:9f:ee:fd:e9:d8:80:00:
6b:ad:64:97:88:1d:1c:84:93:8a:4d:16:fa:2f:16:
27:06:a2:67:c0:d0:3c:95:19:af:57:4c:fe:7c:e5:
bc:53:b9:3c:06:c3:16:d2:b4:c4:de:cd:3c:ee:37:
c5:d7:5b:15:f4:5a:93:06:d9:24:4e:94:88:39:dd:
d4:c9:f6:f6:2f:0f:ff:e0:fa:1f:a4:c3:bc:a3:ee:
87:92:29:89:cf:a8:7f:db:fc:86:18:31:85:ac:7f:
17:95:95:c7:d3:1b:ed:69:88:e8:01:2d:38:47:09:
cb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D4:1B:0C:B1:8C:B1:98:12:7C:1E:2A:A1:93:36:E3:8F:B5:C5:3B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/P9QbDLGMsZgSfB4qoZM244-1xTs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:32:f4:68:77:f8:14:4c:94:b7:29:3d:86:0f:8c:e9:b4:fb:
ba:b2:66:19:49:5d:f5:58:ae:b0:98:bf:cc:b6:0b:eb:83:13:
78:50:37:59:c2:06:6c:8f:1b:51:68:60:ee:ef:60:f0:d0:9a:
96:12:b3:84:97:02:af:ca:5d:c8:72:67:74:51:82:d0:2e:d1:
da:8d:ae:75:2f:a3:7c:be:9b:45:ba:2c:da:57:ff:5b:fb:8c:
74:d5:5e:2f:5a:02:38:dc:2f:c9:c5:2f:ea:77:10:9a:76:d8:
48:f8:06:f9:f1:b2:04:11:b1:0c:52:c6:da:34:2f:a1:a2:e6:
23:3e:78:51:19:3b:7b:06:66:2f:38:5f:dd:2c:d5:5c:ea:73:
b4:9a:57:83:64:70:3d:05:64:0a:f6:42:42:1a:74:ac:80:fb:
c9:22:51:34:fe:b2:2f:7e:f3:0d:00:97:44:e3:3e:d9:99:97:
b2:e1:8e:f3:01:7f:26:47:2a:b4:11:83:65:cd:9f:c0:dd:c3:
46:50:4a:6d:03:c9:c3:db:96:86:47:ff:fd:82:fc:13:dd:d0:
e0:d7:f8:0e:37:8e:bc:1e:a6:dc:22:6d:ba:42:73:27:63:c2:
76:76:2d:3e:0e:7a:c5:b0:db:58:a0:c7:24:23:95:6c:7e:8c:
49:f1:c9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:30:16 2025 by rpki-client