Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Q1DTZ_Zt-fJA4mkR9cqUaFMEbEQ.roa
File: Q1DTZ_Zt-fJA4mkR9cqUaFMEbEQ.roa (raw, json)
Hash identifier: PEvUcAmYWKIZzTr0Mnv6vKfIM1VhvSx2UFs31mU96xg=
Subject key identifier: 43:50:D3:67:F6:6D:F9:F2:40:E2:69:11:F5:CA:94:68:53:04:6C:44
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0642
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Q1DTZ_Zt-fJA4mkR9cqUaFMEbEQ.roa
Signing time: Thu 15 May 2025 10:08:01 +0000
ROA not before: Thu 15 May 2025 10:08:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1602 (0x642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 10:08:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4350D367F66DF9F240E26911F5CA946853046C44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:df:a6:9e:56:89:a8:87:1b:ce:42:81:a0:0e:
20:c5:87:73:65:ff:26:c3:63:ff:1d:20:18:8a:c8:
36:ea:e3:4e:89:a8:c7:2f:fa:39:b5:b8:1a:89:26:
85:36:ba:7d:5d:8d:19:ce:37:99:4b:de:60:08:ee:
70:0c:a2:8e:72:a2:10:e1:b8:32:6b:49:e4:3d:f5:
13:43:fc:59:6a:e2:f3:f2:0b:c1:96:18:58:8b:aa:
2a:4c:50:24:ff:76:38:29:23:2f:1e:22:e6:5f:de:
70:c0:9a:e0:03:f4:99:ed:8e:92:1e:39:82:86:e4:
54:38:6a:e3:d3:79:77:ed:53:44:ec:8b:eb:22:b5:
da:0d:10:4c:e7:71:ab:36:c0:85:84:d0:19:3d:d4:
24:89:6b:53:bc:92:ca:cc:e4:5d:ad:56:b7:6c:a4:
86:f8:96:e5:77:cc:61:b7:57:ce:a0:4e:51:6e:78:
40:d3:73:01:eb:48:cb:39:3c:e5:14:88:7f:63:a8:
3e:4e:94:0e:28:1e:44:3a:89:ca:e2:1f:49:f2:4a:
de:de:c2:a9:22:31:b6:a8:d9:46:96:c4:5d:b7:87:
ea:89:de:97:d8:d4:7d:3c:72:8e:82:ac:d0:90:58:
74:f0:cc:16:5c:28:32:da:28:45:32:e5:13:52:7f:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:50:D3:67:F6:6D:F9:F2:40:E2:69:11:F5:CA:94:68:53:04:6C:44
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Q1DTZ_Zt-fJA4mkR9cqUaFMEbEQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:e5:e5:59:4e:13:7c:e9:c2:84:20:fc:5b:93:95:bb:05:bd:
8b:cc:4d:d9:f8:31:8d:38:3e:c8:33:28:54:9d:0b:d9:a7:12:
8a:46:c7:d2:ab:7e:33:76:f1:34:29:37:5a:a1:6f:43:08:c2:
e5:39:04:02:ec:8a:5e:5c:0c:4d:eb:20:58:e1:62:e2:ca:3c:
2e:c7:e1:8a:9b:a1:27:ed:8a:88:bd:9f:22:93:32:1d:65:38:
7e:4f:bd:42:2f:d1:7e:bb:71:9a:cc:aa:fb:8d:28:4c:39:2e:
83:58:96:e2:a5:9d:8c:c9:ca:1f:d0:43:d8:20:4f:87:63:fa:
c7:5d:90:2a:d2:a7:79:e9:94:8d:69:eb:6c:cf:6f:f4:be:0b:
4b:bf:ac:cb:3c:6b:e4:b3:fe:75:36:0d:b3:f7:0b:07:ba:b9:
c4:75:ae:5c:bd:70:3d:87:d6:c8:48:7c:99:d0:a5:63:9f:86:
40:46:1f:79:da:22:8d:d9:0d:a8:e0:e8:61:7d:1d:f9:62:6a:
2d:1a:e5:e8:8c:c5:df:2e:14:0f:62:ca:6a:19:ab:41:c3:83:
b1:98:e6:61:87:fb:41:cf:e8:99:e1:95:ba:7d:38:22:91:9e:
52:36:00:2e:ec:c8:1d:e0:18:54:72:4e:77:36:b8:b5:6f:8c:
60:b9:8d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:49:59 2025 by rpki-client