Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Qb_fvIz8NCmCZyVBpE0uQNfQ8so.roa
File: Qb_fvIz8NCmCZyVBpE0uQNfQ8so.roa (raw, json)
Hash identifier: kDoPzo4zeAyAuGQdNe9sbE2lkFKdtHZG8SoQ/ZqxUBo=
Subject key identifier: 41:BF:DF:BC:8C:FC:34:29:82:67:25:41:A4:4D:2E:40:D7:D0:F2:CA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04D2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Qb_fvIz8NCmCZyVBpE0uQNfQ8so.roa
Signing time: Tue 13 May 2025 12:07:59 +0000
ROA not before: Tue 13 May 2025 12:07:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1234 (0x4d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 12:07:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=41BFDFBC8CFC342982672541A44D2E40D7D0F2CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:19:48:c5:21:33:9c:7a:f2:70:42:b5:69:
61:a2:5e:68:bb:37:37:4d:66:91:dd:5d:d1:fe:a5:
86:cb:85:25:4f:11:0d:9e:7d:fd:b3:31:e6:a8:ef:
e1:53:cc:a5:78:7e:f4:16:5e:d6:4a:9f:1a:49:58:
6b:0e:c0:46:96:ce:a6:5c:e6:57:a6:a7:78:16:89:
9f:62:d8:09:fc:a1:9a:64:f4:ae:86:ac:35:4c:cf:
31:e9:fd:84:cf:ed:86:e9:1e:d3:3a:fb:5f:6f:3a:
81:03:2d:ff:74:da:33:c6:24:9e:48:3f:08:55:68:
b1:a3:27:87:5f:8e:5f:bd:17:db:60:0d:89:50:28:
93:0b:33:2a:d7:a4:c3:b7:70:8f:a5:78:a2:b9:9a:
fd:c7:17:b9:76:07:40:ab:29:a2:57:ee:0d:50:cb:
47:22:77:38:6c:40:9e:61:f1:49:45:e8:2c:ce:96:
bb:18:36:60:ed:ea:2a:ad:44:ed:ce:ba:a4:d5:0d:
01:07:79:50:3a:97:e0:5f:11:bd:b3:8d:d5:ac:e7:
4a:73:12:18:56:d4:56:db:60:2f:1d:3f:d6:2f:38:
29:8d:e8:a7:bb:f9:a1:90:ee:e9:24:80:42:b2:0b:
a1:49:e2:1e:39:73:58:70:c4:c5:57:50:9d:0d:a7:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BF:DF:BC:8C:FC:34:29:82:67:25:41:A4:4D:2E:40:D7:D0:F2:CA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Qb_fvIz8NCmCZyVBpE0uQNfQ8so.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:7a:21:34:f0:75:d1:6a:2a:3c:87:20:c9:27:92:07:46:9a:
16:bb:e0:e8:72:62:31:1c:da:7a:b7:c4:c9:63:c4:d2:8c:08:
6a:2b:b2:97:7c:e9:b5:13:4f:36:b2:90:27:94:04:f8:15:82:
dd:14:78:59:84:61:10:25:f7:a6:13:7b:62:7f:5e:94:40:b5:
ba:5f:3f:90:ff:4f:8a:22:8f:ee:d4:35:62:13:72:79:19:6c:
8e:52:e2:db:de:9e:3e:87:e1:51:6d:4d:86:46:21:6b:ec:da:
58:13:77:f7:2a:59:08:43:5d:7b:50:c8:05:63:e8:1f:bf:5f:
c2:38:d5:dc:5d:b5:06:21:9d:32:ed:d4:45:39:c2:80:8e:43:
67:bf:e4:da:17:d6:40:37:09:a3:f8:fd:a0:6b:11:8f:9e:1b:
71:b8:a4:d1:fe:c1:02:e3:52:7a:7a:95:f1:07:8c:93:c0:c8:
24:ea:5f:a0:46:9e:09:b2:f2:f3:18:3a:18:54:cc:6e:88:1d:
7f:0a:9e:d7:fd:f9:25:78:cd:96:84:1d:3e:52:43:d8:9e:c6:
30:da:b8:29:55:31:32:6a:70:e1:b3:11:9a:90:95:12:19:e6:
84:04:18:21:8a:4e:f8:fe:e8:c1:97:4c:7f:c1:1e:d5:c9:52:
3a:51:21:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:48:57 2025 by rpki-client