Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/RkrtpjqP8sHWJ3NM_8z11ht4pwA.roa
File: RkrtpjqP8sHWJ3NM_8z11ht4pwA.roa (raw, json)
Hash identifier: kpHjsN7M6v5xVKmkvqygoLmdmgTONPxPkWQqTvWYph4=
Subject key identifier: 46:4A:ED:A6:3A:8F:F2:C1:D6:27:73:4C:FF:CC:F5:D6:1B:78:A7:00
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 06A6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RkrtpjqP8sHWJ3NM_8z11ht4pwA.roa
Signing time: Thu 15 May 2025 22:38:02 +0000
ROA not before: Thu 15 May 2025 22:38:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1702 (0x6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 22:38:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=464AEDA63A8FF2C1D627734CFFCCF5D61B78A700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:ab:c9:a0:de:66:4d:05:de:65:d0:2b:3e:
e8:85:46:e8:80:3d:39:b6:6b:8d:58:f9:4f:4c:49:
89:d1:23:21:e4:22:17:33:91:cd:d6:c4:ba:8e:be:
fe:f7:2c:82:e5:73:c8:03:19:46:c8:4a:a4:fc:4f:
82:6b:74:17:c1:94:25:5a:3a:4e:f1:72:a5:af:e0:
59:45:7c:cc:7e:03:2e:8f:4d:97:26:b3:e7:de:f4:
64:f6:aa:09:39:0a:b9:f6:03:6f:65:86:90:84:84:
3f:bb:d2:04:d8:0e:05:d9:13:1c:a2:09:f7:83:ac:
67:33:e6:6d:ef:1e:f0:76:43:dc:b9:32:a4:77:67:
b1:a8:e6:62:1b:65:9f:68:83:30:c0:b7:1d:fb:d9:
68:30:9b:c2:a8:a8:c3:50:99:7f:b6:52:4b:ca:52:
c6:58:91:4c:04:bc:64:83:16:be:aa:be:02:47:72:
53:7c:98:e7:27:8a:8d:32:ce:de:fc:02:cf:eb:9d:
fd:65:94:8c:52:cb:36:02:e8:fb:a8:a8:62:fa:ca:
ea:63:3e:a5:96:93:30:b2:ad:a6:45:4f:65:9d:02:
a1:50:49:0c:eb:1d:a7:b3:a4:9e:ea:dc:09:21:32:
11:6f:bf:4a:28:60:c7:2a:f7:34:14:89:ac:b4:e6:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4A:ED:A6:3A:8F:F2:C1:D6:27:73:4C:FF:CC:F5:D6:1B:78:A7:00
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RkrtpjqP8sHWJ3NM_8z11ht4pwA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:59:90:fa:19:35:8e:b5:e3:26:ee:be:e8:f1:50:57:88:de:
b0:9d:f9:f5:00:bb:ba:7d:27:84:51:5c:60:ed:02:83:00:36:
6d:ca:15:d0:50:b0:fd:a3:75:70:37:8a:d2:81:ff:55:2a:95:
42:6e:61:4e:f4:e0:88:9c:59:99:a9:d5:c5:1e:51:f8:14:43:
b1:ee:41:c4:bb:22:47:c5:f7:2a:4f:d2:43:6e:dc:e9:31:c8:
df:7d:d2:2f:4f:8d:31:bc:e4:11:2c:ac:d6:5f:60:30:42:35:
c1:bb:4d:8f:c9:88:a9:09:2b:e3:7d:c1:0c:eb:88:79:fd:30:
ae:05:ab:43:2d:85:f0:f8:18:a8:47:24:d6:2b:b6:4f:65:cc:
6f:f0:d3:fe:9b:3c:7d:5a:05:92:72:55:1b:d9:d6:49:c7:f4:
1f:6e:a2:53:07:62:c2:a4:af:9b:ed:c2:0c:d4:8e:b1:e2:b7:
fa:22:42:e4:02:45:0c:16:82:63:2a:63:c5:40:88:8c:a3:a4:
56:9a:18:22:8c:f9:2b:61:70:b1:a8:14:5e:7c:77:b9:b4:f2:
ec:a1:f9:c3:e1:c3:3c:1a:37:72:c1:a9:d0:3c:4c:74:71:9b:
47:75:b4:e2:7a:f6:04:49:62:09:10:99:a6:93:89:9b:c3:00:
69:d5:da:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:36:38 2025 by rpki-client