Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/SUCbJQAde3YGtqRS10jsXopV9fQ.roa
File: SUCbJQAde3YGtqRS10jsXopV9fQ.roa (raw, json)
Hash identifier: LVSqitMCdByL6U0C4t3mQ07hNgSqM78Li/Ze+pKp0fQ=
Subject key identifier: 49:40:9B:25:00:1D:7B:76:06:B6:A4:52:D7:48:EC:5E:8A:55:F5:F4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0726
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SUCbJQAde3YGtqRS10jsXopV9fQ.roa
Signing time: Fri 16 May 2025 14:38:12 +0000
ROA not before: Fri 16 May 2025 14:38:12 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1830 (0x726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 14:38:12 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=49409B25001D7B7606B6A452D748EC5E8A55F5F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:ce:a7:ac:75:52:f6:be:6b:51:54:cf:f5:
83:92:ff:e2:59:bf:68:8c:fb:05:bf:d6:d1:d9:ab:
1b:51:22:94:cd:34:53:e7:59:22:ad:23:bc:e3:70:
f9:82:f9:66:06:35:b5:29:88:cf:a4:92:73:15:66:
55:b9:ed:37:f3:a4:8a:a0:13:e6:2e:62:ca:10:7b:
d8:51:96:39:f5:55:37:a8:23:e8:85:90:84:29:7c:
99:63:7b:61:7d:4d:da:3e:f5:e9:f5:fa:22:55:82:
31:9b:ff:dd:23:5e:44:92:14:df:0f:54:d1:50:1f:
ff:3a:5b:02:34:bf:5a:16:8d:86:3e:9d:96:50:a3:
cc:56:c3:43:6c:fa:fa:60:f9:a0:f8:d6:1a:5e:a2:
20:7f:4a:21:e8:db:ed:2d:63:10:de:49:32:0e:13:
87:3e:02:ee:18:4d:27:d7:0d:ba:b9:55:73:b1:7b:
71:01:0d:03:94:85:4a:66:63:8e:ba:65:20:c6:d8:
bf:04:15:19:7b:4a:ee:ce:d9:85:57:e0:bd:97:13:
38:bd:e5:96:c3:80:33:a8:db:e0:f2:a0:ee:61:a7:
2e:89:a4:ca:11:dd:89:5f:0f:f1:72:f9:86:36:08:
c2:ef:8a:39:37:52:64:09:e0:b4:1f:57:7e:f0:79:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:40:9B:25:00:1D:7B:76:06:B6:A4:52:D7:48:EC:5E:8A:55:F5:F4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SUCbJQAde3YGtqRS10jsXopV9fQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:c7:7c:17:8d:0d:9f:f4:cd:4c:4b:9b:4b:8f:42:35:90:53:
37:27:ef:dc:27:0e:1b:f4:67:9b:71:f3:4c:5c:d3:d8:66:69:
66:2b:5f:b6:c9:37:aa:f2:8f:0a:7d:6e:dc:11:83:c3:cc:d0:
ec:cb:ec:5e:86:95:3e:96:6f:49:58:2b:14:ab:cb:93:13:30:
dc:6e:d0:52:60:fd:a6:a0:b0:bd:93:c2:3f:7d:52:e3:41:0a:
b2:e7:3d:27:57:66:ae:89:31:a3:2f:9c:10:93:f2:3d:ee:ae:
93:53:d1:29:ae:e9:5d:ff:c6:ca:7f:fe:49:a6:8f:b3:92:fe:
a1:67:e2:4d:5c:17:86:57:32:8c:73:f0:0c:ba:24:b2:be:bd:
a1:b6:4b:01:af:37:41:00:ac:93:aa:a6:33:d8:23:06:cd:4e:
0d:00:65:30:70:e2:e5:b4:a9:97:83:80:4b:e5:76:da:94:41:
ad:5d:e1:6d:94:57:4b:0d:e5:a2:1f:81:d0:eb:d5:e1:00:dd:
a4:94:1e:aa:01:b3:4a:98:91:d9:5c:77:3f:6a:ac:23:43:97:
58:0a:a3:64:b1:58:fa:44:a2:e1:bb:fe:6e:72:60:d9:d8:c7:
97:47:14:a1:62:74:9e:4d:e9:59:72:db:25:cd:39:e8:8e:ab:
3b:89:a5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:03:55 2025 by rpki-client