Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Sn8_PVsMRAg3QLx7NsVXWI6KSAo.roa
File: Sn8_PVsMRAg3QLx7NsVXWI6KSAo.roa (raw, json)
Hash identifier: 4GaCO9dZfeGyRTBydoQVBPJCi5DtmUqQDPN6+Ktp6BQ=
Subject key identifier: 4A:7F:3F:3D:5B:0C:44:08:37:40:BC:7B:36:C5:57:58:8E:8A:48:0A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0546
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Sn8_PVsMRAg3QLx7NsVXWI6KSAo.roa
Signing time: Wed 14 May 2025 02:38:03 +0000
ROA not before: Wed 14 May 2025 02:38:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1350 (0x546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 02:38:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4A7F3F3D5B0C44083740BC7B36C557588E8A480A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:06:86:18:5a:5b:0a:3e:58:f9:b2:c1:3d:
b4:3f:ad:a5:70:2f:33:53:52:f8:43:69:f3:c5:b0:
e4:57:91:e0:7e:ef:63:5f:b1:e6:96:bd:8d:4e:6f:
61:2f:1a:f4:9f:bc:cf:aa:5d:4e:63:2e:2a:68:1f:
f2:b2:c9:9b:31:9c:92:ed:5a:61:c1:21:7a:c2:a2:
be:6a:17:17:9a:ed:7a:58:73:e3:7b:bb:90:23:58:
dc:2d:21:db:70:56:bd:ac:92:fa:ea:a8:7f:4a:78:
49:d7:28:fa:ba:d2:63:c1:30:4d:e8:a9:85:c3:53:
74:ab:ea:74:24:f1:73:90:0a:2f:c8:e7:d3:30:50:
5d:c0:3f:92:e4:b3:35:91:24:a3:00:eb:10:32:11:
d3:bc:54:14:fd:98:ab:f3:a1:fc:c1:3b:a4:aa:50:
08:74:5a:70:e5:6c:54:83:06:e1:42:9c:02:a1:36:
7a:71:e5:2f:e4:94:7b:03:b5:67:26:aa:0f:71:42:
bd:c6:44:d2:b4:03:85:63:73:33:54:84:62:81:ec:
d6:2d:ef:62:60:9b:94:68:af:05:d1:8a:b7:1c:96:
08:8c:24:4c:41:c0:3d:30:a0:72:41:84:e5:e9:fa:
fd:b1:b5:0f:fb:13:61:d5:63:98:d2:a6:e8:cb:48:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7F:3F:3D:5B:0C:44:08:37:40:BC:7B:36:C5:57:58:8E:8A:48:0A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Sn8_PVsMRAg3QLx7NsVXWI6KSAo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:4a:b7:93:21:be:ce:39:72:9c:14:a1:46:bc:69:7b:92:59:
f3:9b:8f:26:07:f8:64:e5:21:aa:ed:e5:ba:0f:38:6b:e6:d8:
d6:75:1b:df:2d:a5:68:bd:1f:ee:94:4f:58:b7:e9:7d:20:4a:
74:e4:10:b4:9b:d7:77:fc:d3:23:9e:7c:0d:4d:05:b5:5e:a5:
c6:2b:f8:16:c2:4e:11:5a:4f:3a:ab:c0:06:2a:7e:36:ef:bc:
1c:77:73:21:d2:02:7a:36:5e:e2:f1:43:40:b8:55:28:d3:4f:
0f:63:28:a0:2b:1c:55:db:ee:25:cd:0f:73:12:45:e0:e1:c3:
16:8f:3f:25:ce:7f:09:2f:2b:6f:82:fc:f5:27:0c:0f:08:20:
24:1d:96:5a:c2:38:23:94:65:9d:79:bc:6d:2a:9f:56:ba:23:
3a:f5:d2:e4:44:96:d7:d2:0e:2a:30:1f:d8:1a:df:72:d3:70:
b3:95:22:32:0f:a0:04:e0:0f:bb:20:af:ea:76:a2:ec:ed:0b:
2f:87:8d:50:58:03:4d:50:80:56:11:50:18:da:61:2c:05:3a:
f4:e4:db:34:d3:1f:aa:07:53:d6:6e:35:ca:d8:56:60:0c:7a:
15:fb:05:7d:ac:31:9f:14:d3:77:12:a9:83:b9:37:e3:0e:a7:
6c:f5:83:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:41:17 2025 by rpki-client