Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/UWeSb_j8wfz5OzAyfG6ztee1Qvo.roa
File: UWeSb_j8wfz5OzAyfG6ztee1Qvo.roa (raw, json)
Hash identifier: uekxIAM3luu8kEs2vI+q0kzpx8Fz6Rnzp6GcBW4ES8s=
Subject key identifier: 51:67:92:6F:F8:FC:C1:FC:F9:3B:30:32:7C:6E:B3:B5:E7:B5:42:FA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 02DA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UWeSb_j8wfz5OzAyfG6ztee1Qvo.roa
Signing time: Sat 10 May 2025 21:07:50 +0000
ROA not before: Sat 10 May 2025 21:07:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730 (0x2da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 21:07:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5167926FF8FCC1FCF93B30327C6EB3B5E7B542FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:6e:2f:ea:22:4f:1e:02:ec:70:08:d5:9c:
14:c4:b3:ec:96:14:df:de:1f:68:3a:00:7a:f4:8b:
04:26:31:90:95:88:f3:53:1d:bd:e7:28:92:1c:71:
5f:3a:2b:f3:65:9b:d2:2b:e6:7f:70:7c:a9:ea:1e:
a9:f8:17:4b:75:2b:6a:b6:ab:6c:c4:0c:87:81:4c:
c4:d4:ca:6e:da:9b:3c:bc:8d:ff:9e:25:a9:32:e4:
f7:e4:df:a1:cc:22:ef:0b:be:15:bd:26:55:3b:4b:
d5:67:c7:85:a5:cd:7d:c9:86:1d:c5:0e:cc:9a:c4:
b3:ae:28:a0:03:ee:8c:b7:fd:27:7d:58:97:d1:9d:
7b:e7:87:00:30:e2:30:5b:9e:4d:bc:3a:19:fe:2d:
59:44:92:b1:99:30:d3:aa:04:81:8c:9a:e8:43:9f:
ad:82:44:ab:e9:4a:3e:7b:28:eb:9f:17:35:6e:8c:
74:e5:40:1e:39:68:be:a8:15:9b:15:b2:29:be:3d:
68:25:08:ba:8c:ce:ca:b9:6c:85:a1:22:34:ad:1e:
ed:22:46:01:e1:9f:91:2f:e0:e3:03:69:a5:13:c8:
a3:61:8a:7a:9d:b8:63:2b:f9:ff:84:9c:6a:25:5c:
20:2c:6b:45:1e:0d:16:2e:9d:5d:a5:de:60:84:88:
25:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:67:92:6F:F8:FC:C1:FC:F9:3B:30:32:7C:6E:B3:B5:E7:B5:42:FA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UWeSb_j8wfz5OzAyfG6ztee1Qvo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:1e:d1:5a:4f:e3:3d:69:d7:b4:62:30:95:eb:26:b7:55:b3:
08:b2:c4:a3:68:72:4c:e8:76:50:2f:81:14:02:f3:e9:25:36:
e6:d7:b5:36:63:df:58:e6:6a:36:aa:79:e3:f1:eb:07:65:b3:
ef:fb:26:e9:2f:7f:2b:44:79:d3:20:b5:6a:c8:ea:fb:27:0a:
d3:63:61:c8:4d:9f:20:9c:07:b7:5f:38:3c:b7:5e:90:c3:41:
d2:7d:e4:a3:e1:54:d6:63:60:9f:01:70:26:26:45:bc:5d:00:
d0:d2:25:c9:ea:55:b7:3c:53:1c:a2:47:00:42:a0:89:12:2b:
eb:24:fd:4b:85:60:4f:fd:78:0e:46:c4:d3:d5:27:25:24:eb:
c9:6a:f5:17:04:b6:9f:a7:bb:9c:e5:ae:d4:af:7c:b6:2b:25:
ce:4f:84:01:5f:50:8b:ae:6e:50:58:86:e2:66:7f:1b:0b:76:
af:d8:e1:17:c4:41:96:a0:8c:1a:cd:87:29:42:f6:f9:73:05:
0d:a1:ed:29:e4:53:b6:77:14:1c:a8:35:fa:62:64:d1:2c:cb:
3d:fd:e7:86:57:c9:79:9f:d1:90:34:0a:8c:e5:2b:f4:dc:02:
3c:da:da:12:fe:e6:70:3f:5e:36:3d:0c:99:a8:cf:7b:dd:bb:
b1:1f:cb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:31:01 2025 by rpki-client