Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/VIqhx0ZYdTkaz8gTKBRpGUqFp2o.roa
File: VIqhx0ZYdTkaz8gTKBRpGUqFp2o.roa (raw, json)
Hash identifier: qvrAxQgIKTAP2icbdG4yq2FvqoisOMrNRdztsAgGEJA=
Subject key identifier: 54:8A:A1:C7:46:58:75:39:1A:CF:C8:13:28:14:69:19:4A:85:A7:6A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0506
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VIqhx0ZYdTkaz8gTKBRpGUqFp2o.roa
Signing time: Tue 13 May 2025 18:37:59 +0000
ROA not before: Tue 13 May 2025 18:37:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1286 (0x506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 18:37:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=548AA1C7465875391ACFC813281469194A85A76A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:96:b8:1e:3d:21:98:07:d4:47:8d:37:8a:
35:2f:d9:3b:ba:27:d2:d9:90:42:ff:16:01:05:65:
5b:56:38:58:fe:b3:7e:e0:81:bf:1e:db:fc:c7:36:
7f:ff:d2:cd:0b:0f:61:07:4d:4b:a5:e6:17:0c:be:
76:c7:8d:af:c7:4b:c5:3c:f3:42:2f:0a:2e:45:dc:
5a:9c:2e:f9:af:84:b4:7d:9e:27:d5:5a:f5:9b:df:
5b:54:b8:4d:33:52:e3:3a:e5:20:17:57:ce:c8:11:
ef:5a:28:4a:d4:60:0c:d1:11:25:0f:19:08:07:6b:
c9:f6:4d:a8:ec:01:40:c2:b0:a9:13:07:69:70:1a:
95:ab:4d:50:85:a5:89:59:a4:75:8c:4c:71:1a:fb:
e2:5d:70:db:eb:c5:a8:5f:63:39:d5:fa:95:7d:9f:
dc:8e:67:83:c1:39:0f:72:39:a9:03:21:33:89:ae:
02:4a:f1:29:07:36:38:e1:25:ce:7e:40:fd:75:02:
f5:08:67:74:70:fe:d2:0d:31:84:48:58:d2:bf:2d:
14:59:70:e1:55:b4:ef:9b:d7:a2:65:cb:0c:d8:bb:
70:e9:4c:2d:ca:4e:58:fe:46:96:51:75:a9:6d:fe:
0e:ec:b2:52:31:a1:ea:d8:92:e2:34:57:fc:f0:ff:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8A:A1:C7:46:58:75:39:1A:CF:C8:13:28:14:69:19:4A:85:A7:6A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VIqhx0ZYdTkaz8gTKBRpGUqFp2o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:e5:f8:6e:08:48:71:c6:f1:09:8c:39:be:aa:e9:8e:9e:4c:
eb:ac:48:d0:ac:d5:13:05:7d:37:52:ac:38:be:62:5a:81:bd:
c3:4c:ee:5d:45:1c:23:2d:ec:4f:d6:51:c4:c5:bd:27:4b:6f:
85:4e:a3:be:30:0a:9d:08:f1:1d:18:d1:05:cf:eb:31:6d:6f:
01:a8:44:63:89:06:23:19:63:cd:b2:90:5c:86:5b:c1:d3:15:
bb:1a:53:8c:30:d5:33:91:3b:a6:dd:16:79:5c:a0:27:4d:cf:
fb:10:ba:0d:07:60:f0:aa:d2:25:4a:db:e8:68:c7:b2:12:c1:
23:c3:62:97:cd:16:c3:f7:47:7f:9a:f9:3e:83:85:63:e9:4c:
e5:2b:ee:b6:96:61:89:e4:bb:01:88:66:8c:e4:5a:dc:c6:ce:
ac:b6:de:97:09:0d:28:ad:02:7b:52:ce:5b:50:0e:38:23:32:
a8:86:97:60:37:c9:53:48:6c:81:1c:1c:22:92:3b:78:e6:59:
ae:96:cd:b9:d9:a3:4b:ea:ca:8b:a4:ca:02:9e:19:9a:65:1f:
21:92:46:e9:6e:8e:45:4f:7a:9e:eb:bb:ee:ec:a0:bc:11:0d:
41:58:61:39:ef:46:a8:da:d5:3a:fd:36:45:43:db:7d:b0:88:
08:3b:f2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:06:22 2025 by rpki-client