Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Y-2RDepNY05WYTNob9xr-NXVBp8.roa
File: Y-2RDepNY05WYTNob9xr-NXVBp8.roa (raw, json)
Hash identifier: yzvjHdPkYQP8HkgF9TrAXeiquxZq3oS9E+177L3r8zQ=
Subject key identifier: 63:ED:91:0D:EA:4D:63:4E:56:61:33:68:6F:DC:6B:F8:D5:D5:06:9F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 072E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Y-2RDepNY05WYTNob9xr-NXVBp8.roa
Signing time: Fri 16 May 2025 15:38:04 +0000
ROA not before: Fri 16 May 2025 15:38:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1838 (0x72e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 15:38:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=63ED910DEA4D634E566133686FDC6BF8D5D5069F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:93:be:df:d2:e9:87:7a:42:4f:b3:f6:09:1c:
9d:45:7e:98:25:77:84:a2:55:83:96:76:24:3e:d6:
88:04:4f:84:38:ec:00:5d:48:4d:ba:45:69:b9:67:
42:bd:61:6a:84:01:fe:a1:08:97:f4:77:01:10:48:
ce:0f:dc:21:eb:73:e9:60:2c:55:63:03:47:c6:a6:
f5:b9:87:5f:54:db:f7:35:f3:96:93:aa:ef:3a:9a:
8b:a5:80:c2:99:56:17:a1:10:e6:f7:fc:54:65:b7:
88:5e:64:a6:c8:89:be:b8:de:82:58:d4:5d:61:ed:
70:76:b0:88:78:9f:a0:3b:36:8f:b1:19:65:3b:3e:
86:a0:6f:74:44:79:1a:00:5b:74:7d:07:bf:c1:d5:
0b:74:f2:19:67:cf:5b:aa:bb:bb:45:e9:42:48:8a:
0c:c5:ce:32:b4:30:91:f4:1b:0d:4b:02:9d:fa:70:
cd:60:75:2f:62:de:e3:0b:0c:a2:a3:55:e6:88:c8:
d7:9c:15:cf:9e:a7:b4:fb:1c:ef:40:c8:72:42:4d:
cd:4f:d2:da:9e:fd:ca:73:2c:3f:1e:e9:a9:da:9d:
2d:02:62:28:d4:9a:ea:6f:b4:e9:2e:3e:e3:a5:51:
5d:a8:16:1c:74:1a:14:f5:be:52:e9:4e:d6:e3:b1:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:ED:91:0D:EA:4D:63:4E:56:61:33:68:6F:DC:6B:F8:D5:D5:06:9F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Y-2RDepNY05WYTNob9xr-NXVBp8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:27:47:cd:7e:bb:df:78:20:33:1f:7d:33:60:55:75:26:7c:
19:a2:a3:40:20:a5:40:12:04:e7:4f:13:9a:3a:85:1f:7f:c7:
08:81:78:8f:88:53:67:ea:0e:9d:94:2d:fe:cd:4d:3e:9a:2a:
3b:e5:ac:d0:3f:6d:b3:96:4d:14:ba:b4:1f:13:52:c9:1b:d6:
1e:43:3d:c7:97:9e:a4:c0:4f:c8:68:3b:f9:c5:f6:11:ad:bc:
03:27:aa:f2:36:ae:14:71:b0:94:42:66:71:04:bf:5f:ff:68:
ce:ac:56:71:54:3a:f8:b8:e3:78:33:45:ef:cb:0d:40:d5:5e:
03:bd:6a:7a:ce:6f:72:af:d2:4a:c0:25:61:ec:6f:ce:ab:4c:
18:e6:05:f8:79:8a:da:cc:e7:28:c4:6e:f6:0a:4f:22:49:39:
68:a3:42:c3:7a:4e:b0:31:de:59:76:ef:a7:35:dc:02:11:80:
7f:74:26:bd:b1:32:0d:58:c0:ba:c5:b9:97:fc:87:38:ca:5d:
5a:d4:79:ef:3b:cc:75:30:f4:1b:cc:60:99:ed:c1:cb:b6:86:
e3:cf:44:6c:54:ba:84:c8:ca:84:5f:e7:9a:94:01:8b:03:44:
cf:75:ad:d9:f2:3d:56:82:77:a4:81:1f:2f:6a:de:08:db:c8:
7d:3f:2b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:14:11 2025 by rpki-client