Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/YoBvBYqSAUpHXEWUAyVJoyaDrDg.roa
File: YoBvBYqSAUpHXEWUAyVJoyaDrDg.roa (raw, json)
Hash identifier: f5TAZcMx9ObYOMsOSF81rY1G96Uerc3i5UN91FdFBy8=
Subject key identifier: 62:80:6F:05:8A:92:01:4A:47:5C:45:94:03:25:49:A3:26:83:AC:38
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07D2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YoBvBYqSAUpHXEWUAyVJoyaDrDg.roa
Signing time: Sat 17 May 2025 12:08:08 +0000
ROA not before: Sat 17 May 2025 12:08:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2002 (0x7d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 12:08:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=62806F058A92014A475C4594032549A32683AC38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:50:e7:a1:f3:6d:eb:8c:1b:ff:83:5e:71:
c2:9b:4a:61:e5:91:47:39:ff:64:12:67:59:64:a9:
0e:e4:1c:5b:18:03:c0:4f:8c:9f:8b:a9:05:a1:48:
3d:f0:70:2f:d6:94:22:e6:a7:62:00:fa:c1:96:04:
fd:44:a8:05:8b:8d:b4:ca:a2:ed:38:6f:d3:f0:7e:
aa:d2:eb:9c:da:4b:2f:37:d6:fb:ed:d5:bb:e3:d1:
f9:48:dc:ca:af:72:9a:0c:69:53:30:2e:f3:c3:60:
a7:de:b0:97:31:07:4a:f1:b5:f9:a3:f0:89:4d:2b:
7a:46:f5:83:cc:3c:55:52:b6:46:14:63:b2:9f:8f:
e8:66:d3:e5:31:e9:7c:b4:f0:9d:c0:c0:3f:56:ed:
9b:8f:45:1c:a4:4f:14:ec:1b:30:32:3b:e2:c3:a7:
e1:79:24:4b:02:e7:e2:c0:a2:a9:9d:22:72:6a:bd:
2f:2a:d9:27:29:0b:c4:42:3d:4e:2a:ed:10:9b:9f:
5a:03:2c:78:af:bb:78:b9:5d:78:23:06:be:05:41:
26:f6:d4:12:49:9a:55:2f:a4:94:93:55:1f:34:38:
a8:dd:95:92:db:9f:fd:58:aa:ff:68:ca:48:8a:81:
28:05:42:1e:1f:0a:39:ba:fc:1e:ca:a8:22:35:6f:
eb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:80:6F:05:8A:92:01:4A:47:5C:45:94:03:25:49:A3:26:83:AC:38
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YoBvBYqSAUpHXEWUAyVJoyaDrDg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:2a:4e:9c:5e:02:b5:92:61:e0:79:4e:69:08:11:d1:4a:b5:
2e:ff:c2:8a:f6:02:ff:64:94:48:aa:41:29:c6:0a:1d:42:da:
b5:b8:51:7c:43:eb:cd:74:64:62:7d:92:b4:51:47:a6:2c:17:
91:55:79:f8:37:71:34:06:8b:f9:9f:3f:3d:97:da:df:9b:e5:
06:23:d6:bb:22:63:35:99:cc:d0:33:aa:cf:53:61:b5:70:28:
6d:e3:22:0f:11:25:d8:0a:a7:df:92:94:43:7b:78:86:27:ae:
39:09:80:5d:4a:85:0b:6a:7f:d8:58:c2:6f:7a:f9:44:72:15:
e9:39:88:58:66:63:22:83:90:83:66:66:5d:34:5a:93:de:6a:
3d:9c:5c:3d:ac:1a:64:64:36:5b:75:fb:61:87:6c:f4:9d:85:
93:ad:11:74:ee:61:7b:35:8c:c3:53:ad:07:0b:a7:cb:83:e6:
0d:0b:e4:2a:9a:fd:05:4a:c8:5a:50:7d:0a:f4:a3:c6:6a:97:
f1:30:6c:36:d6:db:56:c3:36:2a:f2:8c:6a:c8:8e:6a:56:ac:
d4:f7:22:ea:85:7b:41:f8:66:14:a5:51:12:17:24:96:63:13:
cb:8e:77:c4:88:6a:3d:ae:3f:6d:b9:c9:21:f4:06:e6:54:c8:
4c:02:df:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 00:48:32 2025 by rpki-client