Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/YoUJwxI9zKgbGYqWIgpmdnCQ4Ps.roa
File: YoUJwxI9zKgbGYqWIgpmdnCQ4Ps.roa (raw, json)
Hash identifier: ZOWexXQboDSUb67rw+qI73D+GC0pW0j70I6nU5xB8LE=
Subject key identifier: 62:85:09:C3:12:3D:CC:A8:1B:19:8A:96:22:0A:66:76:70:90:E0:FB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0242
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YoUJwxI9zKgbGYqWIgpmdnCQ4Ps.roa
Signing time: Sat 10 May 2025 02:07:49 +0000
ROA not before: Sat 10 May 2025 02:07:49 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 02:07:49 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=628509C3123DCCA81B198A96220A66767090E0FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9f:2f:5c:3c:10:56:33:35:4d:a3:43:69:5e:
3d:74:b3:34:1d:d2:46:04:4c:f0:09:c6:65:d0:ac:
b4:4a:f1:10:d0:7f:f2:31:2d:28:72:d3:43:85:68:
0b:e8:13:1f:42:d0:a1:51:df:17:7f:1f:4f:d6:0a:
43:0a:1f:c3:d8:8e:44:6b:55:b0:40:46:00:90:dc:
21:08:2f:93:e3:60:a5:69:48:10:a1:a6:79:17:5c:
e7:df:e9:cc:1d:23:f3:1b:20:7c:88:4b:39:1f:f0:
dd:17:0d:97:6e:14:13:aa:83:b0:83:b2:94:29:15:
c4:38:02:6a:c9:96:70:d4:90:5a:da:49:d0:ef:ce:
b1:d6:20:0f:27:6a:d4:9b:6a:43:13:19:1c:e3:d6:
ee:c7:a0:60:11:98:02:3f:a2:1f:53:ea:6a:f9:c1:
63:e5:d7:34:d5:95:48:37:e1:5b:5a:8c:12:ab:53:
30:f4:80:00:be:d3:55:c0:7d:17:38:ec:6d:8d:f0:
e2:bb:d5:d0:a0:5a:24:cc:0e:76:74:34:5f:95:2c:
db:ee:e5:ba:3b:12:21:5d:d8:1a:3e:ac:d8:ac:10:
5e:e7:46:f0:53:3d:40:81:ef:f1:68:50:77:69:15:
a2:6f:ef:4c:28:12:fa:0d:1d:b2:7c:b3:46:47:c1:
d8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:85:09:C3:12:3D:CC:A8:1B:19:8A:96:22:0A:66:76:70:90:E0:FB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YoUJwxI9zKgbGYqWIgpmdnCQ4Ps.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:b0:bc:87:ee:22:e9:18:47:ad:7a:f4:67:a0:23:99:75:79:
8e:48:e3:fd:69:9c:8f:f6:4f:aa:d9:c1:2f:f4:13:2d:74:fa:
32:58:fb:64:2c:4f:40:b1:2f:ee:05:1b:1f:f0:0b:97:71:eb:
fd:df:51:83:60:31:be:8b:72:70:50:53:80:02:07:47:6e:3a:
d0:2a:1b:5e:dc:05:1a:69:41:4e:9a:8c:12:64:ab:0b:a9:71:
65:ff:dc:c0:f1:4d:5f:47:60:3f:61:8b:92:bd:df:46:85:7d:
d7:ba:e9:57:07:47:f2:7f:a9:ab:2f:09:2a:c3:30:a3:21:02:
b2:c2:b3:67:96:61:80:0e:4c:61:58:ed:d2:b2:ab:06:8b:9f:
89:60:0b:a3:54:31:de:d1:bf:bc:ba:a3:30:c3:62:fa:90:39:
6b:ef:5f:64:2c:12:c6:75:57:66:32:74:cb:03:75:ff:5a:85:
84:77:1c:ef:cf:10:54:fb:ad:15:c0:9d:15:8c:89:07:66:1b:
68:d9:e3:68:6f:32:7b:e0:44:56:7e:51:4e:ed:de:d9:62:5b:
c2:e9:88:65:a1:52:94:2d:f8:b9:6b:96:97:61:28:f1:04:4e:
87:9d:b8:0f:ab:61:48:5b:ab:f2:6a:bd:19:87:69:39:96:ef:
1a:44:2c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:30:19 2025 by rpki-client