Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ZPHUQeVZMwjmfD3KUtziS0uAHdk.roa
File: ZPHUQeVZMwjmfD3KUtziS0uAHdk.roa (raw, json)
Hash identifier: as8VEvXKxYh28WKXkA8B15HO9/Ow0STGSXkGvFNekE4=
Subject key identifier: 64:F1:D4:41:E5:59:33:08:E6:7C:3D:CA:52:DC:E2:4B:4B:80:1D:D9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 02D2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZPHUQeVZMwjmfD3KUtziS0uAHdk.roa
Signing time: Sat 10 May 2025 20:08:10 +0000
ROA not before: Sat 10 May 2025 20:08:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722 (0x2d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 20:08:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=64F1D441E5593308E67C3DCA52DCE24B4B801DD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:e0:95:85:22:76:08:f5:2a:e8:9d:1a:a6:
67:6d:cd:a0:13:d1:42:78:9a:25:75:80:56:97:bc:
c6:43:fd:40:27:b9:46:eb:69:e0:11:e6:9e:b9:ba:
a0:6b:d8:52:c2:37:59:c7:89:1f:30:da:16:c8:60:
90:a4:06:ab:ab:0e:f3:91:4f:34:53:00:48:de:d1:
33:64:02:9c:27:ad:6e:72:2e:dc:25:1b:01:42:fc:
cf:43:ae:17:18:3a:f7:74:2c:92:f1:97:68:b8:93:
40:44:45:f4:c6:f2:49:d6:52:f9:b6:61:1d:39:16:
7e:e4:e3:ea:9c:53:6f:43:c3:07:c9:71:83:ca:0b:
bc:e8:9e:fb:61:b6:a9:72:53:1c:67:4e:37:0c:84:
03:c5:68:05:23:e1:eb:aa:6c:11:4b:9f:cd:ab:8c:
ee:b0:41:4c:15:7b:5e:3e:80:bc:de:08:37:b3:51:
48:35:d9:e8:ac:85:80:e4:bd:1d:8b:0c:7a:67:4f:
e4:6a:ef:0a:31:6f:a7:4a:c3:74:0b:a7:ef:a8:c7:
dd:5c:e1:66:36:8d:4f:fd:bd:bd:26:ab:4c:6e:32:
87:1d:fd:bb:8b:16:ab:97:e9:65:ca:a4:60:04:25:
92:1f:a3:77:54:df:14:b4:b8:7c:ef:e6:8c:8d:4a:
c4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F1:D4:41:E5:59:33:08:E6:7C:3D:CA:52:DC:E2:4B:4B:80:1D:D9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZPHUQeVZMwjmfD3KUtziS0uAHdk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:76:ed:a9:3e:60:0d:7d:3c:a8:66:9d:bb:c5:9e:b9:ca:5b:
61:cb:31:97:60:7a:71:ca:e4:47:e4:7d:fb:7e:de:89:e2:48:
45:a2:4b:7a:19:3f:cf:3e:69:0d:48:d5:5c:d2:f5:23:e3:a1:
1a:47:c8:5b:e5:9a:1c:27:71:41:7a:d6:1f:f8:e7:83:ce:1b:
f8:2d:c3:6d:9a:f5:67:30:3d:b8:0d:cd:26:33:a0:57:42:7e:
29:c1:84:55:49:6e:7b:6a:90:1c:c3:89:74:10:3c:99:4b:fb:
3e:39:2b:48:be:3f:07:7c:d6:01:6e:de:44:32:52:ef:da:b9:
64:2c:e3:84:2a:92:c5:9f:e6:9b:2d:4d:9a:c6:57:c6:6e:7f:
5a:38:62:33:7a:62:d7:aa:86:fd:8d:1d:cb:a8:4d:07:18:63:
53:9b:41:2e:47:bf:fb:65:db:09:01:db:8d:c7:c9:60:da:3f:
5f:91:57:69:18:ce:22:7c:13:bd:d2:04:36:f5:eb:ab:0d:9c:
64:04:09:56:48:55:4b:b6:ed:23:bc:17:2b:50:22:16:be:ec:
90:cc:42:62:ba:cb:8b:3c:f4:28:6c:43:16:4d:77:5d:1d:21:
86:c9:a9:9e:aa:33:5b:bb:7b:aa:21:39:d9:0d:19:7c:c5:05:
58:db:81:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:40:16 2025 by rpki-client