Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/aHvot5JZOL_q2Ffn1aocYo1WXu4.roa
File: aHvot5JZOL_q2Ffn1aocYo1WXu4.roa (raw, json)
Hash identifier: lriwRXZPnzRbzw/uk/aE96GNvfi3TAIW9SSfpPrzXPg=
Subject key identifier: 68:7B:E8:B7:92:59:38:BF:EA:D8:57:E7:D5:AA:1C:62:8D:56:5E:EE
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03A2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aHvot5JZOL_q2Ffn1aocYo1WXu4.roa
Signing time: Sun 11 May 2025 22:07:57 +0000
ROA not before: Sun 11 May 2025 22:07:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 930 (0x3a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 22:07:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=687BE8B7925938BFEAD857E7D5AA1C628D565EEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:42:a1:15:6f:36:b7:f9:84:af:66:cf:05:
c2:3c:a5:f8:52:2f:47:29:b2:96:25:30:29:98:e3:
b8:2e:6d:6c:35:dd:48:47:d9:d1:8e:90:0c:b2:78:
a3:67:a6:08:49:e0:02:40:c7:71:35:4f:32:66:9c:
e1:bc:7a:e8:7a:53:aa:55:39:01:97:00:4e:1f:09:
9f:02:ab:88:d6:71:46:d2:ee:31:20:65:68:ad:1f:
1f:eb:3b:f4:cc:fc:44:9b:ff:d4:c7:76:1e:a9:35:
98:e6:6e:07:81:97:d1:95:e6:67:f7:ca:e0:85:2a:
45:71:98:f1:16:82:aa:20:19:25:d9:48:a9:67:9c:
c7:e6:0f:5d:27:5d:4b:3b:58:92:c7:c4:40:55:32:
f7:ad:a6:cd:8b:29:79:6b:11:6e:7b:e3:c0:82:f8:
81:63:75:25:4a:76:a9:3f:76:34:20:25:29:5d:26:
b3:60:38:5f:bc:f8:67:23:9f:08:3f:c4:e3:66:7a:
11:3c:37:e0:49:eb:b8:cd:1c:1d:89:75:0d:59:c0:
ba:ae:e0:2c:b1:e7:61:66:71:fb:2d:b3:ae:67:2a:
0b:1e:bc:17:3b:e2:e7:a2:ca:1a:24:fc:a5:81:50:
0d:12:27:84:bc:a4:29:d2:c3:13:92:4d:c4:2f:a1:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7B:E8:B7:92:59:38:BF:EA:D8:57:E7:D5:AA:1C:62:8D:56:5E:EE
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aHvot5JZOL_q2Ffn1aocYo1WXu4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:dd:62:16:f5:9d:eb:52:f5:3a:29:dc:66:72:b6:4a:0b:6b:
d6:d7:d2:3d:71:61:1a:00:73:c3:b5:7d:47:e5:e2:ac:74:2d:
77:d9:47:e8:6a:9a:16:4d:9f:1a:b6:bc:d1:29:38:63:ee:d0:
d9:e1:20:5b:5e:a4:56:2c:93:9f:3c:1d:10:ba:46:b6:6b:c2:
85:62:5c:1c:2f:78:95:c5:a0:48:d2:d2:8d:92:19:33:36:66:
59:68:a0:f7:dc:28:98:82:f9:7d:48:3f:6c:70:24:69:a7:53:
7f:77:8f:9b:d4:66:33:69:f6:91:13:7f:80:02:2c:e4:db:9f:
0a:02:b4:bb:ee:e0:a6:38:d7:50:20:a4:54:cc:3d:a6:35:f2:
51:ee:74:64:7f:dd:4f:7a:0d:30:ed:36:ab:e2:1c:15:56:cc:
69:90:98:e3:d9:c1:e9:5f:0a:cd:bd:ec:6a:d1:d7:8a:28:36:
37:a1:62:02:50:05:0e:76:58:ba:4c:22:fd:af:5b:49:2d:84:
c6:5c:e6:86:d8:2a:d4:38:3d:1f:b0:d1:26:32:9a:d0:56:96:
d8:1d:05:ad:79:51:60:50:87:e2:d9:37:43:7f:e9:cb:ba:42:
5a:ee:9e:c3:3c:51:88:e4:a4:e5:f6:46:da:ea:b9:70:11:97:
aa:25:8e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:51:26 2025 by rpki-client