Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/cnrN4_-LD6RwJ__JaLBR9Ttz6EI.roa
File: cnrN4_-LD6RwJ__JaLBR9Ttz6EI.roa (raw, json)
Hash identifier: r3KcY5y1aIBAlUCtzAacbuptFGIslk+gqiACOPEnsy0=
Subject key identifier: 72:7A:CD:E3:FF:8B:0F:A4:70:27:FF:C9:68:B0:51:F5:3B:73:E8:42
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0136
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cnrN4_-LD6RwJ__JaLBR9Ttz6EI.roa
Signing time: Thu 08 May 2025 16:37:44 +0000
ROA not before: Thu 08 May 2025 16:37:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 16:37:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=727ACDE3FF8B0FA47027FFC968B051F53B73E842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:95:6a:e5:6f:3c:43:34:98:ad:54:73:81:
b3:e0:5e:ba:cd:97:32:40:52:05:26:da:3f:f1:4e:
8f:bd:10:05:bc:a4:2b:9e:90:bb:0f:91:fe:7a:6a:
14:01:c6:36:a9:8c:b3:43:c7:2a:da:79:e2:ff:43:
38:47:b5:f4:91:84:23:d1:48:ca:04:46:a7:ad:8f:
e7:30:65:58:b6:c2:08:75:6a:eb:c9:50:0b:30:27:
ed:13:8c:33:9b:75:01:6a:25:ea:3f:fb:e8:e2:e8:
9a:5d:21:d3:11:59:72:3d:7e:5d:7b:db:a9:a1:41:
88:dc:22:d6:43:17:d1:be:e3:69:15:09:ce:70:21:
df:d1:06:30:24:67:b3:36:f3:80:ed:4c:8b:8f:46:
c5:2d:06:a2:18:6f:b0:e3:a7:db:c3:fd:2e:0b:af:
91:13:c3:09:1e:b7:43:10:61:6a:96:a8:d7:5f:ca:
12:76:23:51:21:af:31:41:f9:f2:b6:34:7d:dc:2f:
cf:43:39:fa:38:cd:11:33:50:bd:1d:9a:c8:90:92:
07:8d:89:4c:d2:a2:e5:ec:53:00:ad:f2:cc:3a:91:
d7:59:58:68:a3:a0:2b:39:ce:46:9c:47:57:ec:05:
d2:86:5e:bb:b5:4b:59:30:f8:25:52:b9:52:5f:09:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7A:CD:E3:FF:8B:0F:A4:70:27:FF:C9:68:B0:51:F5:3B:73:E8:42
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cnrN4_-LD6RwJ__JaLBR9Ttz6EI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:f0:c4:a6:1b:87:75:62:a3:30:7b:65:04:35:31:15:38:2f:
72:86:f4:96:89:d2:9e:9f:a8:43:8d:49:f7:48:f3:ca:8f:75:
c8:8e:c9:27:22:30:f1:ca:20:b5:91:1c:44:58:0e:6a:79:c8:
bc:21:55:38:b1:66:ed:a1:aa:b4:ba:ab:42:85:b6:c9:da:51:
77:d7:5e:47:c4:59:1f:72:24:70:cd:bc:70:70:dc:25:3a:00:
15:c2:ba:36:a6:bd:6e:31:17:ff:04:2b:90:30:97:98:45:df:
97:37:74:ed:73:60:51:d4:b5:a2:41:04:f5:8f:1e:19:c9:54:
fa:d7:0b:52:95:c6:eb:54:f1:14:ac:20:ba:f7:ed:f2:06:39:
c2:bd:78:a1:db:f8:2a:02:00:37:5e:e5:ed:5c:b1:b0:03:c8:
c9:7f:b9:db:a4:15:6c:8e:5b:2c:db:01:d8:ca:21:22:0c:26:
59:a5:d0:71:f2:1b:f7:5a:56:9b:55:33:28:22:27:70:5b:2b:
7e:3e:67:c7:4d:b5:63:f7:7a:a8:55:eb:4d:09:0a:0c:c2:5c:
df:90:9d:b7:1e:83:1e:0f:d3:5d:5f:72:1d:e6:b8:df:6e:18:
dd:63:4e:61:36:0b:7b:c6:7a:d8:0f:ee:d3:eb:08:bb:8e:21:
37:7f:6c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 17:23:38 2025 by rpki-client