Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/d1i2JT21b1JXb4I_oGGMYvM3qV4.roa
File: d1i2JT21b1JXb4I_oGGMYvM3qV4.roa (raw, json)
Hash identifier: U5joWhAu1at5CI1Gquf8eyL1hUSpvdmAe9GuerM5MU4=
Subject key identifier: 77:58:B6:25:3D:B5:6F:52:57:6F:82:3F:A0:61:8C:62:F3:37:A9:5E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0232
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/d1i2JT21b1JXb4I_oGGMYvM3qV4.roa
Signing time: Sat 10 May 2025 00:07:53 +0000
ROA not before: Sat 10 May 2025 00:07:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 00:07:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7758B6253DB56F52576F823FA0618C62F337A95E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:0e:ce:5d:3f:d2:29:a0:fe:c9:b0:ee:be:
42:04:8c:12:f2:da:54:c9:41:af:77:26:d0:14:83:
ed:76:75:93:69:44:3d:a8:de:02:48:4f:86:ac:40:
00:24:33:bc:52:18:47:0b:c4:c5:07:27:ec:4c:f7:
e3:2c:a2:a0:d6:c7:7f:29:2d:d9:81:64:42:29:27:
5c:ab:37:11:0f:18:4b:70:67:bf:51:d7:0e:38:c9:
f4:5e:23:8d:15:0b:95:4d:46:4d:2e:57:80:4c:bc:
44:68:99:23:57:18:0d:a2:c7:0d:26:55:59:ce:83:
ec:2c:a3:0c:91:bd:f2:15:98:4f:e6:b2:e0:e4:51:
6c:d5:7d:a1:5d:28:08:09:7b:46:b2:25:3d:ab:15:
f5:a7:d8:2f:bd:c4:a6:11:8c:70:b6:2c:85:1f:f2:
b5:69:39:30:5f:59:47:12:ff:91:df:00:09:39:43:
8d:b9:15:cb:d6:02:9b:9e:80:3b:8d:54:d1:75:6c:
e6:8b:8f:5e:0b:eb:17:45:8b:28:99:7a:7f:c2:f2:
d0:ae:4b:d9:2a:50:1c:98:68:c3:c5:64:e2:be:20:
f5:98:e9:5f:d9:24:f1:f1:a1:f9:f4:d1:2e:df:67:
94:2d:16:53:a4:33:ab:8b:92:b8:20:cc:7f:cf:bb:
cf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:58:B6:25:3D:B5:6F:52:57:6F:82:3F:A0:61:8C:62:F3:37:A9:5E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/d1i2JT21b1JXb4I_oGGMYvM3qV4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:af:25:5a:11:1e:8e:f6:05:49:05:d4:b9:26:82:84:4f:b1:
b3:0e:82:30:d2:d0:b3:be:c9:80:71:7a:d9:10:d7:83:8f:67:
02:6f:28:92:47:dc:f7:8f:26:b7:d8:91:f6:41:81:f8:c8:33:
59:38:79:c7:1c:36:14:b8:24:c2:21:c9:78:28:28:72:7a:3c:
57:84:49:59:7e:b3:84:79:0c:5f:93:08:2d:0d:97:8e:1c:62:
b9:2e:d2:29:db:6a:f9:af:75:48:41:10:85:5f:d7:b5:a0:53:
7d:84:46:7d:3f:b8:3b:4f:8b:3f:e9:da:8e:63:fd:8a:cb:e5:
3f:d4:31:b8:99:2d:7d:b0:fd:c0:64:17:ee:c1:10:9b:c9:dc:
0e:67:9c:48:ce:0e:0b:27:de:72:5a:67:f3:c4:12:12:01:64:
bc:3c:f3:e5:c5:22:22:d5:df:e4:a9:cd:26:d3:20:97:c4:1b:
26:78:0f:68:b2:07:5e:9e:fa:cb:50:5a:32:ba:40:0f:8e:ce:
5f:b3:14:1e:eb:2c:69:02:be:6b:6c:07:34:ef:5e:33:f7:e0:
4d:ee:c6:6c:cd:f3:3a:28:c3:ee:1e:93:5d:2f:de:c7:e2:08:
4f:dc:ea:33:51:75:26:66:c5:8f:f5:d9:90:3d:d4:25:e8:2a:
94:bb:76:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:58:40 2025 by rpki-client