Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/drwRNgcSmEfkQAgEmAX3QlkXbuU.roa
File: drwRNgcSmEfkQAgEmAX3QlkXbuU.roa (raw, json)
Hash identifier: Tx+Vp+akh2m76RhcykkDOXX7z/HCXAuMKYVIzGD6iUI=
Subject key identifier: 76:BC:11:36:07:12:98:47:E4:40:08:04:98:05:F7:42:59:17:6E:E5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 024A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/drwRNgcSmEfkQAgEmAX3QlkXbuU.roa
Signing time: Sat 10 May 2025 03:07:52 +0000
ROA not before: Sat 10 May 2025 03:07:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 03:07:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=76BC113607129847E44008049805F74259176EE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:c3:44:80:46:28:20:34:e2:aa:a4:19:e6:
69:00:aa:d3:18:16:62:8b:71:8c:19:db:d2:b3:c9:
44:b7:88:83:b7:70:21:3b:32:5c:bd:a3:fc:b8:50:
a3:53:39:dd:d3:3c:42:e7:e8:a3:58:6e:77:42:d3:
97:48:34:a4:9b:2d:80:ec:c8:4e:4a:a4:bc:fe:47:
14:76:22:a4:64:01:1d:bb:f4:7a:64:4d:07:25:bd:
92:08:93:2f:88:d6:10:e3:85:0d:7f:0e:d3:b7:1a:
b8:73:b5:d7:8f:c0:b8:e9:96:ae:f7:ec:40:13:19:
97:71:c3:73:f6:f5:79:3d:db:19:00:c5:a7:8d:67:
16:45:c5:cc:c1:53:5a:95:f8:b4:53:06:e8:28:26:
c2:ce:fe:89:ac:4c:1c:43:5c:11:a3:a3:63:04:fa:
60:1b:31:c1:5c:2f:9e:6d:4f:8d:dd:79:46:45:2a:
d0:44:01:ec:62:c3:0f:03:58:60:cd:ba:3c:5b:3d:
89:ef:99:8c:37:54:fa:59:ea:2a:f6:48:91:e4:3b:
52:9a:f6:9f:b3:f5:d4:24:52:90:3a:68:1e:03:c5:
a6:25:f8:91:34:a5:89:59:2f:55:4c:0e:66:07:f5:
62:e7:79:e8:fe:09:10:28:72:26:71:cf:cf:32:1e:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BC:11:36:07:12:98:47:E4:40:08:04:98:05:F7:42:59:17:6E:E5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/drwRNgcSmEfkQAgEmAX3QlkXbuU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:be:6a:9e:1e:b3:d8:e0:fa:5d:b4:a2:dc:05:45:eb:5d:6a:
ee:e3:f2:8d:04:33:aa:74:85:41:13:93:3e:da:b2:2a:5c:ab:
f4:c2:60:1b:3d:fd:85:0b:23:8d:f2:98:6f:a9:8c:a7:7f:c9:
3a:ff:32:f6:e9:13:de:ed:fb:11:d7:0e:3b:75:85:fe:05:90:
36:7c:71:f3:4d:05:f0:1b:05:27:8f:a1:fa:cf:2e:f3:cc:87:
7a:f0:8e:ca:fa:28:03:a4:ee:34:3b:56:d8:7e:76:88:26:4d:
75:2b:28:06:51:4b:79:ec:9c:cf:f7:d0:b1:70:05:8c:20:21:
5a:1a:ef:a7:b0:5a:ba:3c:39:6d:31:ac:4f:3e:39:27:76:61:
c0:3d:86:0e:cb:98:5c:4e:d8:5a:da:1f:dd:1d:93:5c:1a:a7:
0a:cf:d3:9d:e4:70:76:43:51:23:c8:7d:8c:38:c3:ed:ed:3f:
cc:ad:bd:0e:ad:65:75:3a:16:a1:a2:3e:2f:4a:94:e1:77:63:
ec:8e:c9:3d:2f:3c:96:04:1c:fa:b3:a7:a7:38:a1:4c:35:51:
13:7f:90:f6:2a:9e:0c:42:a9:41:19:f4:ab:83:6d:cf:ec:67:
bc:17:ac:f0:24:1d:ef:6a:b8:e5:e8:d5:a3:a9:6a:10:09:2a:
63:4d:ef:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:08:39 2025 by rpki-client