Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/eBfrxslWUS9GWB9mqYx5LuldOy0.roa
File: eBfrxslWUS9GWB9mqYx5LuldOy0.roa (raw, json)
Hash identifier: aLeLEfRv/14CAGCqSqNcYFJLHY+s3ZRav1fsDeXn+AA=
Subject key identifier: 78:17:EB:C6:C9:56:51:2F:46:58:1F:66:A9:8C:79:2E:E9:5D:3B:2D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 049A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/eBfrxslWUS9GWB9mqYx5LuldOy0.roa
Signing time: Tue 13 May 2025 05:08:47 +0000
ROA not before: Tue 13 May 2025 05:08:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1178 (0x49a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 05:08:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7817EBC6C956512F46581F66A98C792EE95D3B2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:2a:af:33:de:fb:f3:a3:42:bc:0e:95:42:
44:7c:de:76:40:fd:e9:5d:6d:af:21:a7:36:d2:65:
5f:ea:b8:32:e5:46:1e:b3:14:70:92:15:cb:b7:3e:
dd:fa:ba:0e:1c:3d:a9:bc:01:42:ae:6d:94:51:32:
b1:e7:6a:68:7e:17:36:5d:fd:50:a6:e3:42:d0:76:
77:59:65:20:f5:ad:11:5a:a7:06:28:ba:0a:b1:41:
2c:a7:1a:03:c9:29:e9:59:33:d4:41:28:71:55:17:
3b:32:3a:17:6c:01:ca:76:da:33:60:c6:04:5a:c6:
3b:c0:8b:dd:3b:eb:65:be:18:b6:ee:b4:33:a6:df:
f0:ca:a3:8c:f7:59:0e:d7:77:74:a2:ca:dd:76:e6:
a9:16:d0:f2:5d:1f:f2:1d:0d:65:b5:2b:94:e9:5f:
97:38:c6:59:d7:02:6b:ef:70:56:08:90:55:43:97:
f8:0a:2f:8f:69:6b:37:24:be:88:e5:5e:4a:48:fe:
82:e2:dc:c8:69:87:c8:d6:6e:e9:a4:70:7a:b0:23:
51:fd:da:5c:d5:89:0f:b2:60:9e:64:6c:08:17:6f:
4c:fc:81:73:bc:f3:73:fd:8f:54:3f:bb:59:11:e3:
05:da:bb:31:d1:29:7d:51:62:fe:5f:8e:97:d6:fb:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:17:EB:C6:C9:56:51:2F:46:58:1F:66:A9:8C:79:2E:E9:5D:3B:2D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/eBfrxslWUS9GWB9mqYx5LuldOy0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0b:da:94:d2:c6:b7:6b:aa:6a:6c:ea:61:2d:03:e1:00:75:99:
2f:0c:1a:1b:ca:28:25:3b:2f:c6:37:6e:f6:de:0b:d9:58:42:
d3:1a:32:5a:7e:24:b1:9a:fa:91:d0:93:ff:27:d2:57:49:2e:
04:69:07:8d:17:c7:63:71:03:48:47:60:92:42:5b:1b:a5:a5:
91:1b:2c:ad:8c:c9:a6:ed:45:e3:ef:1e:f2:67:83:b1:76:d3:
0e:e5:d1:5d:33:84:91:57:21:79:49:2f:fa:57:51:10:9e:06:
f6:67:0d:b2:6f:a7:6a:2e:ec:3b:0f:9f:98:61:7a:6c:26:ea:
05:76:8c:26:ce:ff:8c:d2:4c:6d:a8:a4:e1:11:ca:93:b6:2a:
62:0a:c1:0f:f6:d2:01:dc:b6:e4:a0:2a:04:c9:84:c6:64:a9:
70:e6:20:98:24:9a:9d:ba:0f:5e:60:88:2a:f6:7c:11:57:ef:
5d:7d:d8:13:60:03:63:2b:f1:00:75:69:82:e1:2c:f0:4d:b8:
d5:07:c7:93:87:fa:6d:b1:f8:ef:03:32:fa:f8:99:4f:99:d2:
4d:90:52:28:12:1d:18:a9:cb:ac:6e:4b:bc:08:eb:9d:58:a3:
75:4b:1a:0f:78:63:1b:06:29:96:1a:10:23:30:46:33:c9:97:
98:85:5d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:47:46 2025 by rpki-client