Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/fwmOYkKZr7ilKR4d8akwRItwCYc.roa
File: fwmOYkKZr7ilKR4d8akwRItwCYc.roa (raw, json)
Hash identifier: TF2Gg9t7phtUplm4QoLIzShWtEspSjw39UCFDfMXMg8=
Subject key identifier: 7F:09:8E:62:42:99:AF:B8:A5:29:1E:1D:F1:A9:30:44:8B:70:09:87
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0682
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/fwmOYkKZr7ilKR4d8akwRItwCYc.roa
Signing time: Thu 15 May 2025 18:08:04 +0000
ROA not before: Thu 15 May 2025 18:08:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1666 (0x682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 18:08:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7F098E624299AFB8A5291E1DF1A930448B700987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:64:4f:b8:3f:c6:2c:48:4e:91:8a:df:9d:15:
00:d6:d4:6c:a3:93:77:bc:b6:e8:50:13:7e:dd:d7:
12:8b:fc:dd:10:ff:e1:95:db:b0:ae:2d:ee:61:f0:
d9:e0:46:a8:b5:6e:89:20:bc:e1:59:e8:57:f3:c5:
04:fd:ff:69:45:63:db:ca:a8:7d:e1:5f:70:e1:c5:
cc:f9:70:32:56:7c:ec:6b:a2:51:6d:6a:0a:82:ae:
cf:c2:15:57:14:4c:97:13:d2:90:42:ff:6c:b8:b8:
2d:b9:e9:b0:46:81:18:8d:44:72:83:25:60:1a:a8:
82:c6:bf:b1:28:c1:22:08:ff:73:70:d3:b4:d5:c4:
79:6e:fd:cc:6d:0c:fa:8f:9f:74:95:b4:62:1c:0a:
71:b1:2a:0c:47:03:41:a0:eb:48:19:48:b7:f0:28:
7a:2c:1b:09:1c:28:90:1a:66:46:5b:11:9c:9f:08:
2b:7b:d9:96:a3:8c:11:93:3d:df:e2:81:ac:86:f4:
a0:d8:6d:3b:fd:0c:54:6c:1e:dc:1b:f9:77:86:0e:
43:3e:84:a7:e4:fe:25:5f:0d:8c:62:3c:6b:f1:23:
5a:5b:18:ee:1f:2e:ae:fc:41:6d:05:7f:65:94:8a:
9f:48:b5:48:18:6b:96:6f:f1:e6:bc:0d:4d:68:01:
43:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:09:8E:62:42:99:AF:B8:A5:29:1E:1D:F1:A9:30:44:8B:70:09:87
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/fwmOYkKZr7ilKR4d8akwRItwCYc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:41:9e:12:32:b6:50:73:5b:4d:ff:c5:ce:84:8d:72:bc:ae:
a9:6a:60:78:b2:94:90:e2:ba:34:7c:b0:0f:70:4d:05:5f:e0:
4c:3c:86:40:6b:90:a9:35:ef:4c:36:c7:a0:6f:55:fd:c8:0d:
03:b7:d7:ce:4d:29:8c:d7:27:07:e5:da:89:a5:ef:31:16:50:
be:b3:9d:51:02:06:ce:86:15:ea:85:da:42:04:f7:68:18:f3:
18:74:9d:2e:16:5b:40:56:b8:ce:5d:65:6d:29:74:2f:81:28:
9f:30:8a:7c:4c:02:b7:27:12:0e:84:28:52:94:21:f9:7c:72:
c1:18:e1:80:6b:9e:09:36:01:fd:c7:2f:c5:4c:32:fc:cc:83:
a2:90:62:03:17:a7:de:80:d8:3b:70:0f:32:9b:f7:0c:2d:47:
a1:ef:ff:3e:de:70:2c:e8:5b:c7:44:d6:a1:13:7a:23:99:d3:
8e:e5:cb:e0:47:9a:a7:65:f0:ce:cb:10:b0:88:31:cc:3d:f1:
c5:fc:71:65:be:55:6f:e9:d1:85:d7:a2:ab:db:99:74:d2:88:
da:b0:82:4e:3c:9c:cd:df:99:fc:1d:6f:af:f6:6b:d6:98:05:
3f:c2:7a:18:81:70:10:5a:3a:09:7c:2c:ab:b5:a0:62:d1:93:
e8:f3:a7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:58:43 2025 by rpki-client