Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/g2iXUXuWBR1ZHGPbgXIJzbarFEE.roa
File: g2iXUXuWBR1ZHGPbgXIJzbarFEE.roa (raw, json)
Hash identifier: PoyRf6yRsySC2xEBR1sFcVLqCgif4tJN6lVuNZSqXHc=
Subject key identifier: 83:68:97:51:7B:96:05:1D:59:1C:63:DB:81:72:09:CD:B6:AB:14:41
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01FA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/g2iXUXuWBR1ZHGPbgXIJzbarFEE.roa
Signing time: Fri 09 May 2025 17:07:48 +0000
ROA not before: Fri 09 May 2025 17:07:48 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 17:07:48 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=836897517B96051D591C63DB817209CDB6AB1441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:58:ce:b0:b7:6f:64:68:a3:b9:04:7c:55:c3:
16:05:c7:64:d4:38:4e:b9:cf:86:88:c3:f6:e6:fe:
57:e7:f2:3e:95:8d:6e:d5:5e:03:fb:b8:4c:d6:df:
5f:71:e4:cb:7d:dd:da:90:bb:93:81:45:ed:e2:1f:
38:51:17:3b:2c:93:56:33:a4:9d:02:41:02:e6:0b:
37:a9:0d:56:0c:a8:7f:78:78:8c:0b:ff:07:4b:b0:
9d:d0:9b:cc:fa:41:51:d5:44:be:9c:8d:bc:e7:eb:
44:9f:07:f2:34:d3:b5:0c:8d:a6:bb:c2:ce:63:9d:
bd:57:07:51:fb:30:bf:19:7b:94:97:e1:94:6b:80:
f7:5c:c4:ca:76:70:82:3c:b1:51:d3:1f:41:00:61:
33:34:8f:f0:4e:98:c3:b8:6f:7e:cb:39:1a:73:4d:
a1:e9:74:77:c8:fb:e2:af:cc:0c:80:16:ee:2b:d5:
2e:df:0b:a6:6e:c1:06:de:30:73:a7:24:23:ca:50:
f6:ed:2a:2e:37:25:58:fb:d8:46:29:b7:33:ca:f9:
51:43:da:0b:89:46:a2:11:3b:ef:1a:7b:d5:57:74:
b6:41:4a:2a:d8:50:12:38:07:69:92:b7:77:ce:e0:
2d:16:cf:2f:6e:45:b7:07:fb:86:f1:3f:ac:6c:99:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:68:97:51:7B:96:05:1D:59:1C:63:DB:81:72:09:CD:B6:AB:14:41
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/g2iXUXuWBR1ZHGPbgXIJzbarFEE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:8a:89:9d:64:a0:12:83:21:2c:46:ad:c1:05:65:6b:94:6d:
10:ea:26:52:8c:6a:0e:76:a5:32:a9:41:29:18:7e:d2:5c:ed:
4a:d9:d5:9e:03:09:5c:fa:73:70:8e:e1:6a:8a:56:c7:ba:ea:
3d:44:f9:f1:97:8f:2d:03:fe:97:bd:c7:6d:a7:83:db:a8:2b:
8a:ca:d0:c6:a4:90:69:d5:f4:a5:06:9a:a6:59:72:45:ff:69:
8b:05:c1:cd:46:af:d3:b9:56:4d:b0:a1:93:68:c9:a5:4c:b6:
65:d3:93:e6:f1:a5:05:e0:dc:a8:a4:16:91:39:18:43:38:fb:
b4:37:09:14:16:ab:6a:df:b3:90:9e:33:ef:08:d7:56:fb:3f:
72:47:39:48:ce:7f:89:a0:c6:85:7c:e8:18:c8:bb:60:46:54:
e0:20:8d:fd:21:fd:9f:22:9e:ab:e7:fa:94:45:e3:71:01:a1:
87:e9:8c:2d:6c:c7:6e:d9:6a:64:dd:67:80:ce:12:0b:5e:b0:
28:f6:d3:33:84:cb:e0:4d:b6:2a:00:00:35:48:fc:58:10:46:
6a:ad:82:e8:2a:50:0d:24:55:df:3c:90:e0:23:32:75:f0:03:
97:44:d0:c0:7a:b2:7c:17:56:ca:56:68:a1:dd:5f:48:04:ad:
78:61:1e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:55:28 2025 by rpki-client