Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/pEEK9rzLCN_wTWk3WLwYhqy-7oI.roa
File: pEEK9rzLCN_wTWk3WLwYhqy-7oI.roa (raw, json)
Hash identifier: dWrLGgdtdEpBm8KCgUh1pazJz8tEBAakUPqdwkCurP0=
Subject key identifier: A4:41:0A:F6:BC:CB:08:DF:F0:4D:69:37:58:BC:18:86:AC:BE:EE:82
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 02A6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/pEEK9rzLCN_wTWk3WLwYhqy-7oI.roa
Signing time: Sat 10 May 2025 14:37:53 +0000
ROA not before: Sat 10 May 2025 14:37:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678 (0x2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 14:37:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A4410AF6BCCB08DFF04D693758BC1886ACBEEE82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:28:42:fe:72:cc:ad:ee:ed:1d:c7:5b:ea:
d4:3b:5a:f6:bd:19:b4:6e:73:dc:72:a1:d4:90:86:
08:5b:fa:0e:17:32:0c:7c:4a:f5:f8:8a:a5:42:d0:
91:12:82:77:72:b4:a2:ba:08:58:00:a0:06:97:8d:
81:1c:24:04:14:0c:7a:dd:20:ce:70:78:ec:8f:1a:
dd:86:27:81:a6:4c:44:d8:d5:1f:03:b9:ea:3e:f8:
cd:10:d0:52:ea:97:d5:da:fe:41:f9:d1:17:51:c1:
e0:4c:b6:98:e7:30:e7:5a:c5:da:70:55:99:1f:60:
43:52:70:02:6b:00:f6:b1:26:cf:ca:e4:f2:49:c1:
bc:e1:75:21:ca:bf:1a:4b:73:2a:f5:8f:e6:be:36:
5a:af:b1:d0:d9:da:ff:a9:54:c5:f6:93:31:0b:26:
08:cb:20:c4:a9:05:06:4e:45:c6:63:30:50:2e:27:
75:98:6f:04:77:c8:ca:a4:18:f0:70:a5:77:97:dc:
e7:0f:a7:5a:e6:95:20:41:da:03:ba:59:45:77:f9:
ff:b7:55:92:6a:51:92:9b:3a:94:be:d2:df:1a:a5:
80:56:38:92:a1:21:ea:26:ae:42:2a:3a:67:af:6d:
fe:ed:8e:6d:8c:df:54:4c:4f:37:d8:80:6b:86:94:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:41:0A:F6:BC:CB:08:DF:F0:4D:69:37:58:BC:18:86:AC:BE:EE:82
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/pEEK9rzLCN_wTWk3WLwYhqy-7oI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:d5:54:21:40:b2:de:2f:40:bb:01:9a:c7:7c:75:85:0e:0e:
21:5f:d1:3e:6f:1c:a0:59:65:15:34:30:91:e3:b2:68:ad:14:
6b:ef:c9:f8:01:a7:58:c6:a6:ba:af:93:ed:0f:70:7d:cd:de:
d5:70:3a:ca:df:bb:7c:f6:57:57:ec:50:c8:f2:84:86:9f:f1:
db:3a:7e:47:ba:40:da:56:24:79:ef:83:e8:52:2b:97:11:6b:
c7:9e:5b:7f:7f:02:70:75:02:9a:f2:1d:11:b1:94:df:be:21:
52:a5:da:bd:3a:91:e4:19:06:14:b5:91:fc:4f:df:5b:c9:05:
ff:2c:1f:b7:a4:44:71:f2:15:45:0d:ab:a1:7e:59:9d:b5:40:
b3:9f:fe:3d:86:87:bf:2f:b2:1d:a6:89:e0:0e:7d:00:cf:a7:
cf:9e:09:eb:a7:be:e7:97:b8:f8:b9:10:37:dd:14:89:53:61:
66:26:74:d9:69:a0:75:c8:06:50:71:32:90:24:0c:44:55:02:
4f:a7:b1:81:fb:7a:1f:9c:df:d7:44:37:f3:1c:ef:2f:77:39:
74:98:69:63:b6:38:13:77:11:36:3d:93:2f:07:f5:86:57:4c:
87:cb:c3:52:47:2f:0b:b2:54:4d:e2:15:76:eb:69:65:68:13:
bf:d6:84:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:53:05 2025 by rpki-client