Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/rBqb0oNK8NNbAisdRi-YqwEi0N0.roa
File: rBqb0oNK8NNbAisdRi-YqwEi0N0.roa (raw, json)
Hash identifier: txhik3KRpbgqTIgCV+6nsrltelhEZuD2duL+5Q77gHs=
Subject key identifier: AC:1A:9B:D2:83:4A:F0:D3:5B:02:2B:1D:46:2F:98:AB:01:22:D0:DD
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 077A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rBqb0oNK8NNbAisdRi-YqwEi0N0.roa
Signing time: Sat 17 May 2025 01:08:08 +0000
ROA not before: Sat 17 May 2025 01:08:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1914 (0x77a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 01:08:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AC1A9BD2834AF0D35B022B1D462F98AB0122D0DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:b4:3e:b1:7b:24:22:8d:fd:ae:6f:56:a6:
5a:e1:5e:78:73:db:fa:22:aa:5c:00:99:36:5a:df:
bd:3e:7b:6a:b6:9f:fb:0d:b0:cf:32:a5:6d:27:77:
3c:8a:f7:fe:2d:49:bd:da:68:12:73:0d:e6:ad:19:
97:43:80:2a:74:34:14:47:d5:72:7e:36:51:b1:8a:
d6:67:04:5b:63:fe:92:70:ce:e4:2b:d7:44:4d:74:
aa:9f:30:57:5b:e7:96:97:e3:fc:74:82:cf:76:92:
cd:e9:76:13:3d:35:5d:66:7e:d0:24:90:15:1a:38:
e9:df:84:7e:60:16:1a:3d:fa:91:e3:99:af:ab:b8:
6c:d6:3d:f2:f6:b8:86:da:60:81:b8:e0:3a:22:5e:
2e:7e:63:50:f3:24:d7:82:a7:56:ad:f5:e6:e3:1a:
f0:69:6b:11:af:49:3c:d3:9e:12:e4:b8:4b:21:7e:
7b:1c:6a:18:c2:04:71:48:e5:9c:47:fc:83:cc:46:
df:b4:6a:cb:7c:38:be:58:a2:38:0c:5d:c6:01:5e:
d5:e2:f1:f8:19:23:05:c0:64:da:b8:15:ad:7f:c0:
f6:ca:5c:e3:6f:75:83:f5:2d:6a:88:90:21:30:d3:
13:d3:7a:9f:60:f7:fd:e3:51:79:98:69:31:b4:bc:
ba:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1A:9B:D2:83:4A:F0:D3:5B:02:2B:1D:46:2F:98:AB:01:22:D0:DD
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rBqb0oNK8NNbAisdRi-YqwEi0N0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:a3:a2:17:86:9f:46:66:2d:e8:35:f4:58:4e:38:1b:65:dc:
e4:cd:d0:9d:c2:e2:79:02:b2:46:55:ce:1c:cc:17:b1:ca:25:
ab:ab:d5:d5:16:48:41:49:bc:1b:b1:d5:31:ee:1a:8a:b7:9e:
2f:a0:f4:43:93:a6:1c:02:91:61:1c:de:73:ec:fd:2f:63:10:
8d:b8:33:d6:3f:f2:ba:f3:ba:f2:c7:89:62:31:23:cd:b1:0d:
ef:78:e4:cc:ad:0b:17:89:ad:b1:b9:e1:b9:f0:c1:98:db:10:
cb:ae:ed:80:e3:41:a6:37:77:d3:46:3b:cf:40:21:24:96:37:
62:22:43:89:63:e8:ff:b7:72:e7:1e:df:19:00:6b:ea:57:ed:
f2:71:20:7d:fe:e1:0a:43:f8:f8:1c:47:8a:9f:88:eb:b3:01:
47:e6:7e:16:d7:31:7a:55:1d:5d:72:5e:80:d2:03:34:8f:4e:
bb:8f:ce:6d:b9:38:49:b5:d2:bd:11:d4:59:e1:d0:07:52:b6:
31:80:04:51:38:07:29:20:ca:f3:c9:35:10:6d:ad:6d:d1:74:
29:a0:80:a0:47:2b:59:49:52:be:2b:64:5e:ca:be:b4:fb:1b:
40:94:49:46:5c:b0:0d:dc:94:d2:35:52:76:47:4d:bb:a2:6d:
c0:02:c7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:51:07 2025 by rpki-client