Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/tPGkN72BHnvOPGtqAzzkpPxc50U.roa
File: tPGkN72BHnvOPGtqAzzkpPxc50U.roa (raw, json)
Hash identifier: MKOcjdwGMaIcTBxc7oxo7azYGgV7jOWXfypn134S4f0=
Subject key identifier: B4:F1:A4:37:BD:81:1E:7B:CE:3C:6B:6A:03:3C:E4:A4:FC:5C:E7:45
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0252
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/tPGkN72BHnvOPGtqAzzkpPxc50U.roa
Signing time: Sat 10 May 2025 04:08:19 +0000
ROA not before: Sat 10 May 2025 04:08:19 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 04:08:19 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B4F1A437BD811E7BCE3C6B6A033CE4A4FC5CE745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7b:0f:42:a8:07:41:35:1b:fb:16:46:95:b6:
1d:9b:83:5f:a2:37:3e:15:49:3c:e3:68:e9:d1:54:
c2:84:2a:fb:81:d2:5a:f2:ed:07:a5:1b:24:b0:37:
08:6f:da:61:90:aa:e6:28:19:c9:4b:f8:b5:4d:65:
df:5d:e2:98:4e:3c:dc:3a:5c:00:48:d2:62:2e:95:
0c:7e:bc:38:7b:eb:0b:bd:f2:4d:2b:5f:57:08:47:
76:21:76:74:32:69:b4:e4:39:43:13:c5:f8:99:6c:
99:7a:2a:d8:50:16:6a:9e:60:11:82:bc:7f:e9:8e:
42:60:2b:c9:6c:72:e3:ae:09:d0:15:89:56:23:11:
6a:c2:43:11:05:a7:00:20:93:aa:46:5f:0b:9b:21:
01:e5:70:be:da:0d:7a:09:8e:0d:ee:56:4a:ff:20:
db:e5:2d:c9:00:ac:b2:3f:3d:e1:2e:10:f0:e0:a7:
e4:aa:dd:5c:76:16:5d:b1:2b:32:6f:96:79:3f:be:
3c:f3:5c:ec:71:27:71:38:ab:4c:f4:3f:9d:1a:0c:
33:02:0f:36:b6:ce:3b:c8:59:9f:11:41:8d:cf:f8:
64:fa:9c:b8:cf:d0:8e:3b:8e:e9:f2:46:ad:5d:e4:
f9:eb:d5:2f:10:3b:27:5f:00:1a:43:b0:2f:db:a8:
74:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F1:A4:37:BD:81:1E:7B:CE:3C:6B:6A:03:3C:E4:A4:FC:5C:E7:45
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/tPGkN72BHnvOPGtqAzzkpPxc50U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:e2:cf:3a:44:eb:21:d4:93:c1:8d:26:ae:dd:ff:92:85:64:
ff:99:e0:2e:fc:e6:61:ff:71:6b:3c:83:65:ac:1b:3e:1a:df:
c4:0a:43:c1:3c:3b:19:08:a9:18:bb:22:df:ce:bf:f0:d8:90:
90:5a:5c:55:c5:8a:12:80:38:f7:a5:e0:10:dc:9f:a9:5b:94:
12:7b:14:94:03:74:fc:48:7e:c2:69:64:40:4b:b4:92:9b:31:
bc:45:ab:8d:ee:63:e5:df:ff:a7:00:e4:32:18:28:ad:56:48:
e0:5b:a1:18:25:b3:7c:c6:60:25:44:e5:b8:92:72:8b:fc:0d:
5a:ae:12:fc:29:88:71:b7:f1:e8:db:a3:86:2d:0c:b6:a9:bb:
8d:9d:53:e6:86:61:8c:57:fc:0b:9a:eb:da:79:9b:d9:7b:45:
f4:bc:57:1d:20:06:2c:32:1b:6f:67:5a:e6:4f:53:08:1f:4b:
14:7d:7d:ca:43:c8:bf:72:0d:be:58:4c:b2:62:cd:46:7a:4b:
05:c9:d5:5b:3f:d9:fc:37:95:cb:f5:41:6c:8e:e7:e1:01:a5:
e3:d8:65:39:af:da:06:c6:71:7a:99:78:ae:8d:14:5e:6d:17:
48:cc:2f:8d:89:f5:81:e4:10:74:ab:b4:8b:e7:52:c6:b9:08:
da:3f:4d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:45:00 2025 by rpki-client