Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/u2mE8FaPcUIN0vhtT9AkCqrL8Lk.roa
File: u2mE8FaPcUIN0vhtT9AkCqrL8Lk.roa (raw, json)
Hash identifier: 9Wi8UbwcirbjQDPQntGY5epm5WwbkakvE8uIbsigfvA=
Subject key identifier: BB:69:84:F0:56:8F:71:42:0D:D2:F8:6D:4F:D0:24:0A:AA:CB:F0:B9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0656
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/u2mE8FaPcUIN0vhtT9AkCqrL8Lk.roa
Signing time: Thu 15 May 2025 12:38:02 +0000
ROA not before: Thu 15 May 2025 12:38:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1622 (0x656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 12:38:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BB6984F0568F71420DD2F86D4FD0240AAACBF0B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7f:37:02:56:3b:23:8c:f6:71:6f:e3:ce:4f:
fb:8d:b9:f3:de:06:55:2d:06:f9:9d:3f:3a:a3:54:
e1:c4:98:c9:94:cb:fb:5e:36:c5:6c:4e:89:9c:1c:
34:83:cf:cb:1a:38:c3:b3:6e:9c:39:1a:0e:33:51:
bb:28:10:e1:e6:61:5c:54:54:b7:52:e4:78:df:47:
91:a8:60:5a:1f:25:8d:c2:fc:b0:6d:d6:4c:89:12:
a0:37:5b:be:52:70:bf:06:5f:9c:fd:c6:4a:6e:9a:
a4:b7:50:18:de:18:bc:9a:9a:c7:1b:bc:19:81:c5:
73:31:f1:f9:33:c4:e4:b1:5b:c7:8e:88:a5:c3:9e:
7e:7e:d6:de:ea:94:d2:2c:ba:df:4f:0e:25:1d:46:
43:ce:d4:e7:c0:6c:56:4c:af:63:65:ee:ad:14:72:
68:3c:93:ee:56:e4:8e:2e:56:ae:ca:b7:87:07:15:
82:72:9b:fa:68:fa:ac:35:13:b5:0a:8d:e7:7f:9a:
c3:fc:68:99:3f:d8:a9:a9:23:4d:ac:f5:14:a4:56:
e6:59:03:64:35:f1:ad:0e:d2:10:5b:c3:93:9b:7f:
77:6f:30:e1:c5:e0:1d:6c:cd:e9:61:44:ae:8d:2a:
c6:76:4c:5b:64:c8:d1:1c:9f:ee:66:a9:0a:ff:b8:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:69:84:F0:56:8F:71:42:0D:D2:F8:6D:4F:D0:24:0A:AA:CB:F0:B9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/u2mE8FaPcUIN0vhtT9AkCqrL8Lk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:7d:e3:aa:88:a1:bb:62:e0:a3:d4:eb:91:45:ba:47:03:2a:
8b:81:14:cb:a8:f6:fc:80:a6:b1:09:b3:2a:e3:b2:f0:de:c4:
63:1c:6c:df:43:d6:81:f5:ed:0d:c9:e4:4c:e5:1c:c3:b3:07:
07:01:20:dd:0f:f3:03:f7:38:a9:5b:5e:39:dd:e6:54:aa:b6:
eb:13:52:be:40:51:c2:95:f7:97:7a:38:f7:54:87:60:d9:b3:
7d:73:21:b7:1b:64:f7:77:5f:43:b2:74:44:75:9a:64:04:42:
b0:79:d7:ef:d1:b8:f2:9a:9a:17:6a:28:43:e2:7e:c5:96:56:
fc:c1:db:e8:1f:6d:70:1e:62:a2:41:a7:51:a6:d7:b7:a8:74:
b9:93:9b:d9:dc:b7:1c:d4:fe:5c:71:c5:ec:eb:68:d5:e3:43:
6b:79:d6:19:89:1e:37:21:aa:ce:a6:23:d3:0c:9e:90:0c:04:
94:12:89:b9:b5:07:9f:aa:e8:0d:0a:b7:e9:b7:fb:f2:2d:1e:
34:3c:9b:0d:d5:e3:6d:6b:7a:fc:f2:c8:c0:49:b4:8c:f7:e4:
21:44:a0:93:91:dd:fb:e3:99:9c:e2:71:96:bd:19:ff:0f:7b:
e9:54:aa:60:37:c4:d1:40:9f:f0:5d:a5:a9:0d:2e:58:7b:fc:
00:50:a0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:21:42 2025 by rpki-client