Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/uIGCzghXWYTj1p3JC07Hg8VzZkg.roa
File: uIGCzghXWYTj1p3JC07Hg8VzZkg.roa (raw, json)
Hash identifier: 4JytmsUlcqC303bukHG43yvf9LFqLdabxgh4xeXKPhI=
Subject key identifier: B8:81:82:CE:08:57:59:84:E3:D6:9D:C9:0B:4E:C7:83:C5:73:66:48
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07EE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uIGCzghXWYTj1p3JC07Hg8VzZkg.roa
Signing time: Sat 17 May 2025 15:38:08 +0000
ROA not before: Sat 17 May 2025 15:38:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2030 (0x7ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 15:38:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B88182CE08575984E3D69DC90B4EC783C5736648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:6c:75:61:b0:27:2d:5d:89:d6:b6:fc:4a:
1c:25:8e:2d:bc:35:73:10:36:6d:81:c1:86:63:59:
c7:5f:78:c6:27:34:fd:8c:ef:e9:14:8b:10:0f:33:
80:91:18:33:27:c1:90:34:a2:36:50:09:70:42:e9:
70:22:50:e8:ca:65:85:ed:46:e2:72:5a:cb:0c:e5:
11:8e:bd:3b:ae:18:58:b6:0a:bb:7f:58:6d:01:66:
96:89:95:f6:fe:d2:7f:8d:16:2e:c9:c5:1c:dc:77:
f9:74:61:aa:37:10:43:7b:5c:7d:66:da:73:81:26:
09:61:10:a5:68:90:7d:64:f8:a0:7d:ad:b9:a6:a5:
55:84:e7:21:3f:9c:4c:28:51:ae:f2:c0:e7:9f:de:
af:28:54:b6:97:9e:79:c9:d8:5b:44:bd:b6:6a:02:
4f:ae:c4:86:79:c4:26:52:04:b4:14:0c:63:f6:34:
82:3f:ed:9a:94:c7:22:52:84:c6:65:3f:07:a8:16:
19:d0:af:6d:fc:b2:13:83:be:9a:d7:b1:fc:cf:19:
f1:01:9f:f5:77:58:a4:7a:5b:96:71:bf:90:a0:48:
6d:ef:6e:ab:01:e4:b8:cc:86:fe:a0:06:9a:58:15:
91:1c:e2:98:ed:c6:0f:4d:b0:72:b4:ec:31:32:50:
bd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:81:82:CE:08:57:59:84:E3:D6:9D:C9:0B:4E:C7:83:C5:73:66:48
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uIGCzghXWYTj1p3JC07Hg8VzZkg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:d1:f0:6c:8b:f8:f1:eb:b8:fa:ee:27:73:93:99:f9:a8:7f:
04:63:34:d4:fa:bb:e3:7a:13:a4:b3:67:4d:45:05:34:8f:c3:
b3:ab:ba:31:fd:0f:f6:fb:79:4a:f6:91:23:42:10:71:33:01:
29:f0:8c:7c:5c:e9:2c:38:6a:b7:e6:ca:c3:97:7c:4e:1f:0e:
df:d2:16:8b:df:fc:13:8d:1f:02:38:eb:8e:02:66:34:2b:4f:
7a:69:39:f4:40:a1:89:06:ab:74:a1:ba:4a:e2:a8:dc:a1:76:
e1:20:ff:5a:c2:fd:98:4d:26:7b:01:98:ba:31:db:53:c6:cd:
e7:b1:a0:c6:49:e7:9d:46:68:b5:e5:a5:25:54:f0:cb:17:e5:
c7:1b:c4:92:ed:bc:b0:e3:8f:46:40:6e:d1:02:e9:82:f3:3f:
7b:b0:9d:6d:27:ee:1d:2f:ee:7e:3f:2c:f4:30:a4:82:5d:56:
27:2a:aa:17:15:88:be:6f:3c:fd:9d:18:a1:93:bc:c9:19:f8:
4e:4d:b7:cf:e0:ca:af:d4:08:63:ea:9e:12:34:0f:b4:ff:b2:
9c:ab:5a:d0:f9:c4:93:79:f6:66:a4:03:c2:d6:4a:71:e9:a0:
a3:1a:ba:5b:0a:08:b4:0e:0e:f4:04:2a:30:87:3a:95:8a:b3:
52:c4:e0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 16:55:11 2025 by rpki-client