Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/w6OmmwRLaKF4adPT8xXmO4ySXRA.roa
File: w6OmmwRLaKF4adPT8xXmO4ySXRA.roa (raw, json)
Hash identifier: xr35TPCT6d6nH31fRbHrmHVozzZTkKbkaA92U+pZzak=
Subject key identifier: C3:A3:A6:9B:04:4B:68:A1:78:69:D3:D3:F3:15:E6:3B:8C:92:5D:10
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03BA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/w6OmmwRLaKF4adPT8xXmO4ySXRA.roa
Signing time: Mon 12 May 2025 01:08:27 +0000
ROA not before: Mon 12 May 2025 01:08:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 954 (0x3ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 01:08:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C3A3A69B044B68A17869D3D3F315E63B8C925D10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:2f:eb:85:b8:6c:04:f2:af:05:ac:38:e2:
20:ba:92:32:80:5a:d9:22:ec:54:50:61:3e:5c:e9:
69:85:66:e8:d6:98:4b:fa:f3:32:68:d0:97:18:ea:
da:c6:48:70:1c:7e:8c:ae:e2:4c:3f:62:7e:9e:df:
81:10:80:75:38:e4:af:94:71:74:b5:a7:b7:79:92:
18:b7:22:7f:9b:a2:8a:d2:df:80:1d:7e:d4:26:52:
fe:a6:4c:86:41:86:f9:b7:df:d4:1b:42:f6:37:0b:
98:3c:65:9a:82:4b:21:73:ab:14:93:b3:a7:50:a5:
0f:7a:0e:18:f5:aa:67:aa:2c:1e:cc:c9:8d:4a:6f:
04:38:42:70:08:87:ef:18:ff:43:8e:ee:98:c9:d5:
d9:f9:60:e5:4d:91:57:06:39:15:4d:52:b0:19:a7:
c1:6a:a3:e2:96:1b:c2:3c:5e:48:a7:00:d2:4b:3b:
5f:65:ce:7c:b7:ab:f1:1c:7f:0c:37:70:6e:39:f5:
85:87:46:19:66:04:a1:64:35:1e:97:c5:c7:b0:f6:
f4:cb:c8:e9:88:2d:d5:61:31:7f:0e:35:4e:a9:ed:
36:57:fe:a7:07:12:6a:de:f2:b7:82:ce:b6:87:84:
01:dc:da:0a:18:56:a9:5f:00:2d:45:7a:ae:9d:cc:
aa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A3:A6:9B:04:4B:68:A1:78:69:D3:D3:F3:15:E6:3B:8C:92:5D:10
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/w6OmmwRLaKF4adPT8xXmO4ySXRA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
34:6d:0c:8e:53:f0:c1:60:fe:d6:d4:6c:09:72:58:5c:9e:94:
e8:8b:61:06:87:b6:72:bd:2f:42:db:5a:68:1b:fb:22:e9:05:
26:ef:84:5f:0b:f3:e8:07:ed:b8:1c:87:68:96:70:ab:fc:cc:
73:38:9a:a9:32:0d:fd:b9:c2:6a:90:65:0e:13:c8:5d:2d:c9:
3c:20:7a:44:a5:2a:01:f6:1d:44:22:63:55:17:70:19:93:bf:
38:8f:78:0a:33:b6:ce:3e:8a:c7:8f:1f:e4:fe:dc:35:5e:7b:
33:f9:22:c5:d0:c1:ee:39:1e:1d:89:02:23:11:1b:dd:4a:1f:
f9:c3:1f:ac:6c:15:c9:ea:dc:4c:07:e8:ce:42:d8:06:f0:8e:
29:25:51:ce:eb:6b:fd:e4:3b:21:a9:cb:b1:65:ed:88:bb:f3:
31:92:61:5b:a4:fe:e1:99:88:cb:70:c7:75:21:3e:21:df:1c:
99:4d:80:a0:0f:27:5d:89:a7:a2:ca:2a:0f:ff:3e:6d:b7:c3:
65:a4:8c:01:b9:5a:83:4d:ed:9f:e9:53:e2:61:07:6e:10:46:
eb:9f:bd:0f:9b:d1:34:8f:db:69:9a:ff:9e:94:62:f2:09:65:
01:6d:aa:fd:57:94:0a:04:17:c9:3b:da:fb:05:7f:5a:27:67:
83:57:d4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 12:19:17 2025 by rpki-client