Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/wsk_Ix2FCdknJHjlRqbIzKDKiog.roa
File: wsk_Ix2FCdknJHjlRqbIzKDKiog.roa (raw, json)
Hash identifier: n4T3PrZzEUG3ruxqrqVhIzP5tbs9p7sKd8T/aH3mYnM=
Subject key identifier: C2:C9:3F:23:1D:85:09:D9:27:24:78:E5:46:A6:C8:CC:A0:CA:8A:88
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03FE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wsk_Ix2FCdknJHjlRqbIzKDKiog.roa
Signing time: Mon 12 May 2025 09:37:55 +0000
ROA not before: Mon 12 May 2025 09:37:55 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1022 (0x3fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 09:37:55 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C2C93F231D8509D9272478E546A6C8CCA0CA8A88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:dc:99:3d:6c:3b:a2:4c:9b:16:c6:7b:3c:
51:6c:9d:0d:12:d2:d8:f2:79:39:07:43:82:e2:0d:
b8:43:b0:e3:7d:38:ad:6b:9d:58:6f:98:be:aa:24:
f1:3a:a3:1e:16:3e:34:0a:c8:a8:33:8a:b4:fb:b3:
3a:9c:28:66:3e:f8:ec:97:13:9b:76:ba:93:33:9c:
2c:b6:6e:c8:27:76:80:b5:b9:19:43:23:cf:b4:e3:
0a:2e:2f:76:38:c5:d9:79:a1:ce:c4:9d:53:d8:51:
b9:d4:bd:da:1e:eb:89:98:82:2a:86:2d:aa:14:47:
63:93:b1:b5:9e:6b:b4:8f:a9:36:62:92:fe:69:2c:
74:53:5d:bd:49:c5:6b:09:1f:68:6f:bf:04:c3:ec:
b3:3f:71:4c:fb:98:c0:d3:d9:6a:51:c1:d9:74:0b:
52:df:20:12:e0:c7:19:4b:aa:d5:1e:a0:02:da:dc:
05:25:7c:f3:27:e7:53:6e:93:df:25:10:b1:a4:14:
17:85:10:6f:cb:98:fd:13:52:51:fd:ef:03:be:63:
c8:d6:2e:75:2e:a8:05:70:d6:8d:22:11:2c:0d:86:
54:95:81:f8:70:30:f8:53:da:f5:ff:f7:fb:8e:33:
d3:ff:26:e2:fe:cd:40:7d:e3:4d:b8:89:7f:ca:78:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C9:3F:23:1D:85:09:D9:27:24:78:E5:46:A6:C8:CC:A0:CA:8A:88
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wsk_Ix2FCdknJHjlRqbIzKDKiog.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:ad:b1:71:46:64:2c:4f:78:96:55:d4:09:0c:7d:45:39:91:
74:bd:98:27:45:b5:96:69:e6:91:f0:a9:00:41:16:a2:06:87:
d3:f0:30:51:fd:5b:00:c5:78:7a:56:de:8b:cd:f2:9f:ad:39:
ef:76:f3:89:f6:03:a6:59:9e:bd:89:65:1a:01:1d:3a:46:60:
42:71:dc:bb:5f:ce:15:c5:e4:1f:8c:96:a4:c5:7c:6c:34:5a:
2c:27:df:da:37:81:6e:dc:3f:30:42:d0:38:44:c7:c8:fb:98:
d5:9f:ba:19:81:16:07:99:d9:31:c5:c9:b1:b7:99:3b:84:4c:
5e:31:ad:d8:47:8a:97:6e:18:b6:42:1b:b6:de:32:75:12:3b:
9b:6d:c3:26:3e:09:e2:6b:2c:43:c3:74:84:77:34:6f:cb:50:
5f:e8:8f:23:18:15:a0:78:55:15:d1:63:94:54:16:4f:43:18:
cb:97:44:2b:04:e1:3b:2c:22:e5:a4:43:cc:8b:58:2b:0d:bd:
1a:d2:14:f0:37:15:f7:a2:94:95:d3:97:f9:f5:9c:a1:5a:90:
4c:60:62:b9:35:fa:6b:a6:4b:e8:dc:fc:4c:e1:d2:e7:a1:b0:
9a:29:5f:73:4d:b5:26:69:bf:31:5a:ea:41:3b:77:b7:f2:b0:
0e:d6:14:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:42:08 2025 by rpki-client