Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/y12o4jGJygXg7Jk5AjXpm5FUWNM.roa
File: y12o4jGJygXg7Jk5AjXpm5FUWNM.roa (raw, json)
Hash identifier: bj/il6NDSa9F9SR377PnDZIOM5evA/GYC933mo0A07U=
Subject key identifier: CB:5D:A8:E2:31:89:CA:05:E0:EC:99:39:02:35:E9:9B:91:54:58:D3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 032E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/y12o4jGJygXg7Jk5AjXpm5FUWNM.roa
Signing time: Sun 11 May 2025 07:37:56 +0000
ROA not before: Sun 11 May 2025 07:37:56 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 814 (0x32e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 07:37:56 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CB5DA8E23189CA05E0EC99390235E99B915458D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7b:93:d3:5b:77:4b:d4:fb:49:38:b3:c3:aa:
6e:1d:75:27:77:47:a9:4d:98:cb:37:a2:59:21:2d:
51:28:01:71:a0:cb:7c:15:1a:dc:77:b2:96:32:b7:
75:e8:ac:2f:bb:55:95:8a:69:12:32:29:e8:2b:b4:
5b:77:6f:6b:d3:ce:cd:de:07:61:4f:4a:63:9f:0a:
33:fb:b1:7f:90:65:bb:81:b0:12:05:02:f2:87:1f:
44:9b:94:70:b2:4b:96:25:8c:72:e5:a0:ba:44:f9:
03:6b:85:3a:37:4f:bd:99:44:2c:2c:70:23:2e:a6:
57:ac:32:13:da:a6:4f:0d:90:31:89:07:d4:8c:1a:
b6:75:10:64:f2:cd:3e:8d:88:0c:de:91:0d:e9:f6:
00:a2:f5:96:ce:87:b8:22:46:b5:9c:ab:8a:a4:c7:
8d:03:c7:ff:5d:32:3c:99:4c:94:d9:90:75:90:7a:
6a:53:c1:e5:3f:ae:21:3e:dc:25:ca:73:76:67:55:
65:a5:f1:0f:55:3d:b0:6f:c0:a2:99:79:12:18:da:
55:fa:a6:3c:4b:23:f2:62:fa:74:11:a9:d1:5e:96:
f4:d7:bc:91:99:fa:4c:3c:cb:d2:ba:99:0b:7d:a9:
e7:c5:f2:43:32:24:1a:ec:a9:8a:17:19:c1:11:ff:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5D:A8:E2:31:89:CA:05:E0:EC:99:39:02:35:E9:9B:91:54:58:D3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/y12o4jGJygXg7Jk5AjXpm5FUWNM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:f6:c0:c2:78:b8:1f:73:3f:79:71:f2:98:e0:eb:67:55:3d:
85:75:c2:a7:ac:97:72:bd:dc:8b:34:00:9a:ad:f7:29:b0:1d:
ef:dc:75:65:16:ec:a9:2c:d6:29:bb:1f:29:6a:41:ee:e2:10:
a7:a7:c6:5c:1d:ac:83:ec:8b:28:5e:5d:80:3f:72:e9:81:31:
ff:b4:ca:b9:58:5a:6b:20:9a:2c:5f:65:47:03:ba:d8:41:44:
2d:8e:98:ce:8b:61:3d:20:af:81:04:3d:e8:05:d1:e2:d0:ea:
b2:50:f6:cd:8e:2d:80:6c:9c:8c:6b:82:f0:71:04:1f:2e:1b:
a8:e3:92:8b:9b:02:1f:4a:48:5f:04:30:65:20:01:9f:67:2a:
e9:1f:10:cd:ab:32:78:eb:4a:5e:53:e8:25:ea:04:9d:a2:86:
8d:6f:31:2d:1b:97:71:b7:8a:fe:25:b5:84:47:c6:6b:41:ec:
e7:83:7e:16:74:24:66:2d:cf:5d:64:18:86:aa:0a:06:e3:8f:
c0:af:b8:78:0f:2b:57:75:b9:0f:05:86:6a:c0:77:92:48:90:
ba:42:84:c5:ed:34:ba:ea:af:1c:c6:a6:3f:94:19:2a:ff:fd:
4e:d3:17:18:f4:26:52:b5:64:2a:48:dc:da:e5:b4:85:aa:13:
8e:7d:22:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:41:19 2025 by rpki-client