Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/1fOyXEL_79TWgHvzCsyDWoe_IPk.roa
File: 1fOyXEL_79TWgHvzCsyDWoe_IPk.roa (raw, json)
Hash identifier: +yBEsIU9CRsZ9bjfQqYAwwQMRmeC2/matRPfjQXIht0=
Subject key identifier: D5:F3:B2:5C:42:FF:EF:D4:D6:80:7B:F3:0A:CC:83:5A:87:BF:20:F9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0112
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1fOyXEL_79TWgHvzCsyDWoe_IPk.roa
Signing time: Thu 08 May 2025 12:07:44 +0000
ROA not before: Thu 08 May 2025 12:07:44 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 12:07:44 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D5F3B25C42FFEFD4D6807BF30ACC835A87BF20F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:a4:e0:73:76:61:e5:13:f2:ba:41:bc:50:
34:77:9f:93:27:0a:da:51:ac:81:3a:35:0f:a4:e5:
eb:90:3c:26:c2:c0:a8:6b:d7:e7:0d:c8:d9:3a:74:
38:db:77:23:0a:b6:f2:71:22:00:dd:be:7c:ca:de:
f3:3e:4c:e7:ac:19:09:78:9e:32:59:67:7f:7f:22:
65:5b:94:fc:88:84:8c:e5:5f:2d:40:8c:28:1e:b1:
f4:19:a2:f7:90:ab:1f:53:35:72:3e:f2:c6:f6:be:
5a:f3:cd:60:68:9c:fc:6a:81:a6:92:5a:74:df:45:
3b:6d:5d:94:8f:29:c9:14:89:85:0f:c4:fa:eb:20:
4b:b3:67:16:67:6d:b8:f5:9b:07:03:ab:61:5a:23:
a1:79:60:10:54:d6:43:b1:f4:16:40:2f:8f:05:e2:
9f:84:66:60:8f:9c:fd:8d:59:94:fa:0e:d3:40:67:
77:e2:e7:b4:0d:2a:96:29:a9:3e:cc:4c:f6:63:5a:
1e:2f:35:7e:a5:8e:d2:a7:a4:f6:30:db:04:8b:d6:
27:1d:45:51:9b:e7:95:d6:9b:17:5c:77:f8:f1:f7:
72:15:c9:80:f0:8c:0c:bf:5e:70:e4:e7:ba:a3:6b:
a5:3d:c1:88:eb:c4:78:19:c5:10:69:a0:c5:fb:38:
d0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F3:B2:5C:42:FF:EF:D4:D6:80:7B:F3:0A:CC:83:5A:87:BF:20:F9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1fOyXEL_79TWgHvzCsyDWoe_IPk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:93:73:b7:34:ef:c1:f8:c6:fc:4c:ea:8a:b5:55:ed:4d:9d:
46:78:d8:22:f5:51:b8:69:73:fe:e1:bf:23:ff:f1:5b:07:be:
5a:13:5f:20:43:10:15:d2:5d:71:95:95:3e:3b:47:dd:4d:25:
d0:51:da:8a:24:dd:31:d3:ce:06:91:44:cf:98:fb:ab:c3:22:
54:c1:74:02:b1:c4:c5:d9:f5:20:a0:4a:bc:63:77:63:10:72:
88:ac:62:cb:64:37:c8:46:c9:32:b7:80:e8:de:e6:d2:14:bf:
90:0e:1e:c6:26:9b:2c:80:ad:15:59:86:a3:16:2e:4a:57:ee:
5f:ee:8e:ba:5d:f8:44:b2:54:26:91:b1:ae:b7:84:02:cd:8f:
07:17:20:59:f4:90:f6:21:39:82:9e:fc:02:a7:2c:8a:53:8e:
56:16:56:31:11:a7:ea:5d:39:90:d0:3a:66:61:85:d7:87:e2:
0a:16:a2:1d:39:99:c7:ae:9c:29:bb:41:b5:78:7f:3d:56:f6:
14:fd:96:33:e4:e3:b1:01:f6:12:e2:a1:af:65:0a:1e:23:6c:
1b:a4:e6:de:61:f0:6c:78:23:93:b0:b3:0c:a2:af:c7:e2:c2:
bd:0d:3d:f7:f4:03:0f:26:6f:de:6f:db:b1:a4:28:3f:d3:a4:
65:fa:e9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:20:20 2025 by rpki-client