Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/2wO9Hr9_AwO20rSlJe6yH8otAbw.roa
File: 2wO9Hr9_AwO20rSlJe6yH8otAbw.roa (raw, json)
Hash identifier: nsqN3SX0R6Tp4A2WPv0RwnQdKz621TzyfaS6EdT48RM=
Subject key identifier: DB:03:BD:1E:BF:7F:03:03:B6:D2:B4:A5:25:EE:B2:1F:CA:2D:01:BC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 151E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2wO9Hr9_AwO20rSlJe6yH8otAbw.roa
Signing time: Wed 04 Jun 2025 05:39:31 +0000
ROA not before: Wed 04 Jun 2025 05:39:31 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5406 (0x151e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 05:39:31 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DB03BD1EBF7F0303B6D2B4A525EEB21FCA2D01BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:61:c1:eb:1b:a8:7b:e8:6c:14:b8:b4:8e:a7:
dd:0d:86:88:a8:d7:91:32:8c:ea:2e:99:93:b4:9a:
b3:a1:8c:79:14:68:b9:ed:13:f7:a7:61:5f:f0:22:
c1:64:99:86:0d:16:87:9c:c9:36:31:b9:f4:2f:8e:
fa:19:7b:5c:47:22:3d:64:54:0a:b7:df:c2:ad:e4:
1e:fa:a4:b3:10:e6:d1:9a:45:cc:6b:ff:b9:22:70:
1e:1b:57:b2:86:43:16:58:51:03:b7:3a:08:d2:4f:
65:83:7a:5f:f6:0c:85:17:e0:34:a6:70:c6:c1:ca:
91:dc:c8:d2:14:a3:98:6a:15:b8:7b:96:18:9c:c2:
7a:7e:bd:b2:d7:f6:9c:d5:23:37:30:19:35:09:c7:
47:ef:d7:67:2c:c6:df:c5:8b:c4:18:fe:ff:4c:7e:
b3:44:a2:85:c4:da:38:10:ad:29:71:ae:37:e4:55:
1b:00:44:f4:2c:78:a7:a2:76:62:c2:c9:45:b1:51:
da:c6:01:b2:d1:f6:db:23:10:e6:22:1b:7d:40:8f:
16:a4:20:10:74:83:d3:86:1b:d7:3f:14:6e:3e:39:
94:27:cc:1f:24:eb:98:70:11:f5:1a:13:c5:9a:c6:
6f:f6:7e:88:4a:9d:4f:5d:51:b7:62:02:f5:10:94:
4c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:03:BD:1E:BF:7F:03:03:B6:D2:B4:A5:25:EE:B2:1F:CA:2D:01:BC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2wO9Hr9_AwO20rSlJe6yH8otAbw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:2f:5a:4a:3b:c7:c5:6a:13:6c:46:07:87:69:f4:4c:62:c4:
95:d8:0b:b2:2c:96:ed:58:9d:32:80:82:8c:9c:7b:5f:ce:9d:
b4:12:0d:8e:5e:3f:40:eb:e0:43:34:dc:da:73:da:56:f1:59:
eb:8d:2a:7a:70:4b:a9:6c:2c:f2:41:8c:1e:f4:75:91:17:9b:
7d:3e:d8:05:a8:c2:e5:f9:5e:ae:ec:c5:fa:61:a1:31:11:ce:
13:5d:8e:ab:a7:e5:61:e2:0a:c4:e9:7c:d2:84:c8:ce:98:e2:
71:a2:c1:c2:66:9c:1c:c1:c3:51:32:95:b5:0b:a0:73:02:e5:
07:7b:3e:11:5d:b0:5d:0b:ad:17:8e:e5:4b:8f:53:d9:17:b9:
ff:b0:99:51:b3:07:76:9d:56:97:73:00:5c:27:fd:77:c6:27:
68:20:cc:4b:6c:9a:ec:bc:75:78:44:e8:cf:35:45:0d:52:61:
d3:25:ea:c6:81:e2:e0:9c:af:7f:a1:f9:2e:bf:df:a6:78:9d:
d3:31:0e:04:75:cd:a5:54:39:c2:3d:ba:b0:ca:66:e7:25:0c:
3d:64:18:27:ed:f7:03:81:93:9d:3b:53:2c:e8:67:fa:db:3b:
20:3b:be:c8:25:38:47:4d:ef:0d:53:6c:42:0f:96:1c:7c:ba:
c1:dd:3d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 00:53:14 2025 by rpki-client