Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/3N9z5fsCPZU6lGMuey9Ox6Is9ec.roa
File: 3N9z5fsCPZU6lGMuey9Ox6Is9ec.roa (raw, json)
Hash identifier: BuYdh0H1uaNTgPtfd8JPlWv0VUGI1f1AIQbiwvM/K5M=
Subject key identifier: DC:DF:73:E5:FB:02:3D:95:3A:94:63:2E:7B:2F:4E:C7:A2:2C:F5:E7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1B9A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3N9z5fsCPZU6lGMuey9Ox6Is9ec.roa
Signing time: Thu 12 Jun 2025 21:10:04 +0000
ROA not before: Thu 12 Jun 2025 21:10:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7066 (0x1b9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 21:10:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DCDF73E5FB023D953A94632E7B2F4EC7A22CF5E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:69:ee:b1:3a:9d:c8:6b:8a:b5:e4:57:10:48:
18:f6:17:ff:33:ab:e5:56:b9:56:06:78:fb:73:5c:
dc:91:0e:ec:18:61:f2:d0:1e:89:87:ba:0f:b9:01:
67:f1:91:28:23:50:1f:88:e9:d5:e9:9b:d0:a7:84:
53:78:15:12:6d:22:cf:db:0b:07:01:5b:99:c6:25:
0c:20:d4:1d:66:bb:76:0c:f8:fd:b5:c6:00:9a:5f:
b3:eb:2b:5c:13:56:79:3a:21:a6:f2:00:2b:0b:2d:
bc:8b:ff:c5:e1:20:84:79:3c:ef:98:6b:20:b6:cf:
72:5b:52:13:77:75:bd:03:d2:4f:37:f1:fa:f4:8e:
ae:8b:73:0e:44:d6:7b:54:42:52:5b:fb:1a:98:09:
c6:77:70:de:58:d6:9e:3b:4b:5e:45:b5:1b:9f:25:
86:e4:29:98:98:9f:fe:14:df:d0:b1:78:0f:5c:75:
52:a5:91:16:a1:b4:e5:cc:8b:d4:02:12:b4:e4:ca:
e1:be:06:c8:17:67:d8:56:d7:ff:7e:29:5b:17:2b:
ee:33:60:71:39:34:b2:e5:e2:7f:b0:c6:b5:1e:e4:
04:ce:e8:19:b4:81:c9:93:50:06:ab:1f:74:06:92:
dc:d3:f1:df:f3:dd:b9:25:68:54:67:1f:b8:32:10:
d6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DF:73:E5:FB:02:3D:95:3A:94:63:2E:7B:2F:4E:C7:A2:2C:F5:E7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3N9z5fsCPZU6lGMuey9Ox6Is9ec.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:c6:5d:41:6f:94:3c:d6:79:10:12:6c:66:7f:cc:f5:db:dd:
9d:2e:ed:c9:94:fb:33:0f:5a:3d:0a:0e:08:2c:16:cf:b0:8b:
2b:ea:18:19:1d:a5:b2:8d:47:dc:41:9b:13:d9:f3:a6:81:38:
45:56:ff:d4:99:b8:c8:c3:55:81:51:71:a0:15:61:95:a7:e0:
a7:f2:e3:56:a0:be:8e:b8:58:5c:f8:ca:9b:4d:94:13:f2:e7:
3e:77:d3:67:25:d9:1d:68:4e:a2:00:24:d7:d5:2a:a9:45:f4:
cb:40:ea:d8:49:77:5d:90:9e:28:76:6e:78:7d:17:e4:8f:8a:
48:1c:19:25:9d:2d:38:de:1c:21:42:51:ee:4b:6f:7c:e0:e2:
39:40:b6:c4:b3:7c:a1:07:9a:54:cd:4c:59:b3:d4:5b:62:f7:
84:bb:30:1b:10:ed:f9:93:04:bf:59:33:73:e4:a9:1a:3e:a7:
70:1f:52:bc:5c:2a:ed:f0:c3:03:cf:77:a6:5c:34:53:2b:79:
15:51:d2:0a:3a:4c:7d:34:73:5a:9a:6f:1b:3c:f6:72:14:c9:
84:56:c3:60:aa:b4:aa:6d:15:b2:c9:87:42:3a:09:72:26:6d:
64:10:c7:77:6e:0d:c5:43:5f:36:3a:d3:8d:7c:2e:3f:b6:0a:
e0:4b:2b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 08:11:55 2025 by rpki-client