Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/7wYzEnBV8rtpTQ1u5sdfDI6EAk8.roa
File: 7wYzEnBV8rtpTQ1u5sdfDI6EAk8.roa (raw, json)
Hash identifier: oMe9+NQOn4jrniXTXdaI9QiqJ0bGiABu+vkIyrdigPM=
Subject key identifier: EF:06:33:12:70:55:F2:BB:69:4D:0D:6E:E6:C7:5F:0C:8E:84:02:4F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1BF6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7wYzEnBV8rtpTQ1u5sdfDI6EAk8.roa
Signing time: Fri 13 Jun 2025 08:39:52 +0000
ROA not before: Fri 13 Jun 2025 08:39:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7158 (0x1bf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 08:39:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EF0633127055F2BB694D0D6EE6C75F0C8E84024F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:ed:b7:fe:28:e6:44:8f:58:d0:35:da:81:
55:dd:fd:4f:d6:c3:6d:4d:c8:5c:cc:0d:ae:9b:5f:
55:62:91:7e:30:ec:60:d4:57:d8:a9:37:56:82:11:
06:53:41:6d:2e:2b:be:93:0b:8d:5f:15:30:13:6a:
41:49:37:1e:96:76:e0:6a:5a:dc:2d:b3:09:27:0a:
db:9e:62:d1:95:4e:38:54:94:bc:4f:30:44:aa:20:
cb:0a:e3:8b:c8:20:83:a4:bf:1a:47:80:99:ca:2a:
99:3e:a8:91:02:a2:6e:40:f2:59:1a:3c:83:a5:f6:
d3:76:ca:66:25:63:a1:b2:b3:50:33:7e:0e:22:13:
cd:35:9b:ff:2f:17:b8:d9:a4:6c:fc:9c:a2:b6:8f:
46:3c:f3:b9:84:06:9f:d0:6a:3a:2e:29:2c:f6:6b:
bf:6f:df:cb:a6:e7:8c:24:e5:e3:88:1f:57:43:a4:
bb:ce:9e:44:a2:81:5a:e4:c2:09:ca:6b:c5:b9:da:
52:96:78:ee:ed:e3:48:4f:76:5d:a3:e0:a4:25:02:
86:f8:ef:c6:e8:ef:b4:9f:99:84:0b:d6:8b:88:ce:
8f:c9:0a:d3:2d:3c:71:1a:0d:95:08:fb:b5:18:30:
05:72:b6:89:28:26:b1:08:b4:6c:9d:57:52:20:a1:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:06:33:12:70:55:F2:BB:69:4D:0D:6E:E6:C7:5F:0C:8E:84:02:4F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7wYzEnBV8rtpTQ1u5sdfDI6EAk8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
51:42:f8:a7:e4:0b:ab:cd:ea:c6:8b:b5:df:eb:bb:9f:01:b8:
36:42:da:47:bf:fc:e9:62:09:bb:e2:ce:4a:f9:8c:aa:e4:6f:
1a:61:42:a6:d0:25:5b:57:ca:a4:4e:80:b7:59:01:b8:f2:aa:
9d:64:b8:77:f5:65:42:3b:ea:09:b6:13:40:32:8a:48:d8:26:
61:78:84:e9:c3:8e:57:74:61:02:82:b1:be:14:97:d4:0f:d7:
ab:be:25:73:cd:40:b4:9f:7d:b9:69:94:98:83:77:8e:a3:5f:
65:67:d5:9f:c3:bd:0f:38:70:c4:54:76:3d:da:e4:a7:77:16:
c4:ba:71:2d:ce:29:77:28:2c:ec:8c:27:9f:2b:23:e4:02:0d:
e4:e8:2f:41:dd:80:20:1b:cb:94:91:87:e3:7d:e3:d6:c9:fd:
8c:ba:bb:e6:f7:25:d3:70:d9:8d:86:03:f7:f8:a6:74:63:1d:
32:53:d8:58:3c:ac:41:3a:dc:77:35:ea:67:42:5c:30:c9:af:
3b:63:e5:f6:84:ea:64:b6:b9:34:74:1b:99:12:5f:ab:17:f9:
bc:7a:a3:6a:bb:50:cd:f6:83:df:15:d1:58:ef:20:85:f6:f9:
ce:96:ba:e0:80:12:37:e1:d4:ff:90:e8:e9:b0:b0:b5:19:83:
2a:3f:78:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 07:11:47 2025 by rpki-client