Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/8g873S3E1EPeSk3UVd3u-lc0hxY.roa
File: 8g873S3E1EPeSk3UVd3u-lc0hxY.roa (raw, json)
Hash identifier: HaYLB2/fQ0v/Cmd7JYFAvZ38TW7u7dsSBgHWV810caQ=
Subject key identifier: F2:0F:3B:DD:2D:C4:D4:43:DE:4A:4D:D4:55:DD:EE:FA:57:34:87:16
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0826
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8g873S3E1EPeSk3UVd3u-lc0hxY.roa
Signing time: Sat 17 May 2025 22:38:51 +0000
ROA not before: Sat 17 May 2025 22:38:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2086 (0x826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 22:38:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F20F3BDD2DC4D443DE4A4DD455DDEEFA57348716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:a2:22:d8:3a:1f:40:82:e6:d1:1d:45:22:
1f:4c:7c:a6:39:5e:07:be:bd:a3:6c:18:84:11:c8:
ab:d7:5e:e4:f6:42:a6:4e:87:5c:07:80:38:51:79:
fb:ae:ab:7a:8c:04:42:ca:93:e5:32:9b:df:9b:a1:
96:c8:c7:b2:14:b4:b0:b0:0c:d1:1a:4b:8b:ae:af:
ae:4e:a1:00:d2:3b:3d:6d:8c:35:48:47:b9:57:85:
5a:9c:c6:c5:3b:d8:53:42:41:16:df:4a:6a:d7:25:
f2:93:72:f4:65:ac:fd:ff:ad:ef:09:07:1b:4f:df:
0a:b6:9c:ee:32:c4:ac:65:76:ed:88:9a:15:ad:e2:
73:29:66:7d:7e:1f:74:d5:21:07:0d:ae:48:0c:bd:
72:bf:0b:2b:d4:2f:76:58:04:52:33:da:0b:b5:aa:
36:14:60:6c:68:82:e7:c2:ab:40:ac:c6:9a:6d:01:
28:7b:3c:76:0e:f6:3b:ad:61:da:db:a2:e9:66:1a:
6b:51:d9:4c:ee:9c:b1:3b:08:b3:ea:35:7b:c8:eb:
a1:e2:19:23:97:32:84:a7:18:1e:98:13:11:3f:75:
5d:28:30:f8:c5:81:72:6e:ff:e2:b9:a1:ee:a0:ca:
79:b6:3e:0e:0a:42:19:5b:fd:18:9d:e4:bb:64:63:
38:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0F:3B:DD:2D:C4:D4:43:DE:4A:4D:D4:55:DD:EE:FA:57:34:87:16
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8g873S3E1EPeSk3UVd3u-lc0hxY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:e8:fa:af:49:fa:32:89:1f:b6:96:3f:4c:ed:cd:bb:62:ba:
af:b1:98:53:f5:66:0a:1f:1f:e6:de:8a:70:d0:c9:11:a4:78:
f4:3b:13:70:29:42:8d:31:38:50:62:e0:ba:4e:fe:1b:28:72:
ff:dd:cb:95:f2:69:d3:b7:d3:b4:f1:29:c7:22:36:a3:c5:e2:
56:e0:ef:c9:4c:bf:d0:f9:68:16:8f:65:8d:41:38:f2:3d:0f:
07:e4:3e:63:b2:83:1d:c6:d2:fb:ab:a4:0e:63:96:f1:7f:5c:
d2:bd:7e:5a:00:58:35:de:f4:ac:0a:fe:bd:a4:58:6f:cc:61:
37:46:38:c3:61:87:1e:96:f6:5e:93:bf:59:b4:12:1a:b0:2c:
c5:e4:0e:a2:93:d4:fa:33:86:ab:f5:30:ad:15:fa:9f:c4:e2:
c9:3f:45:97:c5:49:64:49:90:1b:79:c9:9c:d3:95:0a:ca:5f:
bb:76:36:28:8a:52:dc:72:18:7c:ab:0a:db:cb:9a:f8:fe:4e:
69:d4:b5:06:5a:35:94:e1:58:8d:cd:49:19:bf:7a:35:0f:cd:
98:0d:eb:33:79:9b:af:dc:c8:11:dc:32:dc:21:e0:2e:4b:af:
4e:d7:04:8d:23:81:dc:55:17:bb:e2:33:4b:24:77:66:52:35:
52:d6:a6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:08:59 2025 by rpki-client