Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/8yLqXdSaEt8Qlw1HtV1KN53zxWY.roa
File: 8yLqXdSaEt8Qlw1HtV1KN53zxWY.roa (raw, json)
Hash identifier: 9QSyY7M8vK651Uh6kWBtX1lBTo7XEl9ehi04O7rWDZ4=
Subject key identifier: F3:22:EA:5D:D4:9A:12:DF:10:97:0D:47:B5:5D:4A:37:9D:F3:C5:66
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D6A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8yLqXdSaEt8Qlw1HtV1KN53zxWY.roa
Signing time: Sat 24 May 2025 23:08:32 +0000
ROA not before: Sat 24 May 2025 23:08:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3434 (0xd6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 23:08:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F322EA5DD49A12DF10970D47B55D4A379DF3C566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:ec:b9:31:2d:d9:46:ee:2c:7a:b3:5c:2f:
bf:44:ef:ef:53:d7:82:10:a0:2c:0f:83:36:ee:6e:
d9:eb:cf:f8:c6:a8:a8:92:a6:cf:a4:8c:3e:31:ce:
04:76:9c:25:12:b3:87:5b:09:72:e2:2e:57:ae:e9:
b1:17:b0:5c:1d:dd:1c:b8:66:f6:89:80:03:3b:81:
aa:92:4d:3e:34:50:c2:fb:72:a0:03:47:0f:ea:3a:
96:9a:ea:11:9d:a6:9a:a1:aa:ee:5c:4e:3d:81:13:
b8:07:11:b9:87:0c:16:21:60:7d:ca:70:6f:be:76:
43:81:ce:bd:9d:c7:d0:a5:26:2f:cc:5f:1c:9c:0e:
e2:56:0c:6f:cd:01:9d:1d:fb:11:d6:44:58:7d:f9:
64:b8:99:08:62:a4:fd:6b:56:cc:bb:dc:aa:ba:ff:
7e:4f:6f:92:6c:7c:d1:f5:4b:0c:cb:2c:e4:ea:51:
51:72:d2:7f:08:d2:56:7b:db:be:5c:1e:eb:17:64:
9e:dc:f8:e7:4c:81:80:a4:80:0f:c3:77:e4:19:79:
16:bc:aa:ff:61:9a:22:e2:c4:94:54:76:92:b6:d6:
e3:0c:89:e0:82:31:e8:7a:0d:9f:d4:60:ed:b0:e8:
f1:64:97:76:22:53:94:81:44:8c:99:0c:01:f8:85:
a2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:22:EA:5D:D4:9A:12:DF:10:97:0D:47:B5:5D:4A:37:9D:F3:C5:66
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8yLqXdSaEt8Qlw1HtV1KN53zxWY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:43:50:0a:97:6f:54:74:a0:83:60:a1:fe:f4:72:fc:9b:72:
cc:3c:e0:45:a2:37:12:cd:40:55:35:e7:10:68:fe:1b:47:ea:
11:41:0f:c3:44:b9:c9:7a:8b:95:1b:f2:ba:ba:f0:3f:1c:53:
4a:46:61:23:dd:96:00:ab:e7:31:17:72:8f:81:da:5e:e5:44:
8d:b0:05:2f:ba:31:5d:c5:b3:26:1f:3d:09:65:df:99:ec:f4:
b0:cb:14:c6:09:4c:2b:53:ce:38:26:e4:e6:40:dd:69:e5:68:
51:33:23:7d:95:1c:f1:22:7b:0a:02:ab:23:5f:d4:44:ff:df:
43:43:84:48:93:61:20:c8:0b:f1:81:42:5d:30:0a:6a:e6:5c:
38:d2:de:5b:01:f8:df:ec:f4:82:39:8e:d1:15:ad:b5:92:c0:
ea:9c:74:47:0c:cc:c9:47:7e:d4:a3:91:27:17:67:f9:14:7b:
83:ec:59:6f:00:06:8c:38:45:f2:3c:5d:9d:17:3d:07:9a:65:
12:70:41:9a:94:76:10:b8:f2:88:86:10:9b:95:85:11:cd:86:
ee:b8:d1:d2:6f:f8:82:0b:e2:24:81:f3:fe:65:32:0d:04:b5:
6d:18:d6:ec:9d:ad:3f:1c:fb:2e:fd:58:44:b8:44:c9:4a:0d:
7e:6f:e3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:14:37 2025 by rpki-client