Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/A3lPNnGiRQ83wccpEh5uVM_UfU8.roa
File: A3lPNnGiRQ83wccpEh5uVM_UfU8.roa (raw, json)
Hash identifier: Kn26B9onw7jwAYLZ6kIkhRqbmZOVgtcdn5A0JIILT8k=
Subject key identifier: 03:79:4F:36:71:A2:45:0F:37:C1:C7:29:12:1E:6E:54:CF:D4:7D:4F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01BE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/A3lPNnGiRQ83wccpEh5uVM_UfU8.roa
Signing time: Fri 09 May 2025 09:37:46 +0000
ROA not before: Fri 09 May 2025 09:37:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 09:37:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=03794F3671A2450F37C1C729121E6E54CFD47D4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:9c:eb:98:4e:e9:1a:b6:43:6c:f8:f3:e8:
af:75:20:aa:8d:c2:cf:f5:39:f2:db:2d:ef:9a:fc:
90:78:89:a1:26:67:aa:c5:36:b4:d8:55:53:d3:5f:
3f:9c:5b:47:b6:2c:6c:5d:c6:8e:3b:fa:0f:dc:1f:
9e:9f:4e:c9:f8:cf:b9:01:8f:9f:16:0b:24:3b:56:
59:6c:e1:71:e0:85:b6:f0:a5:46:18:92:77:e5:ee:
03:24:48:f6:84:1c:c0:b5:d1:9f:06:46:5a:c5:b3:
01:c5:33:72:49:65:23:20:1a:77:45:6c:8e:3a:3a:
6d:09:a1:1c:47:ea:04:48:ee:e2:d6:a8:32:ec:36:
ca:75:82:7c:c7:6c:3c:81:02:c3:b8:a1:93:fb:4d:
b6:77:44:55:9f:e4:d2:77:92:2a:db:a0:f2:6d:e3:
17:50:98:84:89:d7:37:e8:1c:8c:1a:7e:f8:bf:97:
c4:35:aa:e6:b0:c0:35:e2:b8:25:50:16:ab:57:21:
c4:83:bb:45:d7:85:49:b0:2f:50:5c:17:50:05:bc:
7f:56:3a:1b:be:7e:64:3b:c7:db:47:16:a8:bb:a3:
61:21:24:c0:61:7b:71:7a:9a:05:e9:35:60:38:8b:
f8:81:c1:e5:b5:f5:b7:72:14:0b:8d:02:d3:b7:51:
4c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:79:4F:36:71:A2:45:0F:37:C1:C7:29:12:1E:6E:54:CF:D4:7D:4F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/A3lPNnGiRQ83wccpEh5uVM_UfU8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:a3:79:1c:9c:d8:2f:d3:d7:91:cb:90:19:b9:af:e9:d9:79:
7e:2d:78:be:a3:a2:aa:fc:65:4f:ae:52:39:4e:16:66:40:c5:
d4:4f:6c:c6:b2:1a:96:e8:1e:93:30:2a:e2:a7:c6:d7:4d:45:
54:45:2d:ba:88:10:c7:ca:d0:a3:6a:88:5b:8c:87:ad:2e:48:
49:40:4f:8f:0e:ef:46:e9:5d:2e:cc:d2:c9:f1:f2:04:d2:dc:
4f:56:98:40:18:14:d4:e0:40:52:5c:21:05:46:22:b7:86:f4:
e7:84:a8:13:67:52:e1:20:0f:af:a1:2b:b9:c0:ae:01:16:2a:
79:e8:87:0c:0d:49:61:e2:9a:ba:24:d9:69:a3:cd:f6:e7:73:
a8:52:15:49:ca:69:7f:cf:d5:2b:51:c7:e2:3c:5f:01:3b:8c:
97:1f:f3:ed:e7:32:04:fd:3b:81:9d:ee:e9:ec:27:5d:fc:b9:
40:cf:98:0e:2d:7a:cb:d9:1e:86:3f:40:e8:9f:61:07:2d:fb:
58:32:91:56:e3:a8:c7:ef:a9:90:ec:50:10:e8:7b:61:b6:af:
91:b0:1c:0f:d3:ac:7e:45:7b:5f:df:7c:17:05:1b:07:7f:33:
25:95:e1:60:25:ea:85:bd:0e:de:8e:97:45:7e:c4:42:6e:c3:
4a:3a:7b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 08:58:46 2025 by rpki-client