Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ARtD85mK_e6o17zJ2v_5vUT4u9g.roa
File: ARtD85mK_e6o17zJ2v_5vUT4u9g.roa (raw, json)
Hash identifier: /KhMOqqP0bPU7rDvO/r6rYQ20x6/Nzt6r7hNinZwIi8=
Subject key identifier: 01:1B:43:F3:99:8A:FD:EE:A8:D7:BC:C9:DA:FF:F9:BD:44:F8:BB:D8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 195A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ARtD85mK_e6o17zJ2v_5vUT4u9g.roa
Signing time: Mon 09 Jun 2025 21:09:42 +0000
ROA not before: Mon 09 Jun 2025 21:09:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6490 (0x195a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 21:09:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=011B43F3998AFDEEA8D7BCC9DAFFF9BD44F8BBD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:c2:c5:57:55:7b:39:a1:98:3e:33:da:bf:
5c:35:2f:4f:73:1a:0c:45:e6:f7:a8:62:5c:8c:ad:
d4:f4:51:6f:0d:70:ae:99:28:d2:88:5c:fc:60:c1:
9b:52:93:8f:d3:b8:a9:39:63:f4:61:c0:f8:d7:3a:
6b:a2:da:83:a2:0a:f2:b9:05:6d:2b:64:80:da:80:
c0:39:e3:f0:45:40:77:b5:57:f7:b1:61:15:ce:6b:
4a:8d:89:92:65:2e:cf:be:75:7e:ee:9f:8d:e4:4e:
c0:72:ae:42:24:fe:70:1e:c9:27:62:e5:ef:0a:26:
9b:7b:c9:a9:07:da:88:41:f8:9f:bd:71:9c:45:58:
fe:5a:45:58:58:b9:37:96:bc:cf:6c:c3:4e:15:2e:
99:fe:af:7c:1b:23:9e:0c:2a:c1:c3:95:d5:e1:25:
53:bb:ae:ee:dc:a4:a6:a6:a1:e9:8b:ae:9d:b9:15:
28:aa:21:1d:b4:dd:02:9a:29:41:52:7c:47:e7:c0:
26:47:f8:d8:c0:12:98:6d:97:cf:a0:be:e7:23:1a:
a3:38:42:82:81:8b:17:f1:7e:5e:20:95:b7:f0:fa:
52:a5:d9:56:ea:fe:38:57:b3:84:42:64:d3:9a:7d:
a1:aa:72:a3:29:2f:d5:55:84:33:84:0f:36:73:ae:
f2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1B:43:F3:99:8A:FD:EE:A8:D7:BC:C9:DA:FF:F9:BD:44:F8:BB:D8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ARtD85mK_e6o17zJ2v_5vUT4u9g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:7b:78:78:75:7e:9d:55:40:71:0b:17:96:5a:48:2c:d1:ef:
db:6b:0f:1e:18:cc:2b:43:14:66:3c:36:81:f7:c7:d0:af:09:
3d:1d:a3:7e:a0:90:ea:c3:ce:15:f2:11:12:d5:5e:4e:08:f2:
5d:63:35:66:05:5d:8f:71:a8:ef:b6:66:f8:2c:33:78:3f:74:
4f:29:d1:5d:0b:84:3a:44:1e:5e:17:d1:39:23:5f:28:c1:6f:
11:41:db:0f:a9:d5:a4:cd:d8:84:29:00:16:e7:05:fe:e1:5f:
d3:89:d4:23:67:38:c8:4d:d4:33:f6:99:65:53:92:65:2f:97:
9f:e3:e1:5c:c3:08:1b:2c:bd:2b:9c:e5:49:4f:31:3f:67:d3:
00:4a:69:95:30:fc:a2:b7:f7:f7:39:60:a5:01:6b:3c:b4:3e:
b5:11:36:3b:b3:55:b1:63:23:d7:1c:a0:d4:a6:68:d7:03:1b:
16:48:6c:0a:8d:71:8c:b0:fc:b0:b3:65:04:65:59:68:f6:9e:
47:e8:fd:b8:d4:7f:a1:c0:ea:16:2e:a4:30:25:89:bd:d4:14:
a1:c0:75:7b:e8:7b:0f:f3:9f:88:62:da:0e:12:e2:56:cb:f5:
ed:69:70:92:46:26:3d:35:ef:5b:13:ad:be:66:15:0a:e9:87:
08:4d:12:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 22:37:54 2025 by rpki-client