Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Bd_5EiUFnLWY1enj04588hDF79c.roa
File: Bd_5EiUFnLWY1enj04588hDF79c.roa (raw, json)
Hash identifier: cP9dsEah/ORAP/eTSJql6AgSoLMNV3Vm+q0TdWHIYn4=
Subject key identifier: 05:DF:F9:12:25:05:9C:B5:98:D5:E9:E3:D3:8E:7C:F2:10:C5:EF:D7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 15CE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Bd_5EiUFnLWY1enj04588hDF79c.roa
Signing time: Thu 05 Jun 2025 03:39:30 +0000
ROA not before: Thu 05 Jun 2025 03:39:30 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5582 (0x15ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 03:39:30 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=05DFF91225059CB598D5E9E3D38E7CF210C5EFD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:57:42:46:e0:44:41:6c:59:e9:17:ef:55:
c9:2d:ee:9e:79:0e:37:5d:5c:0c:d8:b3:b4:52:4c:
ef:ad:2b:7f:e8:b0:90:db:47:6a:7c:be:19:6e:08:
e5:52:69:be:6c:1c:b2:ab:79:43:c6:1d:97:0c:00:
50:fd:7b:f7:05:2e:be:73:ae:82:7e:4b:1e:55:4c:
a9:3f:c1:de:19:eb:c5:22:ba:eb:c0:d6:74:98:18:
dd:55:f7:18:42:34:06:72:a4:17:4c:5e:45:fb:48:
11:5b:07:cf:24:ff:d3:97:42:6c:94:fe:cf:46:04:
9e:59:71:6c:9e:67:2f:43:51:1d:03:d0:8f:5a:81:
dd:5f:dd:68:bb:22:c0:4a:37:77:b6:e7:62:15:b6:
44:be:50:e8:63:ba:df:14:cc:7a:02:e3:d9:d9:d3:
b6:e3:30:58:47:f4:3d:a6:3c:28:94:3b:3e:c5:b1:
9c:c4:2d:5f:ec:44:77:06:50:dc:7e:bd:5b:88:ac:
bf:39:a6:89:a7:4d:69:c7:5b:b3:50:00:8c:78:2c:
ef:ba:9f:09:58:00:38:21:78:7c:bf:35:e2:a6:97:
24:54:1c:e1:b8:67:a6:16:1f:97:d5:93:89:9f:e5:
be:16:e5:b6:31:66:3b:50:0e:ae:e1:26:35:f6:04:
20:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DF:F9:12:25:05:9C:B5:98:D5:E9:E3:D3:8E:7C:F2:10:C5:EF:D7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Bd_5EiUFnLWY1enj04588hDF79c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:e4:2e:5e:c4:3e:ea:3d:5a:f2:00:0f:95:e0:f7:13:96:e7:
14:91:2a:e7:7f:aa:2d:fc:47:b7:82:66:f1:04:e9:cf:cc:d1:
8b:82:e1:35:6d:35:2c:81:16:a4:18:83:ae:69:07:5d:ab:d5:
ac:f5:b1:8f:34:a7:45:50:f7:1b:33:b2:e2:40:56:c2:de:8e:
45:b7:ad:ea:3c:da:03:ac:a7:8e:ea:50:e2:a8:cc:dd:e2:89:
7c:c4:e1:c9:65:c0:e9:6a:7d:52:92:b4:87:1a:e4:c3:8f:e3:
f9:11:21:37:5b:6e:e8:61:07:d1:88:24:5f:17:ee:a7:c8:9f:
ee:da:af:29:4e:6a:a7:36:d5:b9:c6:f6:68:1c:21:c9:e9:16:
12:7d:f9:23:11:08:cc:f1:93:31:b5:99:77:b4:62:54:41:8f:
ea:ca:6c:bd:ef:2d:19:94:7b:d8:68:c1:0f:75:a1:c7:d7:a5:
be:0e:ba:1f:1e:09:02:ad:a0:58:e2:c1:bb:c5:42:c3:2d:c7:
2e:92:18:dc:e8:70:2a:98:35:81:cb:81:5b:3e:05:1f:4f:a8:
53:40:a5:ea:b8:dd:87:24:47:8c:39:de:48:80:4a:c1:c7:ed:
3e:9e:6f:df:92:c3:8f:3b:07:d6:8d:8a:4f:8d:9b:d1:05:df:
3b:04:33:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 00:47:03 2025 by rpki-client