Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/E1ifG_CP6eOy7eRFrxvDfoG2RlA.roa
File: E1ifG_CP6eOy7eRFrxvDfoG2RlA.roa (raw, json)
Hash identifier: ZSjpnA/63brLnXP1b9gqEeDFQa3X7JlrlaYHzVVTbuQ=
Subject key identifier: 13:58:9F:1B:F0:8F:E9:E3:B2:ED:E4:45:AF:1B:C3:7E:81:B6:46:50
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C22
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/E1ifG_CP6eOy7eRFrxvDfoG2RlA.roa
Signing time: Fri 23 May 2025 06:08:45 +0000
ROA not before: Fri 23 May 2025 06:08:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3106 (0xc22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 06:08:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=13589F1BF08FE9E3B2EDE445AF1BC37E81B64650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:74:65:8f:fe:38:f3:dd:c5:db:0f:07:94:
fa:cb:f7:33:4a:cc:bd:a8:9c:2f:d3:e5:03:1e:95:
5d:ee:32:9b:56:51:83:c1:27:1b:9d:3f:80:b0:a9:
ec:2f:4d:3f:ad:9f:f0:d3:2c:75:8f:1d:49:55:de:
fc:ae:70:b2:52:93:b1:92:d7:3c:71:c4:d4:63:6d:
0b:62:16:14:66:3d:35:f5:9e:39:55:63:b3:bf:1c:
cb:d8:65:81:72:15:3e:03:9f:36:b5:1b:37:fe:84:
de:e3:45:85:f7:41:1e:29:96:fa:cf:41:fd:5f:37:
fe:2f:01:72:6f:68:5c:93:d6:7f:ec:4e:34:76:3d:
69:60:33:1d:47:9b:c2:80:f5:f3:76:62:83:43:33:
91:fb:4d:03:24:58:b5:82:c0:83:15:84:78:6c:88:
62:00:d5:77:f5:82:32:8e:f3:31:f2:71:03:1b:c4:
fb:5a:0d:8e:30:41:23:31:3c:bb:4a:ae:e7:bb:59:
8a:ee:1e:ff:7d:26:25:7d:ac:fe:b4:1a:32:e4:78:
77:70:bc:c4:1b:a5:dc:d3:49:11:45:27:ef:f7:88:
35:c8:c4:32:c1:3c:c7:52:64:bc:79:79:cb:73:bb:
43:0c:51:a9:9b:28:b7:51:32:3a:34:00:6b:4f:ca:
7f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:58:9F:1B:F0:8F:E9:E3:B2:ED:E4:45:AF:1B:C3:7E:81:B6:46:50
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/E1ifG_CP6eOy7eRFrxvDfoG2RlA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:52:24:23:01:27:ec:ea:83:05:ac:de:d4:ee:96:bc:46:18:
5c:52:76:8f:d0:06:cb:ed:c6:87:13:c2:38:17:2e:85:44:67:
24:17:f5:fa:c4:d3:30:29:86:24:fd:0d:c0:4b:cd:22:a0:e5:
35:1e:dd:6c:e4:a9:84:94:3b:44:3a:9d:3d:a8:a1:6d:08:e8:
17:d3:4b:d1:ba:bc:ee:d7:20:d7:e8:e8:ab:b9:f9:d3:ef:b1:
0c:43:2a:31:f2:43:cf:18:fc:98:88:90:c1:6b:0d:0f:66:4b:
5d:da:59:04:51:99:92:67:41:52:1d:dd:48:03:c5:e9:dd:b4:
6d:c5:e3:fa:ad:e0:a2:24:4a:3a:f1:2b:51:a5:79:03:4f:49:
b4:4d:2f:89:f8:8c:54:e9:39:4d:62:fc:62:aa:31:a9:39:5d:
c1:9c:f4:e3:70:87:a6:68:46:bb:32:c9:30:e6:37:cd:ad:2f:
36:7e:ee:e1:1f:66:64:27:77:1a:4c:f5:6b:75:d4:2b:30:a3:
3e:10:f7:57:2c:63:24:1e:42:a0:98:16:d5:09:0d:1c:36:24:
e9:5c:b7:18:64:91:50:75:d0:86:15:5e:38:9c:e6:b5:89:93:
82:7a:20:a2:a2:c7:8d:b8:73:0e:9f:5e:2d:1f:40:4c:99:70:
a6:3e:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:18:37 2025 by rpki-client