Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/FVmbW5hXeiLNW5yO5Hoj_WRpqgQ.roa
File: FVmbW5hXeiLNW5yO5Hoj_WRpqgQ.roa (raw, json)
Hash identifier: 80oYMmZ0KhcKiQ7TTfdAwnIJ1Yobd42MstIliV1Smls=
Subject key identifier: 15:59:9B:5B:98:57:7A:22:CD:5B:9C:8E:E4:7A:23:FD:64:69:AA:04
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1362
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FVmbW5hXeiLNW5yO5Hoj_WRpqgQ.roa
Signing time: Sun 01 Jun 2025 22:09:12 +0000
ROA not before: Sun 01 Jun 2025 22:09:12 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4962 (0x1362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 22:09:12 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=15599B5B98577A22CD5B9C8EE47A23FD6469AA04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:03:8b:dd:0d:62:9d:c4:78:0c:da:a7:d5:
0a:44:a9:af:9f:91:ea:fe:99:4f:44:04:31:78:94:
eb:8a:68:55:08:93:18:c0:41:6a:01:b0:38:6e:c3:
f6:06:cf:80:40:b1:29:cc:bb:47:5c:21:c8:93:6c:
c5:45:16:e3:cd:bf:49:b8:b8:21:1a:f4:c6:f9:ec:
ec:09:28:c3:03:4e:e1:da:cd:66:12:da:1d:fa:85:
7e:c7:56:e9:ff:f2:42:57:5a:02:11:fa:52:5e:2a:
80:71:23:85:df:4a:12:45:17:c0:13:fd:30:c2:60:
70:f7:08:69:77:5d:f0:84:f3:e1:da:62:4e:db:42:
8f:1a:a3:4a:40:c6:2b:10:ce:dd:c0:b6:80:4a:88:
29:ab:57:72:cf:0b:e7:4a:d3:8f:52:af:03:a8:fe:
6d:5c:f1:4f:76:72:1d:b1:46:8a:13:6c:99:27:82:
3b:80:e8:16:98:eb:3e:57:63:26:db:c8:aa:71:ac:
7d:5d:75:61:76:69:c2:4c:75:11:fd:74:fa:4b:e9:
a2:59:8a:bf:78:11:1c:12:be:2d:16:f5:c5:26:22:
5d:be:94:e6:2f:9d:fe:67:2c:d1:ef:b1:d8:06:fa:
ef:2e:ed:46:21:37:2a:2f:07:e1:b6:74:68:06:be:
9f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:59:9B:5B:98:57:7A:22:CD:5B:9C:8E:E4:7A:23:FD:64:69:AA:04
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/FVmbW5hXeiLNW5yO5Hoj_WRpqgQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:7f:0e:5b:7c:02:25:fb:a5:13:ab:36:a1:6b:01:22:b0:0e:
d2:5e:17:14:de:c1:34:b8:8f:d1:d7:e7:b8:f3:09:52:b6:d0:
ef:e5:14:18:e2:e7:f5:8d:2e:92:d1:96:d5:dd:37:88:ed:fe:
c3:d4:a2:91:0d:47:0e:57:e0:3e:ed:52:98:54:38:fa:7c:56:
dc:85:e0:5e:13:44:3d:0d:f1:91:27:7e:15:df:59:12:74:44:
21:f3:73:72:76:a4:d4:0f:c9:08:6c:d2:8e:f5:e5:36:e0:39:
94:c3:a8:b1:d1:f6:62:6f:47:58:a6:cf:de:32:2f:6d:73:a9:
e9:5b:e2:c4:f0:fd:64:2a:17:2b:33:3b:ad:c0:85:d0:70:9b:
4e:e5:b2:0c:8f:d4:a2:c1:90:ae:94:01:24:be:37:83:aa:69:
d3:8c:f2:ee:64:98:41:ec:ce:dc:65:a4:42:29:ad:e0:a1:93:
f8:14:36:52:23:13:64:96:b9:30:a8:d5:49:af:d2:3a:6f:24:
cc:c7:3a:ba:5a:69:42:68:67:26:d3:47:fe:2d:9e:95:e4:40:
84:ea:e2:60:29:91:c4:be:24:fb:a0:fa:b1:bd:c1:97:d2:ea:
8b:a6:8d:80:71:3a:e4:88:66:54:c5:1b:a9:bd:14:d2:a9:90:
5e:cd:30:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 12:09:14 2025 by rpki-client