Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/G9ohe_pN0lqFhu2z-6nsnVoyILA.roa
File: G9ohe_pN0lqFhu2z-6nsnVoyILA.roa (raw, json)
Hash identifier: QDOj8unx/ozQXmZH/UI5G8Ob6J2qUsQi7FH0VE1YYZU=
Subject key identifier: 1B:DA:21:7B:FA:4D:D2:5A:85:86:ED:B3:FB:A9:EC:9D:5A:32:20:B0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1AF2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/G9ohe_pN0lqFhu2z-6nsnVoyILA.roa
Signing time: Thu 12 Jun 2025 00:09:48 +0000
ROA not before: Thu 12 Jun 2025 00:09:48 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6898 (0x1af2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 00:09:48 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1BDA217BFA4DD25A8586EDB3FBA9EC9D5A3220B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:9a:9c:51:5a:50:f6:4f:f9:5c:62:12:26:
cd:a8:1a:6b:88:37:13:c8:c3:8e:83:24:c2:79:4c:
b7:2f:16:8d:0a:fd:7c:30:e8:57:05:3c:8e:66:95:
b0:c1:06:d6:9c:96:3e:99:28:ea:9d:c8:b4:51:ef:
09:03:d3:92:e8:d2:b6:0a:c4:3a:b9:e9:9d:af:61:
20:b9:26:45:52:41:a2:3e:95:75:fb:55:a0:1b:31:
e3:8f:9e:b6:07:55:bc:25:eb:0b:c5:b8:b1:15:85:
fa:27:1b:21:30:a7:ee:df:7b:b4:ee:10:8f:14:27:
6c:70:3b:9c:05:86:4c:da:7b:72:8b:8f:7e:33:63:
5f:06:54:b2:fd:25:5f:e4:b7:15:d8:d7:cc:6f:63:
50:59:dc:57:e9:fc:19:ac:31:9c:dc:28:77:50:04:
de:00:48:f4:83:ed:00:6b:e7:26:37:9a:00:ad:f7:
a8:61:bb:8e:a3:1d:b1:29:09:7f:c0:a8:60:2f:96:
f4:4b:64:35:e3:93:5d:c4:6d:09:1e:b2:36:33:3d:
98:34:89:b8:96:19:c6:a8:30:ff:15:c3:ee:38:02:
85:e4:0f:d4:18:49:75:16:81:80:17:ad:60:63:84:
3d:26:e8:ab:da:cb:de:71:48:55:50:60:d6:90:fe:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DA:21:7B:FA:4D:D2:5A:85:86:ED:B3:FB:A9:EC:9D:5A:32:20:B0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/G9ohe_pN0lqFhu2z-6nsnVoyILA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:54:08:1b:0b:2a:b7:96:e6:6f:71:94:46:87:84:f9:e7:1c:
72:ce:60:ea:04:47:6c:24:b9:54:6b:bb:d1:ac:30:ab:7e:d5:
dd:d4:60:23:44:74:c4:20:07:ea:98:01:64:c5:69:ad:f0:b7:
6b:a6:62:7b:ed:08:6f:1d:61:8c:6a:80:56:63:13:ba:00:86:
19:cc:b2:d5:15:5a:28:0e:ab:f9:7e:60:5e:ed:3a:55:96:be:
52:38:78:6d:c6:99:68:04:51:f5:dd:88:30:8e:8e:5e:3c:46:
51:6b:b0:20:a8:7a:21:6b:7a:38:bf:bc:e0:e4:8d:54:71:36:
d0:d8:8c:a3:5f:01:c4:bc:9c:79:21:e8:cf:a7:99:41:ab:58:
cc:92:2d:00:d0:5a:21:c0:7e:c2:4a:22:61:ca:cb:c5:3b:49:
37:07:6a:a5:7d:19:23:07:86:94:62:fc:83:cb:a8:c2:2c:c5:
5d:bd:a9:c5:62:1f:c3:b5:83:40:f8:38:a5:6a:13:4c:11:fb:
ef:2a:49:ee:87:a1:c5:7e:b4:1c:59:87:56:d7:da:9e:2a:60:
62:44:88:ab:16:5a:80:20:b9:22:7c:c6:50:bf:62:c6:59:63:
f1:b6:ea:da:e2:4f:fe:b2:74:c2:f4:c8:74:25:d8:07:b7:67:
2f:f6:65:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:11:48 2025 by rpki-client