Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Hz_gfSa-0r5o965pxQxXp2Qe9x8.roa
File: Hz_gfSa-0r5o965pxQxXp2Qe9x8.roa (raw, json)
Hash identifier: YtzecCn57S2QS1Ezm0J52VnrmZ8Ca5OrVAtv5M7EANs=
Subject key identifier: 1F:3F:E0:7D:26:BE:D2:BE:68:F7:AE:69:C5:0C:57:A7:64:1E:F7:1F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 197E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Hz_gfSa-0r5o965pxQxXp2Qe9x8.roa
Signing time: Tue 10 Jun 2025 01:39:45 +0000
ROA not before: Tue 10 Jun 2025 01:39:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6526 (0x197e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 01:39:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1F3FE07D26BED2BE68F7AE69C50C57A7641EF71F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:15:a5:64:b0:4a:bd:ae:69:aa:da:fa:a0:
59:53:1c:2d:e1:bf:52:21:32:a4:4b:74:d1:7e:37:
de:a9:9b:13:fc:d7:93:4a:ed:66:b1:e0:3b:23:0b:
f8:b3:93:a1:fc:2b:22:e5:6c:1d:73:9e:98:4f:43:
fd:a9:de:94:55:cf:3b:71:54:dd:94:5f:4f:79:f4:
37:e7:52:47:9d:fc:fe:a5:5d:6c:0d:2c:bf:d4:c3:
3a:f9:76:ad:31:98:ad:9c:cb:94:e0:a9:f5:38:ed:
cf:64:90:d7:65:f6:55:3e:8c:ef:0b:03:14:6c:29:
c8:df:be:9b:23:b5:15:94:7e:16:55:c4:71:60:30:
62:9e:f8:85:2f:84:7f:ef:77:56:4d:b0:9b:9f:ec:
58:98:d9:3e:d9:f5:1d:3c:2d:ce:5a:5b:70:8a:77:
a7:c8:ef:55:4d:83:6f:a4:07:c0:ee:12:92:53:ce:
d9:ed:1f:70:ec:93:6f:71:fa:c3:48:9c:3e:17:6d:
c6:86:b6:69:65:18:14:bb:cb:47:a4:0a:67:dd:fb:
a4:2a:92:34:93:2b:66:04:8d:e3:06:8b:39:0b:4d:
95:17:34:d2:96:0e:89:e1:17:0c:ef:d7:3e:b3:15:
8a:35:77:6e:4f:c5:cd:15:92:d8:2b:29:b9:0d:1c:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3F:E0:7D:26:BE:D2:BE:68:F7:AE:69:C5:0C:57:A7:64:1E:F7:1F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Hz_gfSa-0r5o965pxQxXp2Qe9x8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:eb:86:c2:49:57:ec:b1:c3:24:91:14:de:8d:70:00:b7:70:
55:cc:e6:ab:2a:4d:33:3a:2d:47:4a:71:0d:7d:73:cb:45:5c:
df:25:bd:0c:e2:da:0c:6b:45:92:3b:9e:a3:f7:2c:bf:ca:02:
19:3a:fb:1f:52:10:46:ca:90:c5:5c:0a:46:30:9c:e6:0b:c9:
ba:39:34:2e:92:e1:51:f9:81:89:5a:69:d2:9c:72:76:93:73:
a4:18:35:4a:71:eb:8e:12:a0:a8:b0:9e:e0:ae:3b:a3:b6:11:
52:b1:1c:32:e8:7e:3e:f3:ba:d0:2a:7c:a6:1d:85:75:e8:44:
f2:de:c1:99:39:44:91:e9:77:69:25:ad:fc:f4:9b:0d:c1:bd:
4c:97:51:bc:ec:d4:ba:34:9c:71:d9:79:7a:b1:cb:85:39:9d:
5e:ba:b4:5e:7f:04:33:26:b6:64:ac:e1:3d:5f:e8:02:a2:bc:
78:fb:57:c7:d1:7f:b6:fd:75:39:f2:0e:cc:89:44:0c:4d:a9:
9c:8e:fc:28:8f:70:a0:15:94:68:9d:da:fb:a1:6b:49:d0:9b:
9c:05:d1:c5:8a:ac:6b:30:c7:4b:72:b3:e7:bf:2c:eb:37:54:
1f:94:ce:49:e6:29:72:d0:5f:e2:3d:b7:2f:86:0c:7a:3e:68:
70:3d:78:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 22:43:40 2025 by rpki-client