Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/INViT918Da_6paPmhKxRdzlFczE.roa
File: INViT918Da_6paPmhKxRdzlFczE.roa (raw, json)
Hash identifier: i6V7x83OrJ6GK0dv5RemlebbMhmlOYf1/xC6xQXQ7EM=
Subject key identifier: 20:D5:62:4F:DD:7C:0D:AF:FA:A5:A3:E6:84:AC:51:77:39:45:73:31
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 18F6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/INViT918Da_6paPmhKxRdzlFczE.roa
Signing time: Mon 09 Jun 2025 08:39:46 +0000
ROA not before: Mon 09 Jun 2025 08:39:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6390 (0x18f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 08:39:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=20D5624FDD7C0DAFFAA5A3E684AC517739457331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:93:87:82:c2:2e:60:52:bc:48:7a:bb:96:
9a:f7:7f:06:0c:8f:30:9b:03:7c:57:d3:50:50:b4:
a7:d4:c4:0c:cc:60:0f:17:1c:36:b3:3b:c2:6f:23:
be:11:b1:c2:ce:c6:aa:ec:c5:6a:a3:cc:18:82:94:
b1:80:b3:5a:10:0b:75:42:b3:71:ba:29:64:f6:fe:
96:7d:b0:e5:ff:5b:a3:52:71:d5:9d:74:3a:df:a1:
0d:ba:e1:d6:49:56:f4:1a:0e:52:02:65:64:4e:1c:
52:2c:50:b4:d1:5f:b9:3a:a8:44:cd:d4:71:9d:c0:
66:11:47:d1:ef:b7:4f:f9:72:8f:4c:95:0b:3f:d0:
18:e9:b5:ca:84:6b:2a:9b:bc:01:9d:f5:72:bc:f3:
ce:c8:ea:b4:02:66:80:3c:7d:3e:8e:73:7c:a3:2d:
d6:43:cd:3c:2f:14:1f:c4:a5:10:52:95:75:fa:fd:
21:bd:98:23:85:c6:3d:05:ca:c0:70:9e:b0:a0:21:
7e:77:68:cf:d0:8f:96:03:78:6a:70:ac:bc:db:88:
ff:9b:f0:2f:6a:97:28:59:01:86:01:26:6d:1b:e6:
4e:db:54:36:80:ac:51:a7:2a:3f:f4:eb:59:a2:a9:
40:b1:e4:03:35:7c:c7:de:44:70:4b:b5:a0:96:bf:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D5:62:4F:DD:7C:0D:AF:FA:A5:A3:E6:84:AC:51:77:39:45:73:31
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/INViT918Da_6paPmhKxRdzlFczE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:96:1d:63:fb:53:ef:da:1e:d4:bd:a6:40:b7:4f:c3:32:d5:
8f:00:2e:09:2f:00:e0:1e:e1:d1:35:77:f3:92:81:98:81:3d:
4e:4b:29:09:bb:77:f7:fa:54:23:db:3a:f8:48:60:e8:81:b2:
bb:07:2f:1d:2f:04:5a:8a:19:70:f0:12:93:94:a8:ee:fa:01:
15:e5:15:05:57:1c:a3:a5:7e:4f:95:52:3b:5f:6b:67:82:24:
ea:da:26:73:f2:f9:e6:d9:c6:d2:10:f5:b2:a0:a5:69:f2:98:
80:e4:43:1e:1b:90:71:6e:6d:13:a8:34:65:13:17:74:24:fc:
95:73:dd:f5:2e:22:14:aa:b5:2c:6f:ea:1f:53:e4:f7:eb:5a:
8a:25:3c:e1:a0:c8:ec:84:ef:0d:e1:15:24:b8:b5:0d:e9:b5:
3c:4a:10:85:04:4c:4a:e2:0d:90:27:61:f1:86:a5:18:13:17:
d4:a9:6b:09:64:6e:18:c3:eb:06:5b:25:fb:57:c8:0d:51:04:
90:12:19:b0:16:c1:c7:e1:05:ea:f9:6d:20:a8:8b:f3:eb:03:
f6:50:12:82:bb:bc:a8:ad:38:7a:1a:e4:cf:c6:55:8f:c8:d6:
be:2f:70:50:cc:b1:0d:62:d7:dc:3d:25:b0:35:10:de:13:5f:
d1:2f:f4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 21:39:20 2025 by rpki-client