Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/If0KnNWDa6zRswX9BZZdyTZZxZ4.roa
File: If0KnNWDa6zRswX9BZZdyTZZxZ4.roa (raw, json)
Hash identifier: FLTlEInAReGcSEEZ1hxHmK1Rgix29P8VyZOjuVQy3XU=
Subject key identifier: 21:FD:0A:9C:D5:83:6B:AC:D1:B3:05:FD:05:96:5D:C9:36:59:C5:9E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 152A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/If0KnNWDa6zRswX9BZZdyTZZxZ4.roa
Signing time: Wed 04 Jun 2025 07:10:00 +0000
ROA not before: Wed 04 Jun 2025 07:10:00 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5418 (0x152a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 07:10:00 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=21FD0A9CD5836BACD1B305FD05965DC93659C59E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:9c:50:fa:f2:fd:c1:46:bf:22:de:52:40:
91:6b:b3:a2:40:0b:21:df:e4:18:64:6f:d5:d8:20:
9e:81:f0:d9:94:79:ae:ec:f1:7b:6c:b8:89:4a:f5:
04:e5:a4:67:82:38:5d:45:00:fd:13:97:56:30:e3:
0a:22:82:c6:8a:15:73:a7:b1:22:c6:c2:c7:eb:8b:
40:5d:24:79:f2:08:ca:b0:01:30:36:bf:fa:78:e3:
ed:f9:37:12:cd:ed:5f:59:1c:5b:eb:0e:18:8a:2b:
cd:f4:93:9f:74:3f:8d:64:c4:00:62:67:38:de:de:
36:70:5e:f6:cd:ca:73:e3:d7:c9:7d:9f:15:05:1f:
d3:53:51:c3:30:d3:2a:1a:22:27:34:68:61:f1:d2:
89:12:9a:41:f7:2e:e9:48:25:2e:69:f9:e8:05:5e:
1a:37:81:9d:bc:09:1d:e4:55:e1:9d:0b:fa:36:cb:
98:35:7b:e0:63:c6:26:16:f7:79:cc:1a:25:c3:60:
38:af:31:8f:ff:70:70:6f:e3:30:48:06:78:9d:bf:
a6:5f:27:39:0e:49:e7:7a:a3:f7:d4:9c:a9:7e:2b:
6f:8f:d2:c5:d8:b0:99:67:26:22:4a:e4:9f:5a:26:
71:22:90:48:f9:a1:df:07:0c:bf:b0:37:36:16:4e:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FD:0A:9C:D5:83:6B:AC:D1:B3:05:FD:05:96:5D:C9:36:59:C5:9E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/If0KnNWDa6zRswX9BZZdyTZZxZ4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:ce:37:57:01:cf:fc:46:7c:10:71:d2:0e:c1:ca:ba:41:ab:
3a:f5:e2:6f:bb:a1:26:d4:09:51:ca:a9:70:99:7d:9b:01:02:
a2:8a:07:b1:86:0b:0f:7f:0d:3a:0e:09:ea:e7:c1:ca:5e:ab:
e6:c3:49:55:03:0e:5a:22:a6:0f:01:d8:02:b9:5d:59:b0:1b:
8c:58:aa:37:5f:70:70:1d:77:c4:d5:3c:02:4c:7c:35:f0:cc:
3a:11:6c:01:ee:bc:fc:38:51:c2:0b:38:bb:d3:e7:87:73:67:
e3:c4:c4:19:8c:70:93:69:e0:21:78:47:9a:ac:6f:3d:b2:87:
cb:23:a2:f3:13:7d:8b:5c:e3:a7:81:9d:71:7d:48:82:a0:f5:
a6:4e:41:4a:35:9d:32:17:92:ad:10:66:74:47:94:c7:53:5b:
8c:de:75:43:3b:9a:c1:80:03:4a:28:bc:88:be:8b:53:17:9f:
c2:4f:93:71:0d:bd:57:10:5c:45:6c:24:1a:c0:a1:23:17:9c:
9e:df:19:7d:37:35:5e:d8:7e:db:38:35:84:7b:43:e2:19:9f:
b6:f6:20:52:c9:42:9e:81:d8:bf:ce:52:62:10:e8:d4:44:02:
e8:b4:d6:ea:a9:8e:b7:f3:bf:6d:73:17:84:d9:27:06:6b:ff:
ff:48:9a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 22:43:46 2025 by rpki-client