Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/LSXSnsAckoMDmZLFOKhQwXJ2KBs.roa
File: LSXSnsAckoMDmZLFOKhQwXJ2KBs.roa (raw, json)
Hash identifier: ZTqj32irkt4uMtOwkc6HQDxPKc+GcMHtUmoLx6AAY6Y=
Subject key identifier: 2D:25:D2:9E:C0:1C:92:83:03:99:92:C5:38:A8:50:C1:72:76:28:1B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 140E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LSXSnsAckoMDmZLFOKhQwXJ2KBs.roa
Signing time: Mon 02 Jun 2025 19:39:13 +0000
ROA not before: Mon 02 Jun 2025 19:39:13 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5134 (0x140e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 2 19:39:13 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2D25D29EC01C9283039992C538A850C17276281B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:4e:5f:39:11:0a:9b:d2:c7:cd:5f:03:28:
d0:f5:e6:84:8d:ad:06:fe:0f:1f:9f:33:5d:6e:02:
e0:24:75:ad:97:3a:08:2d:d5:25:41:cd:7e:d3:97:
db:18:cf:89:cd:09:b3:e2:41:e6:1d:67:a8:7c:d9:
d5:5b:3f:73:74:a3:69:09:c2:7c:a2:20:1f:a7:ce:
b5:6d:91:b3:90:8c:ae:4a:1f:03:e8:83:d9:55:b9:
91:c0:e0:4f:d2:7b:82:d3:0f:eb:98:9f:2c:5f:73:
93:70:4e:1f:79:83:3b:06:2c:87:c2:e6:18:83:a6:
32:65:e4:be:2d:0a:55:0b:34:fe:6b:6c:fd:71:37:
91:42:ba:57:82:ee:fa:b5:1c:ff:c1:9d:d8:4f:ce:
52:2f:d7:41:f5:c2:f3:48:34:5e:b3:b2:ca:f5:68:
9f:60:da:55:67:2a:0a:9c:2f:10:56:11:96:57:86:
d3:14:da:7b:b8:90:7d:91:56:0f:87:df:01:cd:14:
a3:16:2b:bf:e2:19:62:18:eb:3f:e4:0c:7b:c6:13:
e9:12:0f:84:93:3f:a8:9f:75:6b:ff:77:67:d1:1e:
56:33:9e:41:c5:4a:cc:bf:d7:67:d3:43:9f:63:18:
f5:2c:58:cd:a0:99:71:e5:7d:a2:ce:6c:d6:ec:7f:
cc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:25:D2:9E:C0:1C:92:83:03:99:92:C5:38:A8:50:C1:72:76:28:1B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LSXSnsAckoMDmZLFOKhQwXJ2KBs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:99:af:2a:ec:af:d3:9d:bb:21:df:14:a1:a8:87:f7:aa:23:
95:d0:e2:32:d9:a9:90:5c:80:d2:95:bb:d3:aa:81:4f:29:3b:
11:0a:d4:13:6f:2a:ec:c1:af:1a:06:ff:95:ce:56:af:30:86:
6f:23:35:50:ef:41:10:56:6c:92:c4:8e:71:36:d3:04:da:92:
50:bb:0f:ce:5e:4a:d0:cb:5e:20:9e:18:bd:8c:92:22:e1:89:
4c:26:06:01:ad:50:63:02:7c:fe:77:62:e2:c2:5a:13:bd:b7:
e5:e1:44:aa:29:af:4d:6c:64:f3:2d:a8:7d:84:59:d0:2f:05:
30:07:71:43:d0:d9:96:8c:46:b2:a3:64:33:b5:ca:46:f1:1c:
e2:3d:a8:56:c3:0b:28:b1:86:78:33:3f:df:16:25:16:49:43:
58:f0:c5:cc:a9:74:c4:86:77:8a:91:c2:82:26:ed:be:4f:e9:
8c:b2:fd:ca:e7:04:29:e2:ae:72:3d:ab:f6:ee:8e:25:a0:f6:
a9:74:cf:bf:13:fe:e4:1f:76:d9:20:8c:7e:d8:76:40:39:8a:
d0:ff:4e:96:20:47:72:a2:05:10:6e:85:8b:fe:77:4a:da:15:
81:bf:81:a2:8c:f2:7e:0e:3a:9d:d2:f0:42:14:c3:a6:66:20:
bb:fa:b4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 12:44:12 2025 by rpki-client