Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/OTUJzTKUCt_WGDX4PQtU8cVWAL8.roa
File: OTUJzTKUCt_WGDX4PQtU8cVWAL8.roa (raw, json)
Hash identifier: O1bstyecP99GhFAeSEjKwjkdg9hvlnactfMbs/OHu5Q=
Subject key identifier: 39:35:09:CD:32:94:0A:DF:D6:18:35:F8:3D:0B:54:F1:C5:56:00:BF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 17B6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OTUJzTKUCt_WGDX4PQtU8cVWAL8.roa
Signing time: Sat 07 Jun 2025 16:39:30 +0000
ROA not before: Sat 07 Jun 2025 16:39:30 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6070 (0x17b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 16:39:30 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=393509CD32940ADFD61835F83D0B54F1C55600BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:76:cb:30:aa:a7:4c:25:76:2c:f4:31:cc:
41:f1:fe:0c:ed:43:13:f7:f3:0b:47:b3:24:ee:a1:
ba:ab:42:1f:47:ca:18:01:31:ee:01:6e:3d:47:f1:
7d:07:fe:73:aa:28:ab:60:8a:93:cd:52:22:1c:9a:
8b:a6:47:4c:8f:ec:05:36:cd:e9:c0:62:86:99:b6:
ee:9a:ad:fc:47:32:36:5f:80:a5:b8:60:cd:bd:c4:
e5:3f:55:20:82:bc:70:d6:19:87:d3:69:98:55:85:
74:ff:2c:9a:86:0c:83:5a:16:71:56:36:a4:2e:e6:
a3:88:5e:0a:92:eb:ef:d2:08:44:a6:f1:0f:e4:a9:
2f:b6:b3:62:c7:d9:0e:af:07:3d:e1:eb:37:f5:3c:
9b:a6:0c:a4:5f:ad:d1:07:81:4b:d3:9c:c3:f6:06:
26:07:8b:1c:81:45:da:75:9b:68:b9:c9:c2:b2:be:
58:be:d6:2d:7a:e0:c3:25:28:c6:eb:54:32:1c:3d:
35:35:32:19:e6:44:b5:31:80:e5:5a:26:73:b3:12:
8b:c2:2e:00:f1:e7:46:58:d5:2e:ff:1b:14:5c:97:
5e:03:84:e5:b6:0c:b5:eb:6e:d2:f9:cd:e7:59:40:
f7:15:37:55:a9:bb:e3:b7:d1:4d:a6:4a:fc:38:01:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:35:09:CD:32:94:0A:DF:D6:18:35:F8:3D:0B:54:F1:C5:56:00:BF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OTUJzTKUCt_WGDX4PQtU8cVWAL8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:0a:8e:12:37:fb:8d:69:67:d8:3f:95:c7:3f:9a:ec:f0:e5:
f4:1c:83:ce:76:e4:5e:3a:f2:91:fe:d2:c6:81:a7:f8:53:48:
36:c8:82:45:9b:1a:1e:ca:9f:5a:c6:46:cc:a5:c8:de:e2:7a:
e9:8c:92:75:b1:30:06:1e:0c:2e:a9:4b:a6:4e:2a:b1:ef:c5:
ee:e1:ae:80:81:71:c9:85:7e:00:80:31:ba:ca:94:f2:83:6c:
07:f3:cf:15:30:31:ea:b4:42:ee:0d:1a:fd:43:36:13:ce:3b:
f8:4a:be:50:03:23:4d:d3:32:c8:16:ec:48:d5:78:6f:95:48:
54:13:d8:10:db:4b:d8:08:9d:2d:d7:9d:eb:7c:c8:94:39:59:
90:e9:e5:ad:c8:c0:44:14:7b:7c:7b:9c:6c:16:04:7d:18:07:
9f:d3:9b:e5:33:df:7c:47:04:c3:41:07:71:d9:fc:eb:85:f2:
49:22:3f:7d:f0:8a:ca:fc:3e:9b:f1:d9:df:47:bb:45:4e:d3:
d0:19:be:19:38:10:ea:7e:1b:75:46:7b:6c:8a:31:87:89:8d:
84:24:aa:1d:1c:ef:aa:78:d8:5d:b9:8e:2a:e6:07:fb:bf:bd:
01:8a:da:45:12:8e:38:3f:19:44:2c:8d:45:bb:23:75:48:a2:
ce:da:b9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 14:56:05 2025 by rpki-client