Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PTcLFIojoVTHwTuQhY8tVgUwqeQ.roa
File: PTcLFIojoVTHwTuQhY8tVgUwqeQ.roa (raw, json)
Hash identifier: c/dxOHgRh+sNNy9Op3nZDtgdylwYkm4/P49fJRsvROI=
Subject key identifier: 3D:37:0B:14:8A:23:A1:54:C7:C1:3B:90:85:8F:2D:56:05:30:A9:E4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1AD2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PTcLFIojoVTHwTuQhY8tVgUwqeQ.roa
Signing time: Wed 11 Jun 2025 20:09:57 +0000
ROA not before: Wed 11 Jun 2025 20:09:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6866 (0x1ad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 20:09:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3D370B148A23A154C7C13B90858F2D560530A9E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:de:27:9a:70:8f:87:ea:c0:ce:41:77:5a:
9b:a4:a5:22:d8:cf:ad:59:51:32:48:8b:e2:7c:4b:
72:7e:82:10:76:5f:f2:8c:f1:75:59:fe:91:a3:d3:
1f:d8:2b:54:76:95:30:c8:81:fc:72:6b:10:59:df:
6d:98:8a:2e:7f:d6:04:5d:f9:ff:5e:33:13:42:92:
9f:ac:63:f9:bd:1a:a9:64:93:0d:28:44:37:7b:a4:
a0:e5:e9:5d:ee:68:25:1d:ac:92:80:23:79:1a:5f:
0f:42:ff:a0:cd:00:d1:60:ca:ca:3a:18:ac:75:e7:
14:77:ee:f7:96:12:72:44:7c:dc:6c:22:5d:26:42:
1a:e2:63:4d:16:1a:f0:9e:78:d5:16:e9:23:67:e7:
f0:c3:b6:b9:c4:4b:a9:9d:88:e9:5c:0b:ad:8e:85:
47:9b:ec:81:db:ba:be:d9:54:8e:c9:de:72:e7:d6:
b4:3a:5a:d9:68:4a:ed:e9:c1:a6:ea:2a:df:c3:8d:
73:b4:98:4e:8a:79:8a:c2:37:8d:50:08:01:1d:5e:
4a:f2:e4:c0:06:2c:bd:5a:56:e1:7b:be:b8:eb:2d:
39:76:79:64:6e:7e:b3:f9:3c:c0:ce:1e:c9:a8:ec:
c0:44:69:cc:49:7d:78:6e:36:68:f3:30:b7:3d:f7:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:37:0B:14:8A:23:A1:54:C7:C1:3B:90:85:8F:2D:56:05:30:A9:E4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PTcLFIojoVTHwTuQhY8tVgUwqeQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:b6:f4:b0:4d:76:1f:e0:22:ab:2b:73:ae:51:95:4d:57:b1:
c7:01:82:b0:0f:a9:77:ad:6b:3b:27:c7:32:46:56:68:c4:b4:
9e:01:3f:dc:e5:ba:bc:61:35:92:b9:28:e6:12:26:26:4d:85:
c4:21:0b:26:03:35:fe:03:53:c7:27:31:b6:73:81:1a:73:fd:
b1:92:96:e5:4e:f3:6e:52:e5:e5:a7:44:3f:db:08:d0:de:cd:
58:50:c1:64:12:de:10:d6:c3:6d:5d:9e:34:07:14:f8:5b:32:
e2:19:5a:ea:8f:37:67:a1:f6:6a:8c:21:d3:e0:27:1f:1a:ec:
9a:e6:e2:69:92:aa:3d:cc:d0:9a:40:f9:87:a7:ea:59:0b:55:
61:05:bb:a3:13:f5:e1:f9:25:65:3e:a7:b8:b5:29:8b:6f:97:
3e:54:a2:05:1a:cd:15:23:c7:c9:b7:2b:85:4c:7a:6a:c4:7f:
c0:0b:f2:fd:23:17:b2:99:60:0c:62:83:43:88:a5:c7:74:54:
25:d6:b4:12:ff:89:43:63:22:7e:ef:88:f7:7a:f8:70:5e:9e:
7b:ee:96:36:86:0b:fa:53:0e:ff:56:2c:27:cf:41:2d:a4:3c:
f2:60:9b:da:f6:8b:52:6d:fc:ea:f0:d8:81:56:ce:4e:f6:98:
0f:ab:75:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 16:48:16 2025 by rpki-client