Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/RG3a3HVGNXCJBCn1ND5BzVDTpNU.roa
File: RG3a3HVGNXCJBCn1ND5BzVDTpNU.roa (raw, json)
Hash identifier: 9v1bCNMnR8XQJK8As+qbKn+YxignPp7TWg43olcJH1o=
Subject key identifier: 44:6D:DA:DC:75:46:35:70:89:04:29:F5:34:3E:41:CD:50:D3:A4:D5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0766
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RG3a3HVGNXCJBCn1ND5BzVDTpNU.roa
Signing time: Fri 16 May 2025 22:38:07 +0000
ROA not before: Fri 16 May 2025 22:38:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1894 (0x766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 22:38:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=446DDADC75463570890429F5343E41CD50D3A4D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:db:6c:6b:cc:73:91:ec:64:8b:e5:79:3a:
b7:38:af:ff:a0:04:6d:e6:06:e9:7b:5c:d3:25:98:
51:8a:da:fe:c6:01:79:c5:f6:b1:a0:11:83:a0:66:
76:13:03:ed:28:0a:2e:3b:89:dd:02:0d:2b:26:41:
cf:4d:4d:80:19:25:2e:35:97:f7:df:41:a1:41:2f:
7f:e7:d8:f3:c3:68:4d:44:f9:5a:02:73:4e:89:7d:
49:89:d1:9c:8a:e8:ff:46:f9:6d:41:17:6b:a3:f1:
0d:e1:84:a1:c4:13:8e:5b:69:6e:d5:6d:42:dc:fd:
21:e5:f4:45:96:fc:29:c3:33:ca:98:b7:f3:50:85:
b1:a9:57:1f:85:88:0f:02:14:f9:8e:8e:7c:d1:4e:
ad:ad:97:f8:e9:9e:cb:36:34:f1:bb:b5:24:cf:55:
c8:39:e4:d4:a9:8b:a9:d9:c0:77:d9:ef:2e:54:4b:
a2:85:1d:57:8d:0f:d5:da:12:e2:fa:ba:79:d4:0a:
07:07:1c:71:1a:c6:4f:69:9a:ab:99:85:45:e8:4a:
93:d1:ef:1f:69:fc:a4:f7:21:5b:fc:12:67:51:68:
69:65:31:41:3a:1d:74:15:96:d0:22:63:36:d6:18:
21:17:63:9b:66:dc:52:9d:db:b8:13:55:e0:fe:7a:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6D:DA:DC:75:46:35:70:89:04:29:F5:34:3E:41:CD:50:D3:A4:D5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/RG3a3HVGNXCJBCn1ND5BzVDTpNU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:30:6b:d4:a9:47:c0:c2:73:1b:53:70:a4:25:ba:01:ba:20:
ee:28:cd:f6:7a:94:15:cb:dc:87:4d:d9:77:78:40:ae:f7:17:
ff:4b:35:47:77:d5:98:f2:03:d8:94:e0:9a:2c:74:13:25:78:
77:b5:bd:d4:dc:66:47:22:2c:b2:8d:f7:73:2f:05:54:e5:59:
f5:cd:c4:6d:c6:eb:e4:94:83:98:be:a5:8b:25:ca:2d:b1:c3:
fe:50:4b:a8:56:33:a1:91:7e:7d:a7:23:b4:cc:47:a6:69:21:
a8:0b:11:ff:22:aa:a1:8a:9d:e4:35:ef:5a:be:3d:79:b8:40:
b6:ce:74:bb:80:cd:4d:f6:b1:90:a7:29:a1:3f:97:ef:4c:e3:
6e:cb:91:e8:29:79:49:9b:6a:22:0f:13:18:9b:e5:a4:5a:8f:
54:34:d4:8b:44:b8:85:4a:af:95:4b:80:db:18:ff:44:56:4f:
c8:3f:ba:31:28:8e:44:e4:b8:9b:d0:4e:9a:28:a6:9f:34:cf:
66:ee:d8:0f:dd:30:05:c4:5b:4f:23:bd:0c:ee:93:19:0f:b8:
d8:d7:4b:23:04:86:d5:8b:25:ad:97:2d:69:23:16:21:46:fa:
d1:6e:4b:59:51:47:06:02:c1:68:f8:4b:c0:c0:42:dd:ac:ec:
a2:d8:dc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 19:11:02 2025 by rpki-client