Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/SGcRBeW97d7n9nxd8L7BkMd8524.roa
File: SGcRBeW97d7n9nxd8L7BkMd8524.roa (raw, json)
Hash identifier: yzJSre9TnWzsVzrlGa7XA705VLWaVTtHMDY5oEjye/8=
Subject key identifier: 48:67:11:05:E5:BD:ED:DE:E7:F6:7C:5D:F0:BE:C1:90:C7:7C:E7:6E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 14A6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SGcRBeW97d7n9nxd8L7BkMd8524.roa
Signing time: Tue 03 Jun 2025 14:39:16 +0000
ROA not before: Tue 03 Jun 2025 14:39:16 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5286 (0x14a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 14:39:16 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=48671105E5BDEDDEE7F67C5DF0BEC190C77CE76E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:ea:35:a2:7b:8d:63:d8:f4:7e:3c:af:2f:
a3:ed:d9:9a:45:dc:d5:e7:30:0c:75:e9:41:dc:7d:
35:b3:39:26:23:98:24:2c:57:4a:d1:f6:17:4d:c9:
84:a2:d6:67:15:04:df:28:c0:95:24:a2:09:13:df:
18:84:9f:09:b0:16:83:a8:8a:56:a6:99:91:b1:d0:
92:9b:3e:35:c3:68:47:f6:ee:3b:99:09:f5:52:c0:
ab:22:b9:60:e5:4f:58:e4:d9:4f:68:ea:bb:09:6f:
04:ee:61:b3:58:ee:4c:d7:1a:69:f0:1d:57:fa:0a:
ae:15:b0:3b:02:8e:d1:66:bd:f5:55:30:cf:5e:38:
b0:83:01:85:62:44:c6:4b:68:06:43:74:fe:20:69:
08:56:82:94:9c:2a:70:d1:51:0a:b9:6d:2b:ac:0d:
2c:a5:6c:e0:37:73:e8:61:eb:8d:94:9b:9d:73:5e:
7b:8f:81:ed:62:ef:ac:18:ba:c8:fc:c2:f9:4a:13:
81:9c:01:f7:b2:f4:74:0d:83:06:9a:5e:9d:f4:5f:
86:bc:92:79:9f:bc:2b:cf:46:d2:bf:7a:f4:c9:2b:
67:21:fb:0a:a9:f8:7c:9f:9d:82:e0:6f:4a:4f:5d:
13:7d:b4:03:d7:76:a5:90:9e:46:fa:e3:9a:31:68:
4a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:67:11:05:E5:BD:ED:DE:E7:F6:7C:5D:F0:BE:C1:90:C7:7C:E7:6E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SGcRBeW97d7n9nxd8L7BkMd8524.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:21:ca:50:bc:1a:06:e1:f1:78:bf:21:36:f3:54:8c:5b:02:
0f:3f:2f:38:86:8d:39:f7:b8:69:b1:f5:e5:4e:47:bc:9d:a3:
1c:e2:05:2a:89:39:d1:9e:d4:23:9e:5d:12:db:00:5a:fe:b6:
f1:04:a5:76:79:3f:86:5f:41:ae:f4:a1:4c:e0:5c:28:64:a2:
25:76:7d:0b:93:03:8b:d3:3c:82:3b:96:b3:ee:23:84:86:e3:
64:df:f0:58:d9:e5:57:48:60:77:bf:a3:88:7f:87:d6:25:61:
10:8d:90:11:cb:f5:48:25:89:a7:9d:f0:32:e6:12:8a:8f:22:
76:f8:dc:8e:8d:06:8d:5c:13:e4:c7:21:30:02:e4:ef:4d:ae:
88:e5:b0:a7:92:b9:16:b1:04:b0:36:29:d9:be:bd:79:fb:95:
f5:ca:54:fb:18:3f:1e:66:dd:1d:10:57:b4:f5:ed:71:d1:ae:
21:4e:2b:4e:4d:52:1d:eb:6a:62:1b:ef:dd:74:34:17:94:66:
6f:d9:21:67:f9:3a:2f:ef:16:4d:72:f1:03:ec:ec:6f:04:4d:
01:a8:a0:3a:c0:77:77:8c:44:c7:d6:08:84:b6:f1:f5:ca:e6:
52:8a:4b:71:47:f7:0e:f1:65:43:68:6d:0d:a9:e3:9e:93:be:
64:d0:ba:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:31:40 2025 by rpki-client