Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/SY6BrABfBnQZ8SV6OYK6uAsjizM.roa
File: SY6BrABfBnQZ8SV6OYK6uAsjizM.roa (raw, json)
Hash identifier: ipLtFW1u0VYtw9OyS2SPi6ZGOdmbDR5s/4RLXWRgt7s=
Subject key identifier: 49:8E:81:AC:00:5F:06:74:19:F1:25:7A:39:82:BA:B8:0B:23:8B:33
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1932
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SY6BrABfBnQZ8SV6OYK6uAsjizM.roa
Signing time: Mon 09 Jun 2025 16:09:38 +0000
ROA not before: Mon 09 Jun 2025 16:09:38 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6450 (0x1932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 16:09:38 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=498E81AC005F067419F1257A3982BAB80B238B33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:99:28:30:16:56:1d:cb:c6:bc:83:74:0f:b4:
82:c3:a4:f2:78:71:0d:86:9c:69:7c:c3:a3:64:f9:
49:84:df:a4:fe:bf:4c:87:5c:ae:f2:5b:f4:74:35:
34:c1:0a:6c:52:aa:cc:a9:ae:5a:c9:fc:62:14:74:
90:7f:71:e8:fb:a6:2e:53:09:41:fb:ca:1f:02:25:
78:6b:ea:20:3d:ef:2a:f3:4b:72:79:db:45:8a:a1:
17:2a:27:89:a1:47:64:ff:78:ed:07:21:6a:22:a6:
f2:66:7d:a6:c4:a5:f1:58:68:3f:07:8f:6d:dc:81:
2c:d0:d3:33:12:d0:01:84:3a:a4:e2:9e:a4:fe:7a:
db:2a:a3:93:8c:3a:91:63:a3:8c:55:e5:d1:a1:47:
c7:44:88:39:e3:d0:2c:4b:f4:1e:3e:b4:07:36:b7:
c9:92:d0:9f:77:d7:4d:1c:2b:c2:05:81:f0:f8:78:
52:4b:d1:77:08:fb:c6:19:04:0d:c0:73:eb:bc:d4:
8b:bc:5e:f8:ff:15:f3:37:b8:02:55:5d:4e:37:f4:
50:9a:d5:e5:74:c8:75:99:55:a5:9c:92:d8:78:7d:
c4:b2:b5:7a:db:bb:f2:9a:ba:c8:c7:ef:f2:39:07:
8c:d4:db:5c:d4:f9:03:8d:5c:54:8a:66:e1:b3:a7:
8d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8E:81:AC:00:5F:06:74:19:F1:25:7A:39:82:BA:B8:0B:23:8B:33
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SY6BrABfBnQZ8SV6OYK6uAsjizM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:90:5c:74:a9:e8:60:17:f7:92:f4:60:1f:77:b2:83:3e:fa:
32:24:54:ac:1b:61:ed:77:04:2f:b4:c0:f2:dd:9a:02:d3:c2:
16:cd:d7:7f:13:c4:84:53:75:40:86:b4:e5:2b:15:c3:62:a1:
82:2a:5f:87:5b:0c:2a:e5:83:9b:90:9a:76:fb:a2:bf:f7:07:
5b:98:9f:e0:95:27:b0:73:ec:89:5a:da:62:5e:c8:4a:af:75:
d4:dd:58:68:42:8f:a8:d8:42:04:2f:14:8e:ac:a6:b3:7f:be:
43:a2:d5:7a:88:68:36:61:c4:13:fe:d4:aa:f7:4c:e3:00:fe:
e2:e7:9d:fa:dd:80:80:3f:95:b0:b5:95:93:63:b7:4b:2c:07:
f6:c4:e7:02:96:0d:ba:14:45:df:b2:a5:1a:dc:ca:9b:18:e0:
c9:08:bc:fd:a7:d6:f5:82:4d:71:63:95:23:32:ef:c3:8a:a7:
df:51:f3:27:72:c3:a2:22:cf:ce:b0:03:84:4a:dd:f0:a4:37:
f2:85:e3:3f:ae:af:91:8d:b6:8f:9b:22:28:ea:ff:09:29:4e:
21:9b:ea:78:87:d6:55:48:41:c3:1d:e0:0f:e6:59:c3:46:bd:
4b:cf:2d:fb:7b:7b:f8:4c:1f:4e:8d:96:a5:08:7d:40:d3:44:
e0:bf:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 23:56:19 2025 by rpki-client