Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Te4nU_NDNpmYL7zWow65XhletAo.roa
File: Te4nU_NDNpmYL7zWow65XhletAo.roa (raw, json)
Hash identifier: Q4+9ian8Wy427sKkWNa/fHxGIuwiXvdiLRDLMnqV7ro=
Subject key identifier: 4D:EE:27:53:F3:43:36:99:98:2F:BC:D6:A3:0E:B9:5E:19:5E:B4:0A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1CBE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Te4nU_NDNpmYL7zWow65XhletAo.roa
Signing time: Sat 14 Jun 2025 09:40:04 +0000
ROA not before: Sat 14 Jun 2025 09:40:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7358 (0x1cbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 09:40:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4DEE2753F3433699982FBCD6A30EB95E195EB40A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:52:14:35:27:30:31:b2:0d:d8:ce:ce:6b:
e5:35:ee:b0:8d:16:25:7f:a0:9b:52:41:e8:b8:55:
7b:6b:5d:33:ba:0c:66:95:ac:36:ad:9c:f9:99:a7:
db:3c:d8:2b:d3:75:50:f5:d6:64:3a:7f:e3:4a:ec:
1d:a6:2b:dd:78:7f:69:e4:0a:1c:1a:97:91:44:c5:
7c:fa:e4:1d:91:55:5b:c7:bb:21:da:60:85:28:72:
29:55:6f:ff:5f:69:a5:b2:b5:a9:ba:e3:bb:63:9d:
70:f7:f2:c3:7f:d0:8c:71:e8:0a:68:52:f5:60:65:
87:49:2b:d8:a0:37:37:82:69:e1:6c:1b:5e:59:8c:
c6:ac:a1:12:02:f6:e7:15:91:59:ca:b2:1b:70:4d:
bd:3c:89:c4:03:13:08:c1:7c:fc:89:00:8b:28:f9:
56:3a:9d:6a:8f:6d:85:88:b8:60:90:49:fe:9e:8c:
bd:26:94:8e:82:11:b9:12:c6:fe:b6:ab:c0:76:cd:
91:ca:54:4a:08:56:83:66:af:2f:2e:c2:6a:21:a7:
60:34:35:62:88:68:ed:a7:68:33:6f:37:78:e0:71:
a0:bc:6b:c2:52:8a:35:dd:06:47:ef:43:4e:ed:49:
fc:a0:78:cd:f9:5e:de:a9:27:65:66:81:7b:de:d5:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EE:27:53:F3:43:36:99:98:2F:BC:D6:A3:0E:B9:5E:19:5E:B4:0A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Te4nU_NDNpmYL7zWow65XhletAo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:f0:ab:7a:8e:95:dc:a7:94:e5:d8:19:31:c6:ac:b6:2b:a8:
df:52:fb:99:6a:ab:1f:d4:23:16:dd:e2:98:13:41:b3:38:61:
14:1f:e1:47:38:8c:54:c6:8f:a5:b4:ca:5b:9f:35:e9:16:74:
3a:b6:de:23:63:6c:30:f2:e3:73:ce:2f:d5:3f:42:cc:fa:c5:
b8:b6:15:dd:df:f7:42:6c:70:23:8a:3c:b9:8e:ea:df:15:36:
2b:be:13:ca:a7:bb:66:3a:c8:42:63:19:27:07:43:88:ff:71:
11:04:27:64:4f:9f:d3:91:77:c0:52:e1:a6:47:14:e7:12:5f:
42:12:cb:07:c5:a5:99:73:de:2d:b0:6b:6a:df:92:a8:73:ef:
28:c1:47:38:26:8f:f2:f7:f5:43:be:18:f4:b7:fc:d1:fd:0f:
4d:4e:3e:02:91:a1:77:86:5c:26:d4:3a:32:a3:9f:0c:07:de:
62:c5:2e:ed:a7:ed:a3:8a:09:7d:5e:7c:f5:67:dd:cf:53:39:
13:8f:8a:28:14:67:df:d8:d1:78:47:4f:e6:ba:6e:79:9b:cb:
0f:74:17:63:e8:2b:27:e9:6c:89:7c:a5:3c:58:58:40:1e:8b:
a3:39:58:6d:fb:37:95:79:52:b8:9f:0e:dc:c9:0f:52:9f:a3:
1c:9f:89:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 22:28:24 2025 by rpki-client