Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Tku5Se9fbQu3bt8IOHI6vSioAHQ.roa
File: Tku5Se9fbQu3bt8IOHI6vSioAHQ.roa (raw, json)
Hash identifier: cmnA2/7f6stNzppuaXIE5jHDjaU4+rLs+pkL363UQ4U=
Subject key identifier: 4E:4B:B9:49:EF:5F:6D:0B:B7:6E:DF:08:38:72:3A:BD:28:A8:00:74
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 16DA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Tku5Se9fbQu3bt8IOHI6vSioAHQ.roa
Signing time: Fri 06 Jun 2025 13:09:27 +0000
ROA not before: Fri 06 Jun 2025 13:09:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5850 (0x16da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 6 13:09:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4E4BB949EF5F6D0BB76EDF0838723ABD28A80074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:26:64:e5:ea:33:22:21:e2:f4:90:c8:99:
7c:57:93:49:70:58:e4:20:f7:14:03:f1:7d:71:52:
14:d5:1d:77:2c:8a:52:22:78:89:32:d9:b9:73:dc:
17:2d:8e:d4:a3:8c:95:5b:ed:b1:d8:4a:c0:3b:6f:
67:73:d2:ac:21:f4:89:15:17:0d:d2:73:32:d4:c8:
cf:16:be:10:32:0c:54:3b:1a:f4:1f:ae:de:67:81:
5e:59:6c:e5:0f:7a:ca:67:65:29:3e:a0:b8:9e:cb:
29:0f:a0:b6:a1:d7:7a:d9:bf:5c:11:fd:a3:3b:c8:
ea:75:fd:19:36:0f:58:f4:7a:de:46:a6:b4:c3:1c:
fe:b9:e0:64:fa:e1:c7:ca:92:c0:8c:88:f8:46:ef:
57:15:26:64:03:fe:c0:31:ff:64:a0:42:b8:9e:8d:
96:88:3b:4b:a7:a2:e7:41:1d:7a:51:df:80:46:87:
02:27:77:f4:c9:67:0e:2a:d1:6d:ce:c5:b7:27:6f:
b3:a7:b9:7b:f6:b5:26:82:0f:c2:15:45:d8:1d:e0:
1e:34:7e:e6:7a:7a:5a:b4:21:e7:ea:8a:3d:d4:15:
c9:4d:03:34:45:cf:d4:f8:6f:a6:fe:27:60:59:32:
8c:a8:72:65:ca:cd:ab:27:30:19:38:01:6d:5c:19:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4B:B9:49:EF:5F:6D:0B:B7:6E:DF:08:38:72:3A:BD:28:A8:00:74
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Tku5Se9fbQu3bt8IOHI6vSioAHQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:a7:b0:de:40:dd:5e:4c:9b:e6:b6:4a:62:e3:c8:dc:ed:dc:
f0:3f:0a:d7:30:9d:9e:e5:85:42:a9:a6:06:47:66:5f:6c:ec:
75:54:60:47:35:f8:a6:df:f0:a7:3e:5b:ab:71:a4:07:4f:b9:
15:d0:39:e5:bd:aa:de:34:c1:8b:70:f1:f6:c1:fa:87:a6:08:
ea:c0:9b:8c:7e:6a:f2:48:83:97:03:f7:3f:cf:cf:11:10:6f:
17:13:1b:7b:9d:ef:4e:33:5c:69:dc:f7:0f:53:d7:71:68:06:
c4:da:02:0d:4d:60:56:48:a0:3f:16:91:47:b3:e9:8e:02:f5:
1f:d3:86:9f:e5:b9:3a:9d:ac:bd:a9:5b:c8:d1:7d:55:cb:ca:
05:ac:4e:55:6f:f0:48:4c:29:2b:1b:de:35:a5:0c:d8:cd:d5:
dc:8c:6a:d0:08:26:d6:46:8c:18:d5:cb:5b:22:b4:5b:89:c8:
c6:56:76:7c:d5:ec:a6:ce:ea:35:a3:d3:99:5d:a7:3e:e5:7f:
0b:a8:56:c3:05:4a:6a:74:34:2c:8b:b4:15:97:5c:20:f3:79:
7a:86:db:59:e5:5f:cd:94:81:a1:81:26:cd:b2:01:f0:1a:dc:
e5:de:3f:d6:78:f7:41:fc:3d:67:6f:01:da:0c:23:33:e6:15:
30:13:04:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:04:10 2025 by rpki-client