Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/UYjqnDqDbRNOTFpFvXvc5wvl_YM.roa
File: UYjqnDqDbRNOTFpFvXvc5wvl_YM.roa (raw, json)
Hash identifier: +mpZW2jX3bF+hXQsyY3gEfzVVEPyNVD+V3u2TiFwEUI=
Subject key identifier: 51:88:EA:9C:3A:83:6D:13:4E:4C:5A:45:BD:7B:DC:E7:0B:E5:FD:83
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1A3A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UYjqnDqDbRNOTFpFvXvc5wvl_YM.roa
Signing time: Wed 11 Jun 2025 01:09:54 +0000
ROA not before: Wed 11 Jun 2025 01:09:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6714 (0x1a3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 01:09:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5188EA9C3A836D134E4C5A45BD7BDCE70BE5FD83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d8:63:b7:60:38:c4:48:1e:8b:54:a3:f3:26:
78:86:47:07:b9:95:64:cf:9e:59:dd:97:ab:66:7f:
44:5e:3a:02:55:19:ba:c2:15:40:17:07:7a:87:e5:
81:38:f1:b8:6d:54:ec:a0:42:2c:f6:c1:18:1a:43:
18:18:5a:81:43:01:8b:0c:86:cb:40:fa:e4:e6:bf:
09:b7:1b:a0:ee:b6:d0:82:c2:b0:d7:f4:2c:0c:48:
50:d8:df:60:2a:9a:7c:6a:59:6f:62:82:8b:43:ea:
a8:ff:e1:ca:31:4e:60:a5:27:8d:02:64:99:15:5b:
4a:51:b5:4c:1e:fe:06:88:9e:17:f6:54:cf:81:b0:
9b:cf:9e:33:8e:24:b5:d8:e6:e3:a4:db:29:c1:e1:
5a:92:81:d7:b5:d7:0d:bb:6f:b7:ec:9b:27:83:26:
72:37:00:8b:82:37:5d:18:65:7d:10:89:5e:38:7c:
fb:93:23:04:a8:5a:e6:2e:8b:74:9b:5f:a1:66:af:
c9:5c:af:7a:5b:8e:cf:da:f0:1d:30:fa:32:b5:2a:
23:26:f9:e4:62:3e:c3:c0:12:e0:fb:38:b5:f8:09:
91:21:72:03:4b:34:86:ca:b9:21:81:ee:01:0f:b3:
2a:07:0f:67:fe:9e:1f:c0:a6:ef:c5:be:90:50:db:
a3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:88:EA:9C:3A:83:6D:13:4E:4C:5A:45:BD:7B:DC:E7:0B:E5:FD:83
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UYjqnDqDbRNOTFpFvXvc5wvl_YM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:38:3c:26:7d:e3:a7:53:53:2b:f5:37:9b:6f:ac:e8:b1:6a:
3a:a0:5c:be:4e:21:b8:82:04:ac:cf:c9:af:40:21:e6:e6:94:
a6:48:e2:0b:61:e0:97:9a:4a:cb:6c:5e:08:4c:56:67:c0:75:
ad:f7:40:d1:8f:1c:aa:cf:4b:1b:a1:77:e1:cb:f6:ac:84:1f:
92:2f:b3:0c:81:65:3f:f6:b1:e1:b6:8e:bf:8f:33:15:4e:4f:
98:35:2c:56:4c:b8:5f:e0:f2:12:6f:32:b7:a8:a7:45:f9:a0:
4b:f6:a9:e3:ed:48:d8:61:6b:27:2d:0d:58:be:a5:8e:93:d3:
98:90:dd:f3:1f:7c:3c:85:9d:1d:e9:91:b8:80:e0:3e:9b:d5:
07:15:bf:b8:6a:f2:0f:98:07:20:20:ed:09:64:2c:32:99:33:
fe:f8:25:a2:3d:0e:e6:a9:e4:fa:bb:dc:af:39:b2:6b:fe:67:
fe:33:15:d9:56:4a:47:28:92:a6:3e:5d:e0:46:7e:eb:07:51:
f7:2f:e3:c8:9b:cf:99:cd:9f:99:d6:a8:82:9a:af:46:20:9b:
78:5d:88:2f:2d:b1:72:c6:bd:45:42:63:bf:f4:d2:27:ec:cd:
71:35:9f:b9:ef:9d:a6:3c:66:42:b1:7e:71:e6:a1:63:8c:a4:
4b:20:6c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 09:29:42 2025 by rpki-client