Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/V-FbIbJx73Ix6a3QfcsMom94Z_Q.roa
File: V-FbIbJx73Ix6a3QfcsMom94Z_Q.roa (raw, json)
Hash identifier: O8q+kKNebW+ZkM/usn9c5r4MenhLqSue/3sgoLwOnnI=
Subject key identifier: 57:E1:5B:21:B2:71:EF:72:31:E9:AD:D0:7D:CB:0C:A2:6F:78:67:F4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 031A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/V-FbIbJx73Ix6a3QfcsMom94Z_Q.roa
Signing time: Sun 11 May 2025 05:07:52 +0000
ROA not before: Sun 11 May 2025 05:07:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 05:07:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=57E15B21B271EF7231E9ADD07DCB0CA26F7867F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b1:a1:b5:9b:9d:69:26:a4:07:12:54:77:b0:
ca:1e:95:c8:f5:db:f6:cb:c4:b9:a3:92:73:e8:73:
3f:6e:40:57:4d:11:cd:ce:43:79:6e:06:a7:1e:bd:
a0:48:12:42:99:c8:06:da:62:16:ac:ca:0a:5b:70:
4b:35:21:88:cb:95:09:36:cc:c9:b0:dd:f5:52:1f:
54:b8:18:4b:50:da:2a:55:90:2d:45:ef:e2:f4:91:
3c:45:36:bd:dc:60:2b:da:3f:da:91:2f:a9:cc:1f:
70:af:08:f5:de:80:71:ab:88:fa:8c:f2:f8:37:a4:
e3:a2:7d:ab:a2:5b:ab:de:01:0f:7e:45:5a:22:56:
28:69:b0:52:4b:86:87:e8:bd:ba:ad:ae:c7:c9:ff:
1c:1e:dd:73:04:a6:f4:30:66:74:fd:36:85:02:55:
a7:38:a5:20:3f:e8:8f:54:e6:bd:ed:7b:74:af:f1:
db:b7:fa:f1:fa:5f:c1:bc:af:75:51:41:00:ab:13:
21:31:7f:f1:0e:ec:9f:95:05:91:ce:bf:bb:f7:9e:
b0:44:64:88:d4:87:05:bc:b2:bd:95:1a:2f:8c:9a:
17:fa:a8:89:2d:ab:a8:62:18:9e:33:13:2c:8d:3a:
22:c3:40:36:99:1f:db:05:53:ec:f4:3a:0b:e1:85:
b0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E1:5B:21:B2:71:EF:72:31:E9:AD:D0:7D:CB:0C:A2:6F:78:67:F4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/V-FbIbJx73Ix6a3QfcsMom94Z_Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:5e:f2:cc:3f:94:61:44:7a:9f:02:ed:13:2e:f4:4f:f7:d0:
52:8e:d8:47:c9:16:44:c9:85:13:fc:fd:ba:85:f7:07:55:32:
42:3f:3b:d3:e7:29:ba:b2:24:30:a9:d5:50:91:25:8f:af:d3:
9e:38:9b:8c:e4:2f:e0:dd:be:ee:de:b7:06:2b:d8:69:38:0c:
13:ce:3d:63:b2:4f:52:7f:c5:b0:b9:b2:d0:21:ec:00:cc:d3:
c4:73:ac:54:05:26:33:3b:94:27:b5:93:2b:9a:8e:e9:5b:80:
16:c3:d0:01:8f:68:fc:3f:9a:87:bb:da:5b:b1:25:8f:b4:ec:
48:01:6f:3e:09:13:68:33:c7:3c:5e:b9:66:5d:87:61:4a:7c:
d3:a4:d0:d9:bd:2f:a1:fe:1f:f0:6e:ce:9a:03:d5:6b:7b:4c:
c6:8c:57:c9:10:55:bd:a8:ef:fc:1d:25:16:89:86:ae:3c:6e:
60:4c:dd:6a:92:c6:fe:b7:b3:63:8c:c0:67:36:1e:40:a5:b1:
97:38:f5:10:73:24:9b:ec:ce:5f:2d:10:1e:54:38:cc:a3:fe:
30:6e:02:dc:b7:5d:b4:c1:02:9b:12:54:04:0c:a6:f0:c0:c5:
08:06:79:91:eb:a0:d3:7a:e2:4e:f8:a5:b5:ef:fa:77:3b:ea:
22:d8:c3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:58:09 2025 by rpki-client