Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/VqLMrpvcOUPuzxzhnCnsfS2cJDM.roa
File: VqLMrpvcOUPuzxzhnCnsfS2cJDM.roa (raw, json)
Hash identifier: 7h9UPl/oMyC/GWg5XEWp7sslBFpdV8yCrm7M3VWWfKw=
Subject key identifier: 56:A2:CC:AE:9B:DC:39:43:EE:CF:1C:E1:9C:29:EC:7D:2D:9C:24:33
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1792
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VqLMrpvcOUPuzxzhnCnsfS2cJDM.roa
Signing time: Sat 07 Jun 2025 12:10:19 +0000
ROA not before: Sat 07 Jun 2025 12:10:19 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6034 (0x1792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 12:10:19 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=56A2CCAE9BDC3943EECF1CE19C29EC7D2D9C2433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:fb:d0:26:82:3c:8b:b1:1c:25:60:de:e5:
1a:b3:81:95:0b:ea:f7:c5:83:d3:33:28:b4:de:08:
2f:54:c9:21:b8:fa:c6:6f:0e:11:f2:ff:a3:d6:15:
fd:ca:95:7b:77:a5:cf:06:ae:24:59:b3:ab:88:64:
60:7f:f3:ac:6f:87:b1:02:2d:0d:75:d6:a2:ef:40:
30:c1:6d:c5:30:68:89:62:b5:e2:0a:d7:c7:4e:70:
dc:e9:bf:0c:3f:52:85:0c:37:59:81:07:60:00:66:
d0:b2:f8:b1:67:d4:5c:c4:eb:f0:42:a1:a1:99:df:
e5:bf:b8:88:26:b8:c9:fc:28:6d:cc:72:a0:a1:9d:
93:92:aa:06:e5:8f:3c:5b:22:b4:2b:0b:cc:29:2a:
92:14:3a:b0:a9:6f:a8:fe:36:47:35:6c:cd:de:55:
3c:4e:7b:4f:84:2d:c3:a0:e0:ba:e3:c4:f0:4c:2b:
9a:c7:46:34:6f:20:be:ba:9c:77:ad:2d:bf:8a:ab:
fa:8d:99:83:a0:a3:22:f2:5d:84:dd:5c:e4:e7:ce:
cf:ef:f7:ff:d0:83:e2:d5:50:88:07:a0:2d:2f:02:
5b:11:fb:8c:d9:dc:c4:a0:3c:a7:54:1d:3a:bb:cd:
d6:58:a8:13:f9:5e:29:a7:1a:3d:16:1d:6b:e6:22:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A2:CC:AE:9B:DC:39:43:EE:CF:1C:E1:9C:29:EC:7D:2D:9C:24:33
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VqLMrpvcOUPuzxzhnCnsfS2cJDM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:c1:79:c1:c0:9d:6b:b0:76:ff:fc:68:a7:ab:a3:16:f7:98:
75:45:28:ec:4e:a1:bb:26:c3:45:f0:bd:8f:02:1f:4e:3e:ae:
e6:f8:83:cd:4b:a5:41:cb:51:59:ae:d4:f3:47:ed:67:35:50:
71:6f:00:24:de:4e:64:9a:24:fb:97:34:6f:c8:6b:8a:e7:d1:
01:f5:43:9c:eb:44:0a:e5:95:08:c9:70:20:12:3e:15:79:9c:
68:f1:b9:b8:65:11:cc:0b:f4:bb:4a:86:5a:bd:d2:84:05:e4:
a4:bf:03:4e:d1:6e:2f:be:b8:35:a6:64:6e:a9:45:b1:76:f9:
ec:fa:03:eb:ec:76:54:5a:96:6c:e8:47:5b:96:41:60:0e:2f:
8d:42:05:7e:66:b7:d9:40:f1:f5:73:ed:a2:37:9d:bc:e8:2a:
33:aa:a2:86:3a:7d:cc:93:1f:3e:27:7f:04:19:9b:88:0f:be:
06:73:4f:66:7e:18:dd:3d:69:73:1d:c8:9a:f9:3e:4a:e5:37:
57:ad:e0:76:4c:01:59:be:c5:2f:b2:1d:fa:f1:4a:d2:81:b5:
32:46:9b:ee:f2:23:b5:35:60:c7:dd:15:17:f7:c9:c2:52:27:
50:86:d5:ae:d9:04:5b:7b:10:2a:34:67:40:5a:b5:77:35:cd:
e3:f5:e8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 22:41:16 2025 by rpki-client