Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/W2tiz_t9u_njTMfo6MwgauIRueo.roa
File: W2tiz_t9u_njTMfo6MwgauIRueo.roa (raw, json)
Hash identifier: 1ZHUDxrCUIfT5084CeogG9lkRkRVhZqAeJKNwHBGN88=
Subject key identifier: 5B:6B:62:CF:FB:7D:BB:F9:E3:4C:C7:E8:E8:CC:20:6A:E2:11:B9:EA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 03DA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/W2tiz_t9u_njTMfo6MwgauIRueo.roa
Signing time: Mon 12 May 2025 05:08:16 +0000
ROA not before: Mon 12 May 2025 05:08:16 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 986 (0x3da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 12 05:08:16 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5B6B62CFFB7DBBF9E34CC7E8E8CC206AE211B9EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:2d:6d:13:f7:9a:52:5b:7e:56:99:63:3e:
a9:a8:7e:c9:08:6d:8f:a0:3d:bc:03:00:55:d2:da:
7d:24:ef:8b:31:77:93:5c:a7:30:44:66:1c:03:78:
4c:7b:3e:7c:dd:3b:ee:dc:fe:2d:ca:82:d8:30:41:
5c:86:21:7a:67:9d:2b:c0:a1:5d:83:d9:e3:0a:b7:
ca:5d:f8:9f:7a:9d:a0:4b:6a:24:a0:f0:c5:fe:b7:
e4:8f:3d:0b:df:1e:19:d5:2c:b3:1d:0b:6b:18:ba:
b8:35:4f:63:99:35:13:b1:b8:ef:3f:4b:89:17:fb:
e7:a1:c9:b2:6e:e6:0d:2a:e5:4c:a1:69:e5:4b:85:
18:89:42:37:9f:e1:8b:9d:49:cf:7f:e4:be:ee:a6:
87:1c:a0:48:ad:71:65:91:5f:09:1e:ed:15:a5:9e:
b9:b6:9b:d5:82:34:68:e4:c5:60:27:99:45:f9:79:
5c:6c:43:56:55:8f:e4:55:77:de:6f:52:a9:fd:88:
79:32:01:f3:18:5b:f0:28:9a:53:3f:0a:44:b1:9c:
ff:04:11:4f:7f:97:4a:5c:3d:2c:b5:79:34:2f:06:
17:8e:50:2d:dc:a9:0f:92:79:5e:ff:39:7c:dd:45:
53:ac:4f:40:ae:aa:98:b4:57:b9:0c:98:6e:77:65:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6B:62:CF:FB:7D:BB:F9:E3:4C:C7:E8:E8:CC:20:6A:E2:11:B9:EA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/W2tiz_t9u_njTMfo6MwgauIRueo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:eb:8e:88:9e:b4:12:19:7c:68:21:fa:50:23:aa:d9:9e:3a:
70:c2:60:e7:80:27:80:92:69:b7:a9:97:ef:77:25:7a:a3:4c:
9e:ee:a7:4f:79:e0:34:33:ce:07:85:50:01:c7:4a:de:df:52:
c9:b7:52:99:d0:18:29:85:2b:75:d6:a7:31:8d:8f:f7:b0:d0:
b4:06:28:80:e9:49:3c:f4:4b:67:b0:6d:e3:a9:3c:fc:dd:40:
2f:af:95:ca:a1:7a:ba:6c:b2:41:89:1d:08:8b:1e:27:e6:47:
42:37:4c:7b:fa:16:54:23:8a:35:97:cb:9b:41:06:c3:3e:6d:
09:c3:ec:c2:bb:14:b9:b4:45:01:f3:35:7f:8f:a3:11:bf:0a:
c7:5a:78:5b:f8:d8:c5:a6:82:cf:d4:bb:d2:1b:bc:fd:d1:b4:
fb:89:0e:68:ea:46:bf:13:b4:31:0e:9a:4c:83:80:b8:4c:9d:
ba:50:8b:4a:64:1f:0d:41:2a:69:e1:c4:2a:87:8e:e6:b9:10:
fa:a7:b1:dd:e2:bb:d1:74:68:41:c2:79:e7:0d:93:e7:20:57:
93:ae:e0:26:3d:e2:81:3d:42:bc:42:39:ee:ed:8f:93:21:00:
ab:d8:b2:c4:de:32:f1:a7:11:75:7f:56:35:cf:51:a2:45:e8:
22:21:df:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 16:44:09 2025 by rpki-client