Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/XaoVYCbUXn9T438K9GW6dwxSpY8.roa
File: XaoVYCbUXn9T438K9GW6dwxSpY8.roa (raw, json)
Hash identifier: a6cTRWpmUq3vNR0HMcr5h9mj+DAy5BKwE7EeYryMmO0=
Subject key identifier: 5D:AA:15:60:26:D4:5E:7F:53:E3:7F:0A:F4:65:BA:77:0C:52:A5:8F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 129A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/XaoVYCbUXn9T438K9GW6dwxSpY8.roa
Signing time: Sat 31 May 2025 21:09:11 +0000
ROA not before: Sat 31 May 2025 21:09:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4762 (0x129a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 31 21:09:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5DAA156026D45E7F53E37F0AF465BA770C52A58F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:42:56:87:9a:bd:20:b0:99:f2:89:03:09:
af:a9:84:e5:92:48:fc:90:06:5e:bb:8b:98:a2:20:
8c:35:fa:00:1a:f1:84:f4:c0:d5:c8:f6:99:46:e3:
b6:f8:53:f8:8a:c8:e4:a7:b2:c7:e0:c4:95:a9:f5:
aa:65:38:45:c5:dd:f0:76:90:dd:d1:8f:9d:c8:63:
1a:a4:ad:cf:ea:c4:b6:03:5a:b5:c3:b7:d8:ed:6d:
4b:40:57:5e:36:59:4c:42:8c:e6:82:36:22:12:09:
ec:6b:5c:54:2d:b2:b0:16:29:6c:93:8c:f4:b7:9e:
4d:19:96:6d:47:bb:10:04:4e:6c:d2:04:67:e2:ad:
86:4f:8d:18:ca:d7:b1:27:f2:ca:5b:b3:d8:63:5b:
9c:e8:81:90:2d:47:22:9d:71:9a:cd:67:5a:ef:fd:
42:8f:14:9d:ec:6a:b6:d1:52:a2:29:91:7b:61:4e:
37:db:d3:9f:20:a8:ba:e2:6e:bd:66:fd:4d:ce:94:
1c:61:3e:4a:ed:d5:8c:2d:2e:31:2d:0f:e5:fe:64:
99:09:91:59:d1:41:10:78:2f:38:50:63:d3:a1:4c:
0f:37:34:63:b8:77:a8:ea:fb:31:6c:8c:b2:b7:de:
2f:98:5e:e3:da:5e:43:58:1a:76:e6:06:eb:39:47:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AA:15:60:26:D4:5E:7F:53:E3:7F:0A:F4:65:BA:77:0C:52:A5:8F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/XaoVYCbUXn9T438K9GW6dwxSpY8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:df:60:e4:7a:7a:c1:cc:d2:19:68:17:0d:1e:1e:8d:f3:a1:
32:d3:29:23:b3:ce:46:8e:f9:a6:9e:e4:8e:99:13:02:17:72:
20:71:f6:6c:f2:8c:34:a9:27:ab:38:05:7c:7a:06:ab:2b:11:
7e:26:19:54:7f:24:19:9e:67:a6:ef:51:2c:57:60:16:c0:d5:
32:c6:11:cc:bb:64:da:3b:82:d8:9c:9b:91:93:6f:12:d1:08:
d1:df:2a:e7:35:a5:70:33:cd:18:40:77:99:6e:ed:a5:85:4e:
eb:9b:8c:2e:d3:25:a7:b4:1f:72:48:2f:21:bf:55:5c:45:7c:
93:fc:b3:66:8b:87:9f:f6:bd:76:c2:ec:1f:2b:52:66:43:55:
6a:24:1c:b5:88:73:e7:d3:56:58:73:3c:55:b1:6a:a1:8d:33:
01:4f:28:2f:ec:6c:91:b0:cc:3a:c0:f3:ef:fd:71:52:62:fe:
2e:6f:19:25:b6:ad:c0:28:d5:ab:95:1a:80:b6:58:6f:93:52:
18:81:2d:85:b5:a6:3d:12:9c:6a:5e:6f:32:f1:37:9e:6f:df:
27:e2:17:28:07:1f:1f:39:af:ae:37:2a:5e:3d:07:8f:0f:78:
34:c3:67:d0:04:f5:14:fb:8b:85:29:8d:08:2e:65:c4:27:c9:
5a:43:19:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 00:32:06 2025 by rpki-client