Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Y4Ku9RTlxfgTC9T6GiG_cV2c8LM.roa
File: Y4Ku9RTlxfgTC9T6GiG_cV2c8LM.roa (raw, json)
Hash identifier: cHp7VX6AQSx138Gm83XuiMuZg5BNkF+xRCKMk+GwCpM=
Subject key identifier: 63:82:AE:F5:14:E5:C5:F8:13:0B:D4:FA:1A:21:BF:71:5D:9C:F0:B3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1AEA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Y4Ku9RTlxfgTC9T6GiG_cV2c8LM.roa
Signing time: Wed 11 Jun 2025 23:10:01 +0000
ROA not before: Wed 11 Jun 2025 23:10:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6890 (0x1aea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 11 23:10:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6382AEF514E5C5F8130BD4FA1A21BF715D9CF0B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:0a:09:51:53:c3:81:8b:62:73:7b:ea:ab:
78:b3:9e:af:20:eb:3b:12:40:bc:18:d9:70:b0:28:
83:07:b2:07:57:90:18:58:92:06:45:41:bb:be:28:
fd:68:40:fa:59:fe:57:43:ec:14:93:01:6c:51:68:
18:5b:f4:59:84:42:37:cf:9d:d6:56:0a:32:83:ac:
01:86:57:ed:cc:8d:69:e5:b7:0a:ce:dc:b0:03:f2:
e1:c9:b1:48:37:6e:3d:bc:8e:60:5f:bd:44:7f:2a:
a0:1e:e3:77:ae:8f:40:fa:9e:35:33:83:17:8a:64:
3b:df:83:ef:2d:ec:ce:35:46:1b:d7:ba:6f:34:7e:
a1:5b:6a:d0:24:33:e8:71:83:b4:9b:08:cd:b9:14:
fd:e0:5c:59:44:d8:ea:0c:6a:6c:49:44:7d:f8:53:
63:e9:a8:bc:9e:87:37:4c:26:b2:ca:6c:2e:4e:10:
87:49:aa:1e:28:d2:b2:13:9f:76:06:f5:c0:74:de:
39:37:db:ca:77:f9:4e:91:d0:99:14:b9:d3:50:18:
08:b3:4c:3f:57:32:c1:24:f2:fc:19:d8:d9:fb:89:
e8:33:55:94:01:f7:f5:5e:00:07:77:b4:c0:8f:d5:
22:04:5d:54:1c:0a:a1:3b:67:74:ac:75:ae:1e:f5:
e0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:82:AE:F5:14:E5:C5:F8:13:0B:D4:FA:1A:21:BF:71:5D:9C:F0:B3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Y4Ku9RTlxfgTC9T6GiG_cV2c8LM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:ae:2c:68:ce:d1:10:ba:0d:ed:c0:7a:85:2b:76:ae:0c:06:
e8:54:44:f2:a0:ca:e8:3a:78:c3:3d:9e:96:b0:ee:4c:35:75:
92:11:65:8d:64:db:73:58:23:28:00:30:a3:47:d1:15:01:c4:
b0:fc:1a:71:a3:2e:fc:38:c4:0c:6e:e2:70:8f:4e:77:d9:8a:
b8:a0:a7:21:2e:26:c9:e5:f4:0a:17:13:eb:8f:59:7e:23:c3:
64:79:24:55:c5:c4:5d:f2:9e:58:fc:6e:9a:38:2e:d4:f3:56:
3d:1f:f5:21:ce:68:27:05:5c:26:eb:d8:30:fd:33:73:90:10:
82:23:12:c6:9d:e7:68:b7:0f:ce:70:69:9e:83:e0:1f:82:b7:
d2:1b:d2:e3:be:7e:7e:7c:4a:4f:b8:e1:93:fe:d9:52:01:16:
4d:bd:89:b5:ef:1c:0a:4d:a1:db:b9:16:c4:b6:c6:50:6d:08:
3f:29:db:7c:f4:25:2f:58:a5:98:44:b7:ff:7c:78:94:95:d0:
b0:75:e0:08:9e:c3:63:06:f1:87:fe:7e:ea:a7:ba:d9:87:8e:
a5:7c:78:a7:e1:84:9a:64:04:ca:16:90:a6:64:d0:02:03:46:
d4:f4:ae:33:99:96:6f:b2:b4:10:c6:91:2d:0e:f6:4c:a0:33:
1d:60:30:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 08:50:38 2025 by rpki-client