Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/_lV0drUK0dprn_CWl0VzKUKFUAw.roa
File: _lV0drUK0dprn_CWl0VzKUKFUAw.roa (raw, json)
Hash identifier: hM4JXK2pDiUK3IX5rMGsIsZ2vQgN8vSD/iXNTUoeI9o=
Subject key identifier: FE:55:74:76:B5:0A:D1:DA:6B:9F:F0:96:97:45:73:29:42:85:50:0C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 16F2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_lV0drUK0dprn_CWl0VzKUKFUAw.roa
Signing time: Fri 06 Jun 2025 16:09:28 +0000
ROA not before: Fri 06 Jun 2025 16:09:28 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5874 (0x16f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 6 16:09:28 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FE557476B50AD1DA6B9FF096974573294285500C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2d:ee:d8:3a:c1:1b:e5:ac:0f:8c:21:fb:d6:
80:18:91:6a:f3:ed:82:f2:f6:10:7e:26:27:7b:5f:
09:3c:8c:90:fb:1f:8c:1e:9c:25:0b:9c:f7:6b:8a:
b2:32:5e:d3:e8:fa:a6:1a:42:e9:c9:f3:b9:bc:32:
45:d3:6b:8c:99:4d:49:6e:16:c4:43:c0:6b:a3:0f:
cd:27:b2:c0:31:2a:af:b2:0c:b1:06:f3:23:05:ed:
c3:59:01:ca:e9:61:78:87:7b:05:79:38:18:ac:54:
f0:7c:40:e4:c7:90:17:ea:60:cf:ba:2b:84:4e:24:
93:59:94:aa:cc:71:e7:d9:52:95:cf:25:14:90:01:
4a:ae:b7:37:e2:5b:45:09:b0:20:3e:83:86:d7:b9:
ea:f2:3b:c2:55:03:88:40:e7:ef:1e:5d:5d:04:d0:
22:8d:e7:8a:24:84:20:11:02:8a:06:9b:5d:71:5b:
dd:3b:75:7b:e9:0d:31:26:23:11:41:ce:16:d0:88:
43:02:8e:4d:1f:d3:a9:e8:5e:bb:26:22:3c:3b:f0:
25:02:bf:bb:b9:3d:79:61:75:ef:df:1e:a2:08:b2:
ca:fe:ab:e4:8e:2c:c9:6c:e9:77:61:5c:05:3b:64:
fe:6b:96:e8:e4:0f:a4:25:d5:7b:de:0e:8e:a3:fe:
92:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:55:74:76:B5:0A:D1:DA:6B:9F:F0:96:97:45:73:29:42:85:50:0C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_lV0drUK0dprn_CWl0VzKUKFUAw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:43:01:32:ed:1b:5f:3c:25:c2:06:6b:a5:97:0b:89:82:22:
3f:74:55:88:16:85:ae:96:e8:f5:4a:e8:13:5a:7c:23:23:1c:
a1:f4:8a:f8:08:fc:e0:ef:80:a5:4a:04:f8:6e:f6:e4:ab:03:
9b:3c:84:98:60:6f:e4:2a:05:be:de:0b:1f:ec:21:ca:6d:32:
aa:64:36:b0:38:6f:6e:8b:ae:98:1a:39:6a:8c:00:92:27:8b:
ea:ab:44:7e:d7:bb:99:1f:61:1e:1f:bb:80:29:df:aa:a0:bd:
ff:d5:46:ac:13:72:52:b6:1d:54:46:e1:61:9b:f2:9c:0d:cb:
5d:d1:65:ea:d2:96:b5:ce:e9:8d:39:30:d3:83:bc:28:e7:b9:
2f:5b:a0:55:1b:79:60:28:29:04:9d:de:6a:a3:44:2d:71:6f:
da:9e:4c:b8:20:ad:d6:d6:d2:21:78:df:a5:8c:71:f1:27:d0:
bc:ff:ab:21:d8:f1:56:28:91:d1:a7:8a:f3:46:fa:d2:ce:5f:
28:e9:e7:d0:45:25:bd:7b:32:d1:36:05:e0:f8:c5:e9:c9:41:
92:72:4d:4d:d1:e4:e7:0e:65:25:21:1a:8b:65:51:6d:5a:ba:
a6:28:fc:fc:eb:b5:30:f0:82:5f:e6:48:f0:c3:a3:fe:2e:ed:
e6:b0:8a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:19:36 2025 by rpki-client