Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/aO6rsalLM6TpZPaFCwSdOxKsP6c.roa
File: aO6rsalLM6TpZPaFCwSdOxKsP6c.roa (raw, json)
Hash identifier: Og58GtDiZKhLeV9rY6scqYLK+3Bt7nYgYOUJsqp50Y4=
Subject key identifier: 68:EE:AB:B1:A9:4B:33:A4:E9:64:F6:85:0B:04:9D:3B:12:AC:3F:A7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1512
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aO6rsalLM6TpZPaFCwSdOxKsP6c.roa
Signing time: Wed 04 Jun 2025 04:09:18 +0000
ROA not before: Wed 04 Jun 2025 04:09:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5394 (0x1512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 04:09:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=68EEABB1A94B33A4E964F6850B049D3B12AC3FA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:15:db:93:c3:f2:8a:df:c4:81:55:64:28:c7:
f0:f4:76:4b:c0:f8:68:b8:e7:a5:d3:da:8a:53:d6:
74:34:6a:0c:61:59:72:3d:1d:6d:3a:54:0e:fb:4a:
23:74:5f:d5:33:61:58:32:d6:2a:c7:8e:82:cf:52:
49:0c:64:26:df:e1:8d:91:62:a2:c0:68:fd:a6:1c:
d6:d4:36:20:35:3c:ad:4d:38:fb:7d:44:42:4a:3f:
12:a9:c8:9e:65:ec:00:c1:ef:2f:a9:7a:2d:13:54:
39:65:1b:5b:dd:31:c9:9e:78:82:e7:d1:d9:ea:83:
c7:ed:21:5a:18:31:ed:cd:74:f2:d7:dd:0e:59:e7:
56:5c:7a:a3:4f:a6:e9:ec:a9:61:96:b9:5c:c0:a6:
bd:d7:81:cb:75:15:db:0a:78:d0:75:92:e7:36:68:
3a:52:c6:ef:78:71:97:36:5d:eb:42:5c:f1:23:6d:
f4:48:33:61:b8:c9:10:ff:b0:4d:df:ad:6d:43:2c:
9c:dc:00:dd:07:2f:e1:88:21:e8:d9:e7:b4:76:5b:
71:f3:bc:bf:d4:91:9f:e1:38:29:86:82:55:fa:53:
bc:71:ce:bd:75:be:41:ed:2d:23:4f:7a:68:f1:28:
cb:b4:03:17:d3:06:41:c3:43:96:b7:82:69:74:48:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EE:AB:B1:A9:4B:33:A4:E9:64:F6:85:0B:04:9D:3B:12:AC:3F:A7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aO6rsalLM6TpZPaFCwSdOxKsP6c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:21:ee:35:2a:ad:6f:d7:9d:9e:b9:a7:46:16:6c:5b:2f:d1:
40:0d:49:c4:f5:44:a6:99:b7:c3:54:51:a1:6e:ed:f9:32:75:
07:6b:56:86:c6:a2:c2:b7:f6:a9:ba:73:43:1b:ba:ab:59:e9:
0a:92:0a:f0:bf:da:70:83:af:a6:91:0f:8d:f8:54:95:f6:b9:
8a:2d:49:a2:97:30:e0:89:30:ac:03:46:d7:2d:50:96:2f:01:
a7:37:7c:8b:9b:51:6c:d3:4e:cf:84:90:c6:96:8b:21:ac:4b:
f5:c3:cd:19:67:d2:73:f7:b4:15:2b:8a:36:9e:3e:eb:b8:93:
4c:f0:41:dd:ee:da:b0:f3:1b:fb:bb:d4:e7:a0:e9:33:e7:83:
1d:5b:54:d4:a7:50:2a:b3:5a:d2:d7:63:6b:73:29:c1:d5:26:
69:76:1f:9f:a2:21:dd:3e:6d:05:dd:9b:32:29:a3:df:68:12:
e7:3b:b0:d1:80:48:84:31:3a:8e:10:73:0b:cb:14:dc:fb:bb:
52:e3:fd:45:a9:6e:1d:c8:c8:e5:b1:70:51:59:42:73:8f:1c:
3c:b7:76:67:b4:cd:bf:7b:f2:3b:16:89:9c:c5:52:89:a8:5a:
2b:eb:be:41:48:81:16:16:7b:0f:a4:cf:89:62:86:af:d5:cc:
5c:f7:ff:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 19:09:35 2025 by rpki-client