Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/a_0b9yKr9pbAGeRT593YjRRV3KA.roa
File: a_0b9yKr9pbAGeRT593YjRRV3KA.roa (raw, json)
Hash identifier: ZskCOhXZnQUcAmK15/eOSKBOJSY6oRJ8iVXupb/CAYI=
Subject key identifier: 6B:FD:1B:F7:22:AB:F6:96:C0:19:E4:53:E7:DD:D8:8D:14:55:DC:A0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 05B2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/a_0b9yKr9pbAGeRT593YjRRV3KA.roa
Signing time: Wed 14 May 2025 16:08:57 +0000
ROA not before: Wed 14 May 2025 16:08:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1458 (0x5b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 16:08:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6BFD1BF722ABF696C019E453E7DDD88D1455DCA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5e:1b:74:40:98:29:38:f9:03:0e:fb:94:9a:
3f:ef:f9:a7:71:e2:b6:df:8a:42:6a:a2:88:d8:53:
28:88:69:d5:6e:a5:e0:46:75:a3:f1:da:de:62:85:
be:39:34:3e:b2:39:95:45:9c:80:89:0d:b5:a5:09:
c0:fc:66:cd:72:66:93:54:95:93:89:93:ee:f9:1e:
7b:ec:4f:48:76:25:ca:ef:54:56:2e:c8:cb:d0:9a:
37:1e:c2:51:d5:d3:f8:34:32:b3:7e:17:37:12:1b:
f2:ec:f5:3e:1f:78:45:6f:d6:98:3a:a5:5d:86:3a:
57:34:11:f8:00:2e:c2:68:b6:d6:e6:a8:bd:68:7d:
e3:1b:1d:b5:9b:7a:84:33:62:9b:04:34:14:2a:ce:
1f:77:cd:1b:a4:7d:c3:fe:3b:6b:5a:df:38:44:14:
d6:14:6d:17:17:5c:9d:5e:36:02:8a:4b:47:c9:68:
7c:af:2d:0c:56:99:7e:28:83:32:5e:a0:8f:c1:1b:
ef:73:a9:8b:f3:6a:82:a5:c9:f4:b4:34:dc:2d:09:
19:ab:5c:81:0c:a8:89:86:b2:38:75:af:ce:ae:de:
e8:ac:a9:a9:99:27:c4:88:04:c2:20:e6:f8:3f:01:
7b:aa:4d:ea:a9:62:f6:7a:65:3c:ed:49:62:e0:30:
8f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FD:1B:F7:22:AB:F6:96:C0:19:E4:53:E7:DD:D8:8D:14:55:DC:A0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/a_0b9yKr9pbAGeRT593YjRRV3KA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:3c:5c:63:34:65:43:97:bf:34:20:4d:77:9e:79:6e:69:c0:
e4:59:0b:ba:16:d4:d7:a8:0d:bf:28:0c:49:1b:64:cc:44:8b:
dc:a9:4e:38:ae:2b:e2:32:c7:33:d1:d7:5a:05:2e:d0:14:1d:
5a:ae:1f:67:27:51:8f:4a:3c:08:57:ae:6e:20:15:71:83:c1:
51:15:77:6c:c1:68:99:c1:e5:35:10:49:35:76:bc:4d:94:d4:
ad:ef:fd:e5:3c:0c:16:17:74:a2:6f:29:ff:75:c1:d9:29:f9:
cc:95:d3:f4:15:45:4e:8a:47:ab:54:80:67:04:87:31:59:ea:
1a:00:c1:bd:e8:10:c5:ee:79:33:c9:bb:b5:76:bd:4b:ca:f8:
02:13:12:80:d6:55:3b:f7:b7:f4:86:42:8c:3e:5e:bc:54:e7:
77:81:c8:9a:66:40:c6:33:21:4e:be:21:b5:8e:57:72:09:06:
bb:39:95:06:72:1b:4e:ce:05:22:c6:a4:ec:76:8f:ac:ad:be:
45:46:bb:25:68:cc:ee:ee:c9:2d:18:b4:ca:3e:eb:b4:94:ef:
1d:85:09:5e:3d:13:57:00:5b:99:f2:ea:8f:82:11:9c:c1:06:
df:28:33:0a:68:3d:ed:64:13:3d:fb:7c:5c:f6:e5:72:a6:b6:
bf:21:70:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:52:46 2025 by rpki-client