Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/b7bx3QnKTo63P2z2Np7EkKmEBVg.roa
File: b7bx3QnKTo63P2z2Np7EkKmEBVg.roa (raw, json)
Hash identifier: 4vSZry4dvzNGmQPgpXsGoFQHiZAEOtrXXwlZI7zI0os=
Subject key identifier: 6F:B6:F1:DD:09:CA:4E:8E:B7:3F:6C:F6:36:9E:C4:90:A9:84:05:58
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 14B2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/b7bx3QnKTo63P2z2Np7EkKmEBVg.roa
Signing time: Tue 03 Jun 2025 16:09:59 +0000
ROA not before: Tue 03 Jun 2025 16:09:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5298 (0x14b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 16:09:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6FB6F1DD09CA4E8EB73F6CF6369EC490A9840558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:9d:de:41:1d:d6:96:33:b8:da:1d:d4:6b:
a4:a9:24:b0:22:d5:dd:17:c8:9a:be:cb:7a:00:74:
20:3a:57:4e:86:24:4e:30:30:48:6b:b1:88:02:53:
58:b7:43:d3:0c:f0:16:e8:2c:66:bd:27:f7:10:10:
8b:09:08:09:63:01:65:55:d9:02:8e:1f:cb:55:a1:
41:af:bf:9d:e3:8e:8c:33:3d:91:48:a7:2c:0d:78:
09:8a:b5:55:12:bf:24:33:d1:40:59:bb:4a:e1:a4:
b9:c8:4c:ff:55:f6:1e:90:b5:da:56:2c:9d:d2:a9:
35:7a:29:6b:75:8b:df:1c:6e:2e:05:1a:95:d7:99:
59:52:6b:d6:ed:cf:dc:6b:e1:76:e4:98:fe:00:6b:
2b:c1:4e:f7:80:a8:c0:b1:c6:4b:5d:79:f5:fd:04:
71:e4:4c:b0:93:f9:4d:2e:cf:bc:f9:38:98:0b:91:
bf:ba:86:75:2a:e3:e9:b8:ad:05:46:0b:0f:ee:97:
55:8f:70:60:f1:5c:a6:32:57:15:4d:fe:24:6c:a5:
37:6c:d7:22:59:43:f3:28:b1:b5:43:c4:ff:12:48:
9d:d9:4b:a5:80:f9:b1:cb:68:d8:a7:c5:1e:87:26:
02:8b:c4:cc:2b:0e:7d:f9:a2:e3:86:5f:5c:08:4d:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B6:F1:DD:09:CA:4E:8E:B7:3F:6C:F6:36:9E:C4:90:A9:84:05:58
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/b7bx3QnKTo63P2z2Np7EkKmEBVg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:45:91:83:45:af:0b:5f:79:35:6c:79:f5:87:dd:5b:8e:75:
54:0b:2d:41:9d:33:a5:a9:5a:c7:b0:02:05:e2:7e:7e:d6:b1:
39:5c:16:07:9f:c8:45:86:01:89:39:39:2e:91:b2:03:38:e9:
90:56:14:b4:48:f3:f9:2e:84:d3:7a:24:04:2a:db:8e:2b:22:
34:2a:7f:3f:a9:7f:68:28:81:24:d5:d1:e9:73:ae:09:fb:b8:
c5:09:18:16:a0:3a:93:d1:e0:b9:1c:33:32:03:d6:65:95:34:
36:ac:2c:f3:7b:61:1c:d6:ed:3c:36:81:b3:48:8d:c5:25:82:
c8:e9:e4:53:e4:8d:fa:d8:f3:77:f1:85:c1:36:30:8d:c6:c8:
6c:8f:b4:b3:f2:cf:8a:2f:b8:32:e4:af:ab:12:33:90:fe:c0:
2e:3f:6e:4f:ee:b9:c6:8a:5e:d8:aa:26:c2:82:a9:7f:05:bd:
d9:78:c3:f6:b6:bc:18:aa:f8:35:7d:7e:2c:0b:02:d1:df:8e:
9f:cd:9b:ff:35:eb:bc:32:02:3c:85:ac:1d:f4:fe:06:eb:17:
13:90:3a:6f:c1:de:69:8a:a9:99:10:b9:d7:5c:30:20:66:0c:
53:79:48:51:34:8f:de:56:3f:5b:a4:d3:45:32:84:1c:6e:31:
12:c9:3d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:59:39 2025 by rpki-client