Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/blOpd8ZW-exj4vIOr5i0r5eL3NI.roa
File: blOpd8ZW-exj4vIOr5i0r5eL3NI.roa (raw, json)
Hash identifier: FT8lxoWWadxH6GPeRmrxfurHBn1g15Dhk3TVS4+XPfI=
Subject key identifier: 6E:53:A9:77:C6:56:F9:EC:63:E2:F2:0E:AF:98:B4:AF:97:8B:DC:D2
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 185A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/blOpd8ZW-exj4vIOr5i0r5eL3NI.roa
Signing time: Sun 08 Jun 2025 13:09:45 +0000
ROA not before: Sun 08 Jun 2025 13:09:45 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6234 (0x185a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 13:09:45 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6E53A977C656F9EC63E2F20EAF98B4AF978BDCD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:92:72:e2:00:52:fb:40:9a:ea:3f:a2:ac:
13:8c:b4:a5:88:82:82:24:fb:4e:d9:21:fa:52:eb:
8b:c4:f3:9d:41:5f:4e:9a:38:82:0b:1f:a4:d2:a9:
2a:a7:99:bb:9b:84:2c:2b:2d:95:eb:68:b1:5b:91:
4f:e3:ea:3b:28:76:83:b9:14:21:2d:38:e6:3d:f2:
e2:a4:0e:9d:92:04:95:32:d7:b5:77:97:4c:1b:23:
91:56:82:ea:1e:11:7a:2c:2e:9a:53:de:74:1c:8e:
fc:db:4f:1c:bd:f9:cc:84:da:21:80:c8:af:91:97:
c9:cf:b9:1a:40:8d:cd:9f:0f:77:23:bf:5c:f9:e8:
45:58:f5:ff:c5:d6:d5:3e:31:f9:ed:ba:91:f9:46:
cf:c4:4e:84:0c:13:a6:ce:b6:ec:d3:e5:d9:0f:07:
bc:d8:2f:64:d7:8d:72:27:c9:70:a3:a7:08:7f:99:
12:9a:05:ef:83:7e:de:85:3d:b0:5f:9c:09:80:ee:
10:d0:fa:2e:da:77:5c:00:2a:12:bf:13:5c:a8:07:
9c:61:4a:0f:95:35:3b:39:af:70:f3:7c:dd:9e:7c:
f3:e3:84:77:30:23:ac:6b:00:1d:f6:be:5a:0f:f3:
d4:94:25:68:5e:f1:91:c5:de:ba:9e:83:27:88:65:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:53:A9:77:C6:56:F9:EC:63:E2:F2:0E:AF:98:B4:AF:97:8B:DC:D2
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/blOpd8ZW-exj4vIOr5i0r5eL3NI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:23:63:ec:6b:3f:94:a7:07:8a:4d:45:e6:d8:fd:6a:6f:2a:
f0:72:6e:f2:09:de:e6:a4:f7:b1:54:0d:48:ce:05:c3:0c:d5:
ef:a5:33:3e:78:7d:65:c6:df:7c:74:14:9e:b7:ad:b5:9f:2a:
44:bd:85:80:02:65:a2:6d:66:35:87:b5:c4:60:85:80:51:f0:
ec:b3:e6:6c:fb:90:d7:dc:df:fd:1f:2c:0a:c9:5d:9b:f9:fd:
8b:6f:90:5e:33:7e:89:27:b7:8a:ff:50:c4:aa:65:7b:45:18:
e4:0b:aa:a4:38:82:e4:96:08:b4:81:7f:1b:39:5a:32:61:7c:
51:a9:b8:b4:d7:05:7f:1f:f3:ab:ca:50:fe:d7:8c:9e:5f:9a:
de:de:7b:85:1d:39:97:d2:7a:36:6d:94:fa:b0:79:f4:b6:27:
ae:66:04:32:c4:f2:da:0c:1e:f4:39:d7:8d:a4:e4:53:24:f0:
c4:b5:fa:16:28:94:dc:e5:41:d9:14:57:34:95:7b:f7:0d:22:
55:b9:e9:d6:01:b6:5f:56:b9:72:30:f2:83:a8:d9:69:86:69:
e1:e7:db:cf:60:51:b2:59:6f:e5:30:4b:22:16:66:82:53:7c:
b3:28:d1:a2:89:ca:2b:10:ad:59:35:26:1b:ae:c2:16:62:3b:
89:7d:02:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:55:02 2025 by rpki-client