Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/dg3HKtzGey7ZZM-jv53pOdZtgfM.roa
File: dg3HKtzGey7ZZM-jv53pOdZtgfM.roa (raw, json)
Hash identifier: QGhKTCY7ggb6RICDxsjoZ48TNB1zLEroOCh+8u8eUUA=
Subject key identifier: 76:0D:C7:2A:DC:C6:7B:2E:D9:64:CF:A3:BF:9D:E9:39:D6:6D:81:F3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1C2A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dg3HKtzGey7ZZM-jv53pOdZtgfM.roa
Signing time: Fri 13 Jun 2025 15:09:53 +0000
ROA not before: Fri 13 Jun 2025 15:09:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7210 (0x1c2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 15:09:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=760DC72ADCC67B2ED964CFA3BF9DE939D66D81F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:78:24:4c:95:b1:b6:c1:94:3c:66:4b:fe:
b9:31:54:db:70:c2:17:d4:b6:0f:1c:46:57:1a:a8:
ee:6c:bf:e5:27:be:06:13:1a:b8:f7:b6:57:ee:f3:
4f:da:34:12:02:bc:1e:2c:a2:b3:fa:56:d5:1d:64:
5b:c9:0c:cf:84:d0:62:93:f0:75:ae:d1:b4:7a:11:
cf:11:c6:e2:05:df:50:00:78:c3:cb:e1:cf:0e:b3:
a0:99:f2:d9:1a:0c:9f:4f:e1:7b:09:66:0a:ac:db:
05:00:e3:a6:c4:2e:19:d1:e5:8d:1a:b1:0d:f5:54:
04:7e:fc:3c:c8:26:42:cf:a3:7e:6c:2a:ba:99:73:
4e:0b:4c:5a:ed:9c:b3:c5:9a:57:4b:b2:75:ff:15:
61:04:e6:2a:46:7c:c4:08:35:77:0e:05:2b:da:c2:
82:c5:ae:c8:99:34:52:9d:18:f6:ff:0f:06:a4:4e:
bb:03:19:c6:c0:25:9f:38:92:2d:2b:2f:0e:9d:49:
db:20:49:b0:0d:a9:19:0d:db:3f:a6:99:d2:c4:81:
c4:5f:6c:f3:5a:e3:ad:12:46:90:e3:e4:09:78:54:
66:ac:fe:69:cc:60:8d:2b:7f:98:63:ed:4d:9f:d5:
a8:55:da:da:15:5e:90:18:6c:33:f8:90:da:64:07:
10:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0D:C7:2A:DC:C6:7B:2E:D9:64:CF:A3:BF:9D:E9:39:D6:6D:81:F3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dg3HKtzGey7ZZM-jv53pOdZtgfM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:4e:17:5e:50:65:97:37:a6:93:2a:d3:2e:52:4c:a6:ac:0b:
0a:4a:7a:4f:94:b3:e4:18:51:71:a2:1e:66:c3:78:ab:0c:38:
4c:6c:e8:7d:07:a6:b1:cf:45:a9:4d:30:c5:94:99:aa:6c:6a:
2e:a1:9f:90:3d:c9:c6:d3:c4:c6:14:21:ec:56:4d:48:e8:a7:
9e:07:06:f4:ae:32:3d:62:ef:28:c1:a1:f0:6c:f4:25:37:8d:
45:e2:2e:2f:5d:4d:2d:f2:bd:11:bc:5c:4f:1e:37:13:51:0e:
d3:a4:00:f7:d6:b2:ba:6d:bd:2e:1b:c3:78:45:72:60:94:f2:
48:8f:a1:0d:90:69:08:14:30:16:8a:50:44:7a:19:fc:04:31:
d4:13:66:db:f7:44:77:37:3d:72:1c:c6:9f:ec:ea:37:80:92:
3f:27:29:75:e7:19:67:0b:42:df:2e:9a:16:cb:35:6e:f4:55:
8f:98:f4:82:06:dd:04:76:31:6f:d1:3b:1c:66:67:e6:a2:23:
b5:b2:e5:97:54:29:15:70:64:ff:1f:c6:f2:7d:75:5c:06:37:
55:af:a7:eb:b9:53:84:46:ab:d1:75:90:51:aa:7e:30:0a:93:
75:b9:4c:f7:54:ba:44:37:d0:89:57:f1:5a:b7:48:84:38:9e:
d7:08:ed:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:07:26 2025 by rpki-client