Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/dxfllK7bdjTvSbPizSp0dHcj4tw.roa
File: dxfllK7bdjTvSbPizSp0dHcj4tw.roa (raw, json)
Hash identifier: MbgbUaDpalazcOsB/PzLPbeKKn52JrWA4vkbnUSnen0=
Subject key identifier: 77:17:E5:94:AE:DB:76:34:EF:49:B3:E2:CD:2A:74:74:77:23:E2:DC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0CC2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dxfllK7bdjTvSbPizSp0dHcj4tw.roa
Signing time: Sat 24 May 2025 02:08:32 +0000
ROA not before: Sat 24 May 2025 02:08:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3266 (0xcc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 02:08:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7717E594AEDB7634EF49B3E2CD2A74747723E2DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:84:bd:25:cc:9c:1c:a2:59:61:55:bd:f2:
99:a9:6c:01:be:80:71:78:87:82:02:2a:76:ab:aa:
de:c5:36:81:de:d7:ab:2e:7c:a8:fc:a5:7e:89:6d:
ee:2b:b5:04:60:0f:88:db:6a:51:37:aa:b7:cc:9a:
85:f0:56:66:9e:4e:e5:74:2c:2a:8b:06:b9:f9:b3:
6b:66:77:2d:17:bd:6a:d0:0c:26:ce:ef:43:fd:f0:
fd:5c:7a:7f:83:ce:e5:86:10:79:ce:43:3b:db:a2:
83:86:c9:68:40:93:c7:50:a4:c0:d9:ae:1f:ce:ac:
09:b7:21:43:01:ac:b3:a6:f1:6c:0a:a9:41:79:0a:
d2:fd:79:62:50:e1:05:39:7b:d0:b6:bb:28:8c:99:
94:99:09:3d:e3:08:44:ca:f6:53:76:93:4b:6c:5d:
40:8c:60:e4:f5:00:d5:7c:b0:69:d9:a2:d1:31:ff:
87:49:02:ac:ea:73:33:88:9b:d2:4a:61:2b:42:b5:
84:2b:6b:6d:7f:11:9d:9c:1d:08:f8:36:44:a9:97:
b4:c0:c3:de:d9:ac:d9:3a:e0:53:69:ca:ed:c2:fb:
3f:b9:9d:7c:f3:49:61:e8:e9:a9:d6:a0:cd:b9:0d:
81:e2:3f:be:bb:5e:f3:6d:8c:16:85:e1:f0:75:95:
4e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:17:E5:94:AE:DB:76:34:EF:49:B3:E2:CD:2A:74:74:77:23:E2:DC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dxfllK7bdjTvSbPizSp0dHcj4tw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
69:b6:f6:17:93:e4:9d:f2:a3:3d:69:5c:9c:ee:e5:4e:41:ec:
3d:94:39:3c:85:e7:91:48:28:7e:a0:1a:09:27:47:3d:59:c3:
b8:ea:18:ab:e7:e0:40:24:11:ce:0f:9b:6a:7e:e4:ca:d7:00:
6f:ba:91:fb:c7:5a:6c:16:be:32:97:9b:44:d1:3e:90:92:33:
6a:9e:ed:d9:9f:5f:d9:7e:9d:8c:f0:14:cb:b3:69:38:d6:1f:
7d:66:ba:66:fb:51:c6:18:6f:37:ba:be:e2:27:f7:76:ad:40:
0e:03:6d:fa:c4:da:c7:7b:16:a3:7b:9b:0d:be:11:47:59:96:
8a:33:ec:a6:b3:a4:51:9d:67:25:e5:8d:8e:8d:37:06:25:b7:
b0:d8:d9:f7:21:a5:e1:91:b1:19:36:3f:f8:f0:1c:15:a8:19:
69:d2:59:0e:70:ca:0d:b8:aa:22:9a:5e:2b:15:57:46:84:7d:
05:1d:a9:31:1b:17:4e:56:25:b9:35:2c:09:36:56:19:91:bf:
05:2e:8b:6d:e0:12:88:d4:94:49:11:04:71:4d:58:d6:55:41:
41:b6:d8:4f:37:b6:97:a3:b6:e5:23:f1:0d:2e:1a:f2:73:72:
c2:a8:43:1f:61:31:3b:50:36:d6:08:65:fc:60:47:0d:9b:45:
27:18:47:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 08:06:23 2025 by rpki-client