Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/eyGUdU550SnAxaq5ConA4vWvUuc.roa
File: eyGUdU550SnAxaq5ConA4vWvUuc.roa (raw, json)
Hash identifier: 2HbjLqkWRkk/qIJ0Q1752xr9eas/XARSY+Zvm63AmAU=
Subject key identifier: 7B:21:94:75:4E:79:D1:29:C0:C5:AA:B9:0A:89:C0:E2:F5:AF:52:E7
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 16CA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/eyGUdU550SnAxaq5ConA4vWvUuc.roa
Signing time: Fri 06 Jun 2025 11:09:27 +0000
ROA not before: Fri 06 Jun 2025 11:09:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5834 (0x16ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 6 11:09:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=7B2194754E79D129C0C5AAB90A89C0E2F5AF52E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:0e:94:68:19:43:8e:ee:7a:e6:f7:10:99:
7f:dd:cf:24:29:62:12:25:db:a4:5b:c8:2e:23:8a:
46:2b:b8:b5:90:78:28:4e:5d:0f:f5:95:27:e0:45:
cc:34:95:57:ec:40:6b:bf:37:8a:f8:db:f1:35:13:
cc:c6:91:1e:6e:ed:42:95:d7:e6:11:b9:38:c2:1c:
80:44:a4:12:93:b7:b1:72:da:76:86:02:7b:f7:ee:
66:18:71:fe:9b:4e:63:43:e2:9d:0e:3b:90:9b:71:
a8:07:85:81:03:54:b1:b6:4b:a8:45:c7:ed:eb:12:
ee:ef:8b:be:f0:ac:11:77:6a:74:7b:04:6c:2d:2d:
8e:5f:c1:03:60:25:a1:3b:e8:41:57:cf:91:15:d2:
26:ac:ca:6e:4c:5e:ff:c1:53:90:ff:68:d8:d4:35:
b8:0a:5a:1d:f7:16:5a:ef:4f:96:b4:ae:94:1d:39:
21:37:a9:b1:41:01:66:cc:a2:aa:b3:d6:f2:6b:dd:
08:67:3c:8a:8f:8b:ef:44:19:29:65:aa:b1:a4:76:
ac:63:97:c1:3d:5a:09:7a:d8:7d:10:03:c9:78:2e:
dd:9c:64:a7:30:32:38:f2:2f:e1:ea:27:56:da:73:
31:32:f2:3b:a6:d8:13:70:28:c7:16:2c:49:4f:f8:
e5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:21:94:75:4E:79:D1:29:C0:C5:AA:B9:0A:89:C0:E2:F5:AF:52:E7
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/eyGUdU550SnAxaq5ConA4vWvUuc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:dd:14:75:23:8c:e5:80:1a:50:67:c6:fa:ba:8f:43:f3:33:
4e:8b:ac:7a:87:e2:9d:c7:92:8c:62:70:23:d9:17:c8:27:e3:
d8:81:b5:52:19:56:be:1c:6c:12:9e:91:6f:e0:20:1f:b7:13:
b2:32:33:43:30:fa:4b:e4:59:51:54:b0:96:e4:93:94:05:e3:
1f:a9:58:a4:d3:e3:ec:be:0f:da:c3:d3:21:52:36:b4:6c:5c:
cc:a0:81:e9:fc:66:b2:c3:d3:df:ff:f5:cd:02:00:6d:f0:78:
3d:01:d5:0e:fb:84:6b:d2:75:3d:2a:5a:80:ba:db:f9:cc:49:
bf:6e:5e:7b:ab:c7:5d:2d:1c:9a:3b:1f:ba:da:13:ef:9f:ec:
88:c1:9f:1f:0d:d4:42:77:8d:9f:2a:a4:e0:ad:36:55:0d:df:
56:1c:d2:3b:9f:70:8d:f7:be:7c:2e:95:f5:62:5b:1e:24:a4:
89:19:fc:65:5f:37:bd:26:b3:fc:31:fd:13:28:8a:04:33:5c:
a5:1f:6a:cb:82:54:2d:4e:c4:9a:a7:3d:94:ec:71:9e:5d:85:
0b:44:fb:15:ba:d2:dd:59:68:11:fc:f7:e6:bf:88:2f:9b:d2:
3f:13:5b:11:f7:eb:35:16:69:c4:01:1b:b0:c4:07:f0:82:23:
2b:6b:96:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 09:41:56 2025 by rpki-client