Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ga969H3Q18gnaVNnP7klzpBB4p0.roa
File: ga969H3Q18gnaVNnP7klzpBB4p0.roa (raw, json)
Hash identifier: aeW2p9y4Tq75KAsUPdpNqZ/YXSmsyIBabU25GEm7F/Y=
Subject key identifier: 81:AF:7A:F4:7D:D0:D7:C8:27:69:53:67:3F:B9:25:CE:90:41:E2:9D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0556
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ga969H3Q18gnaVNnP7klzpBB4p0.roa
Signing time: Wed 14 May 2025 04:38:11 +0000
ROA not before: Wed 14 May 2025 04:38:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1366 (0x556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 04:38:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=81AF7AF47DD0D7C8276953673FB925CE9041E29D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:b4:d9:5e:95:8b:83:52:cf:27:b3:00:2f:
9a:1e:0c:0a:46:66:05:30:c2:e4:cc:34:b4:72:64:
b0:78:58:ac:a3:33:96:99:3c:52:54:e3:61:04:b5:
a8:0f:65:32:2d:64:f4:16:fb:61:92:c5:62:54:23:
a9:1a:6c:6b:59:97:0d:4d:dc:66:ce:f6:d5:a5:47:
e9:89:9d:15:32:8d:c5:33:a5:f6:46:ff:c9:a0:95:
d6:f7:67:ec:ab:64:db:9d:e6:61:16:70:4f:a0:42:
92:e6:87:f3:b0:0f:73:9b:c1:29:74:99:6e:34:be:
cc:8b:68:7e:3e:05:66:31:ff:b9:85:ca:35:46:20:
08:b2:68:ee:52:89:80:01:23:bc:cc:2c:1c:9f:db:
db:8f:4c:d4:89:82:32:2d:aa:25:0b:d5:d6:3e:29:
a6:b1:a9:32:b1:b5:34:c6:6d:18:8a:eb:7e:32:ec:
a2:8e:46:7a:0a:48:a3:0c:97:fc:0f:8c:6a:dc:e3:
a3:03:51:2b:78:51:a5:8c:2e:5c:53:b7:01:01:75:
1e:57:f2:9e:f5:a3:7b:f1:35:2e:d3:79:ba:61:8d:
85:f7:c6:7e:aa:56:49:8d:30:0c:18:84:da:0c:68:
5d:c3:a4:a9:d6:32:8a:55:19:2a:56:2a:48:fd:41:
67:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AF:7A:F4:7D:D0:D7:C8:27:69:53:67:3F:B9:25:CE:90:41:E2:9D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ga969H3Q18gnaVNnP7klzpBB4p0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:b9:c2:e8:1d:5a:85:1b:ef:8e:64:7e:f6:23:da:bf:60:94:
b4:be:8b:e4:72:60:3d:47:c9:c9:76:2a:2f:83:0d:91:97:2e:
e6:8d:f4:7c:4c:fa:ce:2a:23:da:b4:01:d2:5c:c6:40:ed:bb:
a0:6c:d9:5f:c1:11:00:55:7f:17:ba:33:40:b4:63:ef:86:50:
50:d5:fd:b0:0c:b6:3d:17:ac:9a:25:97:95:90:2f:83:4e:09:
cd:6c:9f:15:07:a4:fd:44:91:1e:45:69:46:cb:83:e0:46:2b:
b0:03:54:15:2a:2b:da:9e:53:1d:6e:b0:bb:37:21:14:d2:ee:
67:2c:aa:bb:fc:f7:5b:73:81:71:d3:f5:93:22:ea:dc:d9:fc:
04:77:f0:73:6e:f2:71:e4:a5:52:ac:e1:d0:69:4e:5b:16:e1:
12:07:81:2d:7c:a9:1c:e6:01:30:53:47:8b:eb:54:91:6a:74:
08:fc:57:bb:bc:57:c4:38:9b:5d:08:3c:45:9d:94:db:d8:81:
32:a9:5e:73:a7:7d:1c:b6:eb:55:f6:89:43:c7:6f:40:d8:db:
a8:ce:01:a2:1b:92:93:19:5f:6e:76:b4:e7:73:98:69:87:05:
e2:28:cf:e1:9d:c2:60:68:89:db:ac:cd:54:58:2f:58:d7:8b:
33:e3:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 12:32:48 2025 by rpki-client