Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/gbtf7agQGAgGxhCJHXpw_nd6cmw.roa
File: gbtf7agQGAgGxhCJHXpw_nd6cmw.roa (raw, json)
Hash identifier: /mCNJ2RKyAtps0oSTQdkPPKsx2k4LJecISLQFWYLT6Y=
Subject key identifier: 81:BB:5F:ED:A8:10:18:08:06:C6:10:89:1D:7A:70:FE:77:7A:72:6C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 191A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gbtf7agQGAgGxhCJHXpw_nd6cmw.roa
Signing time: Mon 09 Jun 2025 13:09:39 +0000
ROA not before: Mon 09 Jun 2025 13:09:39 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6426 (0x191a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 13:09:39 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=81BB5FEDA810180806C610891D7A70FE777A726C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:58:5f:22:dd:a4:c6:a9:c4:0a:13:22:82:
a9:5d:a8:ef:a1:4c:56:26:bb:66:d5:c7:4d:b8:be:
14:2b:6c:36:aa:73:c2:91:a0:d0:28:b4:ba:f6:04:
14:5d:99:3a:0a:9e:07:45:a1:0a:72:42:f5:72:f7:
c8:3d:cc:e9:87:2d:2d:6d:eb:bd:42:81:1b:88:f5:
bd:35:c0:97:08:ad:ee:17:10:34:e4:80:b8:d1:ff:
d1:59:55:63:16:a1:16:3b:a1:e6:61:20:17:68:96:
fe:56:3f:3d:67:7d:63:56:67:92:18:35:df:a7:2b:
73:c6:ad:62:3f:7e:67:91:e2:ea:ce:1f:4a:96:03:
a1:81:e5:0c:69:3c:4f:af:2e:8d:9f:63:ae:c9:d9:
ea:45:4d:b3:ef:c8:8c:a7:32:aa:05:9e:40:b2:05:
10:88:ac:c0:04:79:24:e8:df:1a:04:59:71:f6:23:
d1:9c:ab:57:9a:8f:ba:80:8d:a1:a3:9e:90:74:24:
ab:6e:c0:27:20:4c:27:39:ae:32:5c:a1:f7:29:25:
8d:66:5d:2a:9c:be:60:87:52:a3:68:92:fd:29:ec:
03:22:cf:92:eb:e4:43:fc:3a:ed:cd:d7:7b:eb:8e:
d5:58:c7:1b:e4:1c:f1:26:aa:88:3a:77:68:54:13:
54:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BB:5F:ED:A8:10:18:08:06:C6:10:89:1D:7A:70:FE:77:7A:72:6C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gbtf7agQGAgGxhCJHXpw_nd6cmw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:be:90:6e:3f:b9:54:6b:52:9f:57:7a:ee:ac:2a:19:c3:bd:
de:25:7d:f8:b6:08:58:94:0e:81:32:91:98:04:7b:6d:d7:0d:
74:da:f7:87:2e:ac:a1:dc:56:d9:32:c2:3b:07:50:e0:8e:07:
b2:c4:06:18:24:ce:64:e1:f5:b4:2c:10:a8:b8:7c:b0:87:3f:
aa:3c:53:b5:38:26:47:18:56:37:86:df:95:53:82:af:80:fe:
1a:7b:4c:56:02:c6:5e:32:ff:f2:e2:27:16:9b:83:79:07:89:
31:b1:85:67:ec:26:e5:44:23:f2:90:2d:88:14:20:cc:33:28:
7b:ba:ca:4e:47:a9:29:75:fa:d4:23:49:e1:56:1e:46:4f:cc:
d8:23:68:7c:f5:33:05:ca:a1:fe:76:32:2b:4b:fb:0a:c7:65:
fe:e4:04:74:2d:8c:02:39:e3:c7:f9:56:ac:9d:a0:c4:35:27:
af:21:06:a8:55:ce:8b:bf:6e:2d:f7:5a:50:36:ee:75:df:ee:
b1:e6:8f:71:8a:f3:76:86:86:b5:99:5a:91:78:55:e3:91:30:
9a:d5:60:f7:a0:a5:00:91:b4:35:b1:d5:d6:15:fc:1f:1e:86:
a8:ab:60:64:7e:db:2e:66:50:23:cc:1d:28:60:d2:98:dd:5d:
2f:87:4b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 00:24:51 2025 by rpki-client