Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/iA9fpAbgLYMrV3dEfVSl6wMobm8.roa
File: iA9fpAbgLYMrV3dEfVSl6wMobm8.roa (raw, json)
Hash identifier: G6NrKmwNi3dnr+8XS1XpFfNEi7+7Bl2E5SIRSbNleqA=
Subject key identifier: 88:0F:5F:A4:06:E0:2D:83:2B:57:77:44:7D:54:A5:EB:03:28:6E:6F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1972
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/iA9fpAbgLYMrV3dEfVSl6wMobm8.roa
Signing time: Tue 10 Jun 2025 00:09:39 +0000
ROA not before: Tue 10 Jun 2025 00:09:39 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6514 (0x1972)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 00:09:39 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=880F5FA406E02D832B5777447D54A5EB03286E6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:01:82:ea:2f:70:5a:b0:ed:12:39:5a:98:
de:04:37:fe:a2:a6:52:71:3c:a2:22:c2:e5:30:1d:
37:5a:e8:98:7e:13:06:1c:71:00:41:f3:97:c8:ff:
67:ab:db:aa:e9:c7:ba:12:3d:c0:41:6c:0f:09:c8:
e5:aa:96:ad:4f:9d:c1:00:28:33:cf:ac:0a:99:16:
b0:53:5c:ef:42:66:72:ff:bc:71:ba:8e:52:41:73:
19:2e:a5:3a:68:76:d2:0f:43:7c:59:07:e2:8d:97:
51:8d:fc:94:cf:9e:1a:8c:3e:13:c1:a6:e1:d5:5f:
a5:e3:0d:2a:8f:23:9d:ae:d2:e6:4d:80:ad:14:83:
6e:7b:00:83:4a:b6:6b:d2:35:07:27:55:10:56:bb:
70:75:b9:5b:a5:14:7d:aa:a8:33:d0:fb:62:ac:3e:
6f:6a:89:f2:25:c5:e2:16:c9:df:d5:b6:44:fd:fd:
5e:e5:87:d4:04:93:0b:a0:ad:03:97:20:33:7d:ee:
bc:3a:42:0c:2a:63:13:f5:bb:67:8d:28:f3:4c:4c:
09:13:f2:8d:85:eb:2a:6f:36:69:47:44:f3:23:d2:
d7:cd:02:fd:c1:aa:a6:f7:38:b9:c4:23:09:a8:90:
fe:a3:30:42:54:07:d9:ab:18:f0:e5:c7:7d:e1:c4:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0F:5F:A4:06:E0:2D:83:2B:57:77:44:7D:54:A5:EB:03:28:6E:6F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/iA9fpAbgLYMrV3dEfVSl6wMobm8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:67:6a:93:27:e4:1f:51:41:28:54:36:ed:e5:c4:f3:62:17:
b9:79:c4:2a:90:ff:f4:f5:b8:c2:24:39:1b:22:c1:72:d3:da:
ef:97:0c:f1:4d:22:eb:4e:32:1a:3f:c8:ac:e1:cf:98:e0:09:
65:f0:e1:ac:2e:f7:f9:de:1b:29:f4:72:13:83:0c:d9:54:25:
ff:67:ff:46:b0:9c:6c:37:21:78:34:8a:f9:7e:b5:db:83:03:
f6:2f:f7:c3:f0:e2:a2:68:c5:b5:69:69:c5:44:04:5d:c4:72:
a5:50:24:7b:0b:38:00:82:d1:b6:d0:e6:d4:40:e9:0e:2f:ae:
db:21:c5:d5:e1:d0:a1:dd:bc:c1:f2:fe:e7:2f:75:60:a7:a8:
67:92:ec:6d:25:9c:23:a2:80:43:e4:12:39:82:9b:90:79:7c:
70:29:b6:4f:07:11:2f:2d:19:0e:d0:4c:1f:c9:ba:06:d4:30:
56:6e:5c:b2:0b:4b:14:5e:8e:0f:4e:89:7c:b6:fb:3e:ef:96:
76:59:70:ed:00:d1:1f:8d:9d:5f:d7:94:9d:dd:bc:3c:96:3b:
9d:e6:9a:60:eb:7c:3f:eb:b6:af:f2:a8:b0:ee:31:a9:15:99:
cd:cf:ce:b4:ef:d3:c5:17:41:40:f6:82:dc:b7:21:c2:35:79:
64:50:ea:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 21:25:45 2025 by rpki-client