Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/js_H9-QyA2hznkNZD1_CKeJcGE8.roa
File: js_H9-QyA2hznkNZD1_CKeJcGE8.roa (raw, json)
Hash identifier: OhvLu+8oecHIkkNy1w8DvglxQx56dYWxtf5qpmUPDGw=
Subject key identifier: 8E:CF:C7:F7:E4:32:03:68:73:9E:43:59:0F:5F:C2:29:E2:5C:18:4F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 144A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/js_H9-QyA2hznkNZD1_CKeJcGE8.roa
Signing time: Tue 03 Jun 2025 03:09:16 +0000
ROA not before: Tue 03 Jun 2025 03:09:16 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5194 (0x144a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 03:09:16 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8ECFC7F7E4320368739E43590F5FC229E25C184F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:13:d0:87:ec:c0:ba:0e:b5:ca:59:2b:08:
87:70:4a:ce:29:51:76:bf:bb:84:13:02:de:78:6b:
4d:9c:c8:c4:71:a9:24:ae:bc:d7:b5:ca:29:ff:05:
a8:83:f0:53:f7:83:6a:df:db:08:75:5e:16:7c:f7:
fc:92:ae:02:ea:6d:c9:3f:49:4f:41:a0:75:ba:6e:
4c:af:40:43:62:97:32:9d:af:e2:54:f1:95:5e:76:
f5:0a:eb:c5:93:d8:bc:2d:7f:17:b5:11:da:69:8f:
11:86:64:6b:af:76:9b:dd:70:d3:35:b9:ff:43:56:
67:e7:02:b4:49:1f:27:80:31:53:d0:ef:69:b8:0b:
19:80:85:c9:3b:f1:d5:d7:3c:84:0a:f7:55:37:9a:
3c:a1:3d:a8:4d:a6:28:2c:c7:6b:01:b9:fa:65:c0:
71:48:ee:5a:6e:f7:9f:de:62:37:71:f3:fd:2a:d8:
73:6e:c3:84:a8:2f:50:00:de:6a:1a:ca:18:e4:e7:
34:15:3f:78:0a:59:16:39:ea:df:79:6c:b1:24:a0:
bd:ee:ae:22:33:49:56:b1:a3:e0:a6:6c:1e:fa:67:
3a:b1:c6:8a:85:29:0f:a2:63:73:5f:87:db:00:40:
87:4a:8a:4f:a0:93:c7:5b:8c:fe:52:bc:8f:90:eb:
2f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CF:C7:F7:E4:32:03:68:73:9E:43:59:0F:5F:C2:29:E2:5C:18:4F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/js_H9-QyA2hznkNZD1_CKeJcGE8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:18:07:dd:19:56:10:0c:32:55:45:31:69:74:07:7f:ad:17:
07:a4:ea:3d:a7:bd:7e:b2:84:b3:05:93:3d:8c:6c:d3:36:f2:
cb:e3:d1:b3:4c:a8:1e:f9:88:16:ee:ab:3f:b0:1d:6f:53:7b:
47:9d:79:59:a9:a7:45:5e:63:ce:10:9c:f2:20:97:9b:09:87:
94:d8:e6:5b:ee:98:ed:1e:2c:86:5a:fc:a3:11:4e:7b:43:fd:
33:a0:72:cd:d0:13:ce:1a:b1:6b:de:08:04:37:31:25:ed:a8:
ae:46:ac:f4:ed:76:af:c1:74:94:5f:ba:89:e9:d4:c6:2c:e1:
33:b9:4b:aa:6b:4f:86:df:68:e1:ad:90:7d:e9:62:b9:e1:4b:
92:91:4f:a2:37:ca:c8:f1:3a:74:ed:58:68:9d:17:0f:cc:32:
91:69:61:c9:fd:55:aa:0d:a1:19:33:42:43:52:78:5b:7b:6e:
bd:d7:ba:39:f9:13:e3:f7:c4:ed:53:bb:ab:99:94:ad:2e:f0:
99:84:b6:2d:5a:41:13:8d:07:38:46:a6:c4:2a:3b:f9:52:6a:
24:e8:f2:12:70:ce:b2:02:5a:1b:43:4a:db:17:0f:fd:c7:f6:
30:43:4d:68:af:ee:d4:51:40:73:28:cc:55:8f:1d:37:01:bb:
e4:97:64:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:52:36 2025 by rpki-client