Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/kEtRcSamq80N921E9wZEgX4DeFQ.roa
File: kEtRcSamq80N921E9wZEgX4DeFQ.roa (raw, json)
Hash identifier: hV3kukdbAmqV+XCi7s74+KkQhcp6Bzc2fHjA0Zi26tQ=
Subject key identifier: 90:4B:51:71:26:A6:AB:CD:0D:F7:6D:44:F7:06:44:81:7E:03:78:54
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1762
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kEtRcSamq80N921E9wZEgX4DeFQ.roa
Signing time: Sat 07 Jun 2025 06:09:29 +0000
ROA not before: Sat 07 Jun 2025 06:09:29 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5986 (0x1762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 06:09:29 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=904B517126A6ABCD0DF76D44F70644817E037854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:12:0f:43:ac:c8:ce:89:c1:73:46:04:03:
0e:49:43:f0:4b:50:c7:18:9c:c7:c7:2a:3d:8d:3c:
10:0f:28:dc:3b:6c:42:57:5f:65:d5:19:06:73:6a:
7f:89:db:e2:3e:48:8a:9c:8b:d2:4b:13:1b:66:22:
88:5a:6e:ba:a9:0f:3e:d4:0b:d5:f2:8f:02:b2:3a:
8a:ce:ff:26:e7:e8:90:69:a1:ca:33:36:0a:78:fc:
3c:7d:c4:75:dd:ec:90:27:cb:dd:a2:0c:26:52:bc:
41:d3:50:e2:cd:0a:bd:10:a4:9c:17:1f:d0:99:9b:
aa:53:f1:c1:5d:b0:e0:92:35:83:ed:80:4b:3f:fb:
06:74:ed:05:23:28:fa:6d:ee:b4:b7:38:04:76:22:
0d:1b:34:5e:6a:02:d2:12:4b:94:51:b7:d0:b3:05:
70:80:a8:43:97:47:8f:6f:f5:d9:8d:e8:df:0d:75:
50:f3:03:74:ed:17:f3:22:8f:61:bd:e2:f7:e1:48:
5f:5d:e8:66:c7:b8:c1:4c:d2:24:aa:86:c6:41:b0:
d2:e0:8d:e0:10:12:e1:38:9f:df:89:e0:c1:e7:75:
a6:fb:9b:2d:62:7d:b9:e7:cd:69:9e:de:45:a8:34:
21:f6:37:63:d3:f9:7e:4f:2c:e9:76:6d:fb:4b:e3:
e4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4B:51:71:26:A6:AB:CD:0D:F7:6D:44:F7:06:44:81:7E:03:78:54
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kEtRcSamq80N921E9wZEgX4DeFQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:9e:fe:6d:75:f8:e0:5f:78:43:d8:e6:47:45:4c:a7:46:bf:
90:ec:d8:cd:3c:66:ee:b5:e5:e1:5c:a5:67:1b:33:19:b3:3a:
be:71:7e:9d:4e:f0:db:ed:aa:2d:2e:44:6e:19:ef:78:b5:15:
e8:c9:62:ba:ec:fc:f8:f1:a1:39:bc:1d:10:0a:ce:34:bd:42:
b7:e9:c5:88:0a:3c:46:00:d7:5b:7f:31:8f:9c:d3:0f:be:ae:
76:a3:ac:c4:de:e4:78:14:28:41:7d:61:39:fd:c9:96:fd:91:
7b:85:76:4d:3b:86:ca:84:5d:aa:dc:a6:89:53:1b:55:bf:af:
8d:c5:57:cf:ae:63:cc:af:ed:9d:54:db:ab:fd:b3:71:b8:20:
89:7f:52:f6:67:5d:f6:80:a4:33:72:a2:d8:4e:35:7f:c0:2e:
47:a8:bb:b0:97:2c:a1:1a:ca:40:f0:42:c8:ff:56:42:16:2a:
0f:e5:87:b3:77:9c:66:29:e5:44:ec:65:4c:d8:73:9a:14:a7:
a1:ed:80:3c:35:55:46:d7:1a:3f:d5:dc:b2:22:98:d4:40:03:
7a:f0:58:ae:0c:67:77:fd:b6:a6:b1:ff:61:f9:08:9d:98:b3:
b4:e8:74:23:6e:d4:da:71:42:c2:97:38:7b:84:c1:b5:27:70:
15:17:d5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 11:09:22 2025 by rpki-client