Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/kI0FLnf_3vi6tMHuDAKWeEELMCs.roa
File: kI0FLnf_3vi6tMHuDAKWeEELMCs.roa (raw, json)
Hash identifier: tiY7IdSLgsVeAIWgR9AUgWoxXOZefHxzcGILQtqrGpU=
Subject key identifier: 90:8D:05:2E:77:FF:DE:F8:BA:B4:C1:EE:0C:02:96:78:41:0B:30:2B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04F2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kI0FLnf_3vi6tMHuDAKWeEELMCs.roa
Signing time: Tue 13 May 2025 16:08:03 +0000
ROA not before: Tue 13 May 2025 16:08:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1266 (0x4f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 16:08:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=908D052E77FFDEF8BAB4C1EE0C029678410B302B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:36:ac:fe:9a:c7:37:89:0c:34:b1:98:e6:
26:39:07:11:a2:34:77:cb:ba:bb:be:99:50:c0:8d:
30:5e:1d:d4:39:92:7b:d5:c8:c2:25:1e:a9:29:de:
c6:58:dc:c0:35:1a:9a:45:2d:2c:a4:87:a7:3b:09:
3d:4d:ae:01:00:92:9c:9f:06:ed:fe:8d:21:5c:06:
b9:04:3a:6f:99:be:b9:50:23:9b:fa:be:61:60:9d:
e5:66:d1:32:a9:95:5e:b1:ff:b2:58:c8:ec:2a:53:
5f:75:04:27:13:e5:4a:ca:76:27:05:b6:36:fb:bd:
39:6c:d2:d9:c0:8d:33:b7:f4:f3:84:ef:c8:12:cf:
2e:d8:58:d6:3d:b5:71:39:07:f8:f1:bf:16:58:b5:
66:8d:6f:2a:ab:95:b4:4a:8f:73:2a:78:b7:7a:36:
5c:d4:66:d7:97:f1:24:7f:61:a4:5b:7e:37:37:36:
c1:6e:55:ff:6f:56:54:da:7a:bb:c8:0a:f0:f5:9b:
d8:5d:23:82:c7:cb:6c:4e:75:0c:8a:d5:91:41:f1:
61:31:68:82:82:0e:48:79:a3:a6:12:03:89:83:aa:
81:13:eb:69:e9:3e:28:06:c8:ef:a7:5b:c4:a2:d9:
a1:bf:a3:85:54:cd:74:b2:7d:db:f7:3b:54:19:93:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8D:05:2E:77:FF:DE:F8:BA:B4:C1:EE:0C:02:96:78:41:0B:30:2B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kI0FLnf_3vi6tMHuDAKWeEELMCs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:d4:e2:ca:c5:d6:a5:9d:6a:10:d2:f3:41:c6:29:38:38:f9:
ce:ee:ee:ca:b3:ce:23:b5:7e:f6:85:8b:51:b0:1d:a5:a8:e4:
1f:7a:45:97:e3:74:79:57:ac:1d:72:40:12:9a:dc:9d:b7:e4:
7e:b8:4e:a3:5b:98:98:ac:ca:d7:78:3e:90:59:3f:20:22:b6:
08:7f:76:59:54:9f:d8:bf:59:6c:52:76:f8:83:0f:78:35:59:
d6:85:39:f5:47:80:41:c3:10:04:99:c2:2c:5d:5b:c1:c8:f6:
d5:48:b5:f7:1f:84:65:3d:be:64:53:f0:fa:89:84:14:4b:47:
95:d9:4d:f7:fd:9e:7e:8b:29:f4:e8:fc:00:b2:c7:ab:c7:de:
86:7c:0b:cf:8e:c1:95:90:dc:bc:ba:16:0a:16:5a:bc:86:6a:
ad:37:e4:13:cf:7e:aa:2f:f8:71:7e:36:6a:87:28:82:75:35:
6f:0f:3c:17:f6:8f:51:1f:59:46:74:17:35:64:00:e3:dc:44:
e2:ec:c9:07:02:8f:5d:4e:42:eb:21:ce:1f:a1:d1:01:77:2d:
41:26:91:0e:e7:a9:e5:64:b8:34:c7:71:6e:98:75:e7:b2:f3:
e7:e6:e0:0a:c8:40:e2:c4:37:77:34:4d:be:f4:d8:cf:c7:42:
60:8b:68:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 22:37:34 2025 by rpki-client