Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/lW7i6d4jkwzTSEaKt4yYeYk-uWs.roa
File: lW7i6d4jkwzTSEaKt4yYeYk-uWs.roa (raw, json)
Hash identifier: IDpPweZe72K65zuTY2bFJjn5OKEiI/rAa//Y1tw/a8M=
Subject key identifier: 95:6E:E2:E9:DE:23:93:0C:D3:48:46:8A:B7:8C:98:79:89:3E:B9:6B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1802
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lW7i6d4jkwzTSEaKt4yYeYk-uWs.roa
Signing time: Sun 08 Jun 2025 02:09:32 +0000
ROA not before: Sun 08 Jun 2025 02:09:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6146 (0x1802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 02:09:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=956EE2E9DE23930CD348468AB78C9879893EB96B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:0a:f5:c9:27:ba:27:94:d3:65:27:29:b9:
99:30:83:48:55:73:de:fe:51:df:f6:a2:1b:75:d9:
b9:d4:25:c9:c0:a7:ee:7d:a5:86:b8:36:66:95:f8:
11:5e:9e:7a:04:5e:ff:1a:06:2d:0b:ad:17:41:b8:
da:ad:84:ca:f1:7e:01:0d:ef:22:1a:ec:81:e2:04:
a0:4b:5d:26:87:d0:17:f7:81:f2:bb:d3:d9:06:c0:
e9:84:a7:0d:e9:4b:9e:54:d3:06:34:79:a9:31:9f:
12:b0:9e:c2:3b:ef:db:80:c8:38:bd:f2:34:4f:b3:
bc:96:c4:53:c7:5d:98:02:ef:2e:a9:68:26:8f:78:
ac:02:75:45:f9:52:36:75:fb:81:8c:96:8d:b8:26:
5a:7c:af:34:9e:7a:eb:d4:fa:6f:59:02:bb:90:90:
04:02:4e:84:42:99:70:0c:9c:b3:9c:3f:55:30:65:
36:15:5b:24:c2:cc:6d:3c:12:9f:aa:a4:95:29:3b:
ca:e7:83:f1:46:6f:1e:5c:1e:2f:95:86:c6:d1:65:
7f:f8:e9:07:29:63:57:02:9c:a7:82:b9:64:ea:e3:
c9:87:cd:dc:89:00:2b:b0:d6:a1:d7:57:89:b2:36:
d1:8e:40:ef:23:77:f4:a2:40:b4:01:86:fd:10:07:
7b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6E:E2:E9:DE:23:93:0C:D3:48:46:8A:B7:8C:98:79:89:3E:B9:6B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lW7i6d4jkwzTSEaKt4yYeYk-uWs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:df:c8:4d:ad:f2:6e:8e:f4:ac:c7:6b:03:63:15:50:9d:67:
d3:7f:f4:b1:97:43:7a:fd:0e:c6:e0:29:d8:08:ea:f8:a9:e9:
4c:48:fe:31:8a:4c:2c:a6:cf:e2:1e:21:9a:7c:97:b8:67:77:
a2:72:33:af:33:3b:35:87:00:66:f4:58:38:1b:9e:c3:f4:f4:
2c:f4:56:af:7e:3c:4a:9e:8f:d8:87:17:fa:b5:37:e0:09:ef:
4d:bf:d7:e6:17:6b:8f:97:cc:79:4e:5c:53:93:96:d9:98:dd:
f5:e5:3e:cb:9c:38:04:7c:78:77:78:7b:bf:c7:5d:ed:63:83:
82:0f:ba:b4:89:c5:9f:70:d9:4e:be:1c:44:d9:dd:e6:f3:fc:
fa:15:02:52:3e:8e:e5:01:9f:24:6b:f4:9d:e1:83:e2:3b:11:
bb:20:4a:6a:21:b7:14:3b:7e:ee:98:e6:c1:50:b9:35:c0:54:
01:a8:5a:a8:22:3e:0f:69:46:18:98:96:67:5f:27:c9:d6:10:
8a:6c:06:a1:9d:02:50:0e:be:c3:9d:af:4d:91:2a:25:fd:4a:
dd:d3:5b:06:68:c0:54:75:2e:cf:03:ea:a0:48:2a:3e:6c:e7:
e0:42:5d:e1:98:bd:14:99:03:b9:2c:e7:ad:65:3f:19:ad:0a:
2e:02:45:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 21:38:08 2025 by rpki-client