Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/lfUSm9p-CYt8EdQOhTsJBabiYzU.roa
File: lfUSm9p-CYt8EdQOhTsJBabiYzU.roa (raw, json)
Hash identifier: 5KXyAvdaii2SuQKdsglZaXqEKJpy/ZFGFSi8saMC8xs=
Subject key identifier: 95:F5:12:9B:DA:7E:09:8B:7C:11:D4:0E:85:3B:09:05:A6:E2:63:35
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0CA6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lfUSm9p-CYt8EdQOhTsJBabiYzU.roa
Signing time: Fri 23 May 2025 22:38:30 +0000
ROA not before: Fri 23 May 2025 22:38:30 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3238 (0xca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 22:38:30 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=95F5129BDA7E098B7C11D40E853B0905A6E26335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:3b:30:88:13:81:28:54:d4:fc:71:eb:36:
ca:4b:64:b2:00:9a:f4:6f:cc:2e:74:72:37:b3:16:
c3:11:40:6c:dd:e0:b3:f9:25:69:47:cf:d0:8a:c1:
66:ce:9d:fb:e9:29:b1:70:a6:b4:7d:cb:37:bf:66:
90:05:cc:1e:14:bf:13:f5:6e:ba:bf:6f:97:07:17:
ce:8f:a7:ca:d1:f0:e2:f9:c5:16:61:bb:47:9a:ca:
4b:45:48:e0:18:bc:45:9d:7c:8a:cf:9d:96:c2:b9:
43:79:54:ab:ab:88:ed:59:63:c8:ce:3c:85:94:0c:
cd:84:99:09:ed:ca:10:84:98:07:4d:b5:4a:70:8a:
d5:3e:8f:21:96:ce:2a:6f:a9:53:75:01:70:6d:d3:
81:95:79:9a:f6:7a:e8:41:a6:53:be:92:81:62:74:
02:2d:60:f4:98:29:12:74:e4:dd:e0:8c:a0:99:ab:
ed:8d:4e:73:ce:6f:33:ee:e3:66:da:e2:d8:1d:46:
bf:8a:3b:f8:f5:d7:a9:d1:5c:10:e6:fe:d4:6d:b7:
be:34:4c:41:dc:d2:c7:ac:0a:3c:e4:24:75:fe:ff:
88:0d:5d:9f:c4:9f:0f:8f:d3:d0:58:b9:28:49:5d:
df:6d:a9:12:af:ef:6a:dd:08:b6:04:44:27:2d:f1:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F5:12:9B:DA:7E:09:8B:7C:11:D4:0E:85:3B:09:05:A6:E2:63:35
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lfUSm9p-CYt8EdQOhTsJBabiYzU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:e0:7d:42:e3:23:ac:d7:43:64:70:99:d3:32:55:30:81:fd:
57:46:e0:2a:82:a2:50:32:4d:d9:c6:27:a0:f4:f2:5c:90:e0:
0f:7e:7a:59:c9:9c:df:47:97:7e:b8:0f:7b:2e:f7:d1:33:db:
b3:ea:c8:48:7c:ff:55:d0:4b:47:f5:b5:71:8e:38:d7:28:63:
26:97:c0:4b:c8:aa:22:9c:79:21:07:c8:39:db:5a:97:20:5c:
6d:df:8c:14:64:f0:f7:73:c7:1a:b9:27:85:f1:6e:3d:48:4d:
09:67:82:1d:9e:1b:9d:58:2b:cc:5e:98:a2:64:00:53:bc:f4:
46:69:33:d0:0d:f2:ed:fd:8b:90:e3:24:71:4d:d2:5b:ae:1d:
0f:6f:08:ad:34:24:5b:ca:4e:ed:d3:ce:8b:96:8d:9e:58:aa:
7e:57:45:b7:ab:82:9d:b5:ea:82:98:ff:ad:0f:52:e5:33:75:
3a:a6:4a:3c:89:0c:f1:2c:0e:d4:6c:e0:6d:27:b9:98:2c:8e:
95:0c:d9:6a:85:92:0a:84:7c:1b:a7:29:67:7e:67:e4:33:c3:
60:f6:26:61:f5:c2:4a:a2:51:15:23:f3:51:32:26:ee:09:f2:
5d:e8:97:fd:09:5a:19:96:98:81:7b:43:4a:32:09:62:41:be:
37:98:cb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 22:01:19 2025 by rpki-client