Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mzSXDOAz5OwdC_h8jQinXcueeI0.roa
File: mzSXDOAz5OwdC_h8jQinXcueeI0.roa (raw, json)
Hash identifier: RAdslOZK8hcUgPmQX2SBg+qS17eKiqPsGvcrCxa6bps=
Subject key identifier: 9B:34:97:0C:E0:33:E4:EC:1D:0B:F8:7C:8D:08:A7:5D:CB:9E:78:8D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D56
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mzSXDOAz5OwdC_h8jQinXcueeI0.roa
Signing time: Sat 24 May 2025 20:38:50 +0000
ROA not before: Sat 24 May 2025 20:38:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3414 (0xd56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 20:38:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9B34970CE033E4EC1D0BF87C8D08A75DCB9E788D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d1:e3:53:f3:51:01:b4:bc:17:bc:82:92:d4:
75:09:5c:19:4f:9d:fe:f5:1a:72:75:50:f1:f3:0a:
a7:51:c8:0f:ec:73:b7:f6:95:44:4e:3a:59:e3:7f:
bc:d3:c9:c1:64:fe:31:e6:53:e2:d6:0a:ff:33:f4:
55:d8:3b:16:4a:b1:72:03:77:5d:d4:ef:b0:ba:c4:
bf:82:d6:8f:99:ba:49:0b:c0:0a:26:d9:ef:ec:ec:
58:aa:6a:70:22:31:a6:7a:b5:8e:94:cd:65:b0:ad:
1e:54:4a:86:b1:82:ca:81:78:3a:28:f6:6b:f7:58:
ec:8c:54:f5:7a:d0:58:ae:f7:3e:51:df:80:c6:28:
dd:4a:30:a8:ee:95:0f:2b:59:a6:8d:81:69:df:0f:
d9:b3:85:4b:48:9f:25:85:dc:bb:51:20:3f:c1:71:
bb:bc:af:b9:cf:29:4d:e4:19:38:9f:77:53:25:ab:
d8:b9:41:d0:e2:dc:73:78:50:25:e6:79:a2:13:48:
b8:dd:cd:94:ee:6b:f2:7a:3a:01:19:11:d8:37:91:
aa:a6:7e:90:fa:46:db:fb:cd:90:a7:2f:d7:73:f5:
cb:49:f5:1b:c8:56:5b:77:aa:ad:d6:fa:eb:da:bd:
28:c0:d8:90:3a:0d:d6:fa:5a:14:c6:f0:a5:28:e3:
9a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:34:97:0C:E0:33:E4:EC:1D:0B:F8:7C:8D:08:A7:5D:CB:9E:78:8D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mzSXDOAz5OwdC_h8jQinXcueeI0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:d6:e0:98:b6:97:0e:18:51:02:cb:dc:0f:61:3f:96:c0:a1:
b9:41:8b:cd:19:9b:0d:e7:9f:2e:7f:53:a8:57:26:91:bf:cc:
1e:3a:ce:43:c7:bc:51:d2:11:24:2f:b9:bb:b0:25:72:4c:1e:
b4:f8:93:c8:27:7f:98:00:a7:6b:e9:ce:29:c7:53:09:69:3a:
a9:87:82:c4:68:54:14:e2:a5:80:7d:3c:7d:6f:52:3d:f9:19:
8f:c1:c5:f3:f6:1c:33:b6:6f:31:24:f3:ca:73:ef:a7:dd:7f:
85:b9:12:6f:de:2f:0f:43:a4:7b:12:8d:c5:38:5b:6a:c7:2c:
aa:f2:61:6d:ae:73:c8:58:1c:e7:77:5c:ff:b6:e9:b7:63:15:
92:59:a3:6c:e7:48:9f:38:2c:62:bd:9b:ce:94:c8:35:fe:f3:
2c:7c:fb:10:93:ef:e8:b9:a3:07:3a:31:f6:9f:e8:07:e1:de:
0d:31:b0:74:fa:80:31:9d:e7:33:c5:bc:6b:5b:00:7f:f6:08:
7d:4b:28:12:2b:33:ad:de:3b:dc:94:95:87:af:07:5b:88:35:
e6:09:fd:13:70:0c:b1:ea:7f:27:6a:a5:68:31:18:94:0f:d4:
2b:31:71:be:7d:21:fa:f7:8b:d2:14:dd:b1:09:c6:76:c9:07:
8c:34:df:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 10:20:42 2025 by rpki-client