Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/oVDS-Oz7tupAhGy46gdLjkWsOOE.roa
File: oVDS-Oz7tupAhGy46gdLjkWsOOE.roa (raw, json)
Hash identifier: 3BPeD/LOiZANH/HrDB9taJbwLLvAmr5xdyaq6UjHIH8=
Subject key identifier: A1:50:D2:F8:EC:FB:B6:EA:40:84:6C:B8:EA:07:4B:8E:45:AC:38:E1
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 13CE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oVDS-Oz7tupAhGy46gdLjkWsOOE.roa
Signing time: Mon 02 Jun 2025 11:39:13 +0000
ROA not before: Mon 02 Jun 2025 11:39:13 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5070 (0x13ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 2 11:39:13 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A150D2F8ECFBB6EA40846CB8EA074B8E45AC38E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:89:0f:03:e3:32:52:54:ef:46:46:77:ad:80:
bb:3e:bb:3f:3e:c0:ea:65:73:ce:b6:6d:e1:c8:d0:
4b:6e:3c:6a:6c:b6:2d:f6:9f:e3:a5:16:42:5f:b4:
2f:15:ab:cc:82:d7:47:c5:26:f1:aa:78:10:51:38:
ab:d1:a5:6a:b2:e6:d0:95:0e:24:40:99:56:3a:53:
41:f2:34:a0:c7:d0:76:c6:63:08:b8:c9:2f:77:04:
4a:98:47:b7:db:40:e2:3d:b2:8a:cc:f0:01:17:a3:
9f:a4:e2:26:03:4a:07:95:1d:b9:88:39:a4:1e:69:
ac:60:6c:62:8f:f6:5a:97:b2:e5:c8:14:61:3c:f1:
e4:de:24:ca:5a:fc:7c:63:e5:e7:72:aa:25:64:79:
b4:aa:18:46:3f:1d:1d:56:57:8e:d6:4e:e1:ec:f2:
18:71:f8:2b:8f:d8:f1:1f:6f:6b:1b:7d:25:49:94:
fa:fb:2b:83:c3:0f:44:5a:b0:13:40:83:ca:a1:86:
c7:0c:a0:95:4f:b9:1c:c3:5d:44:5b:eb:3a:c3:4d:
1d:fa:49:2c:1b:75:ca:2e:6a:e8:e4:74:60:ab:3c:
d1:8d:f5:70:89:05:95:45:ca:d6:85:7c:77:b2:36:
48:b2:4f:2e:ac:34:d8:1d:24:e6:d5:24:d1:5e:9c:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:50:D2:F8:EC:FB:B6:EA:40:84:6C:B8:EA:07:4B:8E:45:AC:38:E1
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oVDS-Oz7tupAhGy46gdLjkWsOOE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:13:67:31:b4:e4:23:b4:90:d5:4d:90:56:f8:8c:a9:47:59:
af:c5:0b:f9:5d:3f:4e:6e:63:36:cb:27:93:0f:48:27:9c:3f:
c9:e5:34:d9:29:c0:82:7c:e6:c7:88:97:a2:e2:45:3e:7a:2d:
75:3a:50:8c:6a:39:b4:0d:29:c0:8a:88:58:ce:52:ed:45:47:
6a:37:cf:a8:65:c4:15:8c:56:57:5f:52:19:09:2b:da:72:3c:
bc:16:c8:4e:58:14:1d:b4:4d:32:aa:96:30:f9:5f:9c:79:9e:
dd:ea:72:1f:dc:e2:a6:49:7b:2c:f8:91:76:01:2f:6d:76:d1:
a8:c5:1d:68:68:fc:b5:dc:3e:f5:f1:be:ba:db:16:bb:ca:82:
52:f2:4b:fb:e1:34:8f:99:c9:7f:23:d1:d7:6b:c9:73:db:0a:
e3:bd:87:79:e4:79:e4:bf:86:05:df:14:3c:df:97:b2:cb:ef:
74:6c:3b:7e:f4:63:d7:bd:53:a9:98:b2:e5:1f:be:42:a3:7e:
83:cc:fc:5f:bc:5a:cd:53:92:72:9b:02:26:60:68:67:bb:ba:
79:83:a3:88:b0:04:32:9b:ab:21:bb:0e:d3:f7:9f:e4:f7:bb:
8a:1e:71:a6:7a:d3:92:2e:c7:c4:ad:75:f8:e8:8b:22:af:c9:
c7:3a:f7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:54:32 2025 by rpki-client