Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/s0uIqsr30yfrArJprmZhyPH0NAs.roa
File: s0uIqsr30yfrArJprmZhyPH0NAs.roa (raw, json)
Hash identifier: sGewCR9YgRKLRr7f6jfU/bsbTkEvBL9GZfYzLRP7v7U=
Subject key identifier: B3:4B:88:AA:CA:F7:D3:27:EB:02:B2:69:AE:66:61:C8:F1:F4:34:0B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1246
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/s0uIqsr30yfrArJprmZhyPH0NAs.roa
Signing time: Sat 31 May 2025 10:39:06 +0000
ROA not before: Sat 31 May 2025 10:39:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4678 (0x1246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 31 10:39:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B34B88AACAF7D327EB02B269AE6661C8F1F4340B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dd:ce:6e:3e:fd:0e:16:af:1c:78:27:e4:d3:
92:27:4b:ee:b9:5b:9a:2a:81:39:20:c7:89:f8:8d:
eb:d7:38:be:f5:69:4d:c7:55:89:be:8b:f4:f5:fb:
dd:f3:8e:7c:88:44:d7:ca:83:d3:e4:a8:d0:d8:a1:
92:6b:33:9f:d1:a3:ac:ea:7f:7d:3b:8d:13:3f:13:
99:8b:0d:5d:28:2f:d6:fe:2a:fb:27:15:44:19:3e:
62:34:e0:39:23:8e:03:b7:89:a2:6b:50:1c:78:2b:
0d:59:8b:99:13:4c:9b:bf:e9:31:17:c0:02:c6:d2:
bd:29:dd:5e:b0:2f:7f:2a:39:9b:e6:09:79:86:c7:
5c:2b:bf:0b:d9:8e:b3:c6:98:70:f9:78:35:e5:d4:
65:9a:19:73:5f:59:b8:1b:2a:5f:bf:44:c8:26:b5:
ab:65:a0:a2:f9:22:4a:a4:91:ca:7a:a5:a4:75:a0:
f7:07:a4:f6:a4:24:d4:e9:28:62:af:59:94:b7:d3:
3a:3d:ad:2c:d0:0d:ff:83:e6:75:d7:c1:82:dc:41:
05:45:4f:ac:5c:7e:30:f7:2f:f5:26:f2:83:74:39:
08:50:92:78:a8:50:12:d4:bc:c0:b2:cf:94:59:84:
02:de:d4:82:2f:79:a9:db:5e:44:67:09:7a:5d:9d:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4B:88:AA:CA:F7:D3:27:EB:02:B2:69:AE:66:61:C8:F1:F4:34:0B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/s0uIqsr30yfrArJprmZhyPH0NAs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:f0:a5:a7:34:de:46:9c:50:01:ed:10:e0:ad:ad:3d:b0:01:
33:23:96:6c:87:bd:85:dc:fc:55:8c:0c:d0:47:aa:86:37:92:
f5:6b:e3:20:4f:44:54:f5:d9:d1:ea:00:29:3e:36:ef:a2:63:
b6:4b:2e:83:b4:e5:40:45:a3:26:e3:67:e0:61:73:f6:3b:6e:
41:9f:15:ac:33:8d:0d:b2:e3:0c:2b:41:f6:14:c8:44:86:a3:
31:86:7f:af:a6:f6:2f:63:77:e8:2e:aa:79:49:95:e1:bf:ad:
40:4a:12:a0:9c:23:ed:4d:dd:f4:0c:b8:9b:4d:a6:c4:4a:b1:
6d:9f:86:bc:4b:81:db:e8:07:f5:d4:21:79:c9:b3:b6:33:14:
fb:df:c2:1b:02:fa:81:04:4c:a8:3f:66:c5:f4:f9:af:63:4c:
a6:fa:73:5c:60:33:6f:bc:46:6c:d1:a8:ce:15:a2:d8:7b:bd:
30:f5:c7:c5:2b:5b:ce:9e:32:6b:e8:01:64:ac:d5:84:46:61:
6c:f5:34:f5:e4:96:5d:d2:c1:db:40:e3:25:6f:ca:ed:55:4b:
3e:de:b6:16:75:69:0f:ab:3a:43:7f:eb:e9:c0:65:46:88:f1:
89:f7:da:7a:b4:ae:ba:c9:0f:63:dd:96:c3:a2:f1:cf:ed:d1:
0d:82:ad:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 00:58:38 2025 by rpki-client