Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/sAOvn70c7LlMk0zHk-anSUVzjdY.roa
File: sAOvn70c7LlMk0zHk-anSUVzjdY.roa (raw, json)
Hash identifier: 1gmhjdxuxHU4L10OYX3Y1qJXRtyRrFUEpH8WVbfHew0=
Subject key identifier: B0:03:AF:9F:BD:1C:EC:B9:4C:93:4C:C7:93:E6:A7:49:45:73:8D:D6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 054A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sAOvn70c7LlMk0zHk-anSUVzjdY.roa
Signing time: Wed 14 May 2025 03:08:01 +0000
ROA not before: Wed 14 May 2025 03:08:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1354 (0x54a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 03:08:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B003AF9FBD1CECB94C934CC793E6A74945738DD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:6f:8b:20:ca:c8:71:87:e0:f2:3b:7a:5f:
7a:30:70:9e:58:2d:dd:77:17:db:1d:52:97:12:c4:
c9:78:7d:c5:07:78:d7:cb:52:9f:c6:ee:7f:d8:70:
d1:36:f8:29:b4:a1:62:66:b8:d6:9a:4d:90:34:31:
e0:6f:9d:8a:c9:2d:00:ff:64:d5:36:f8:54:ba:d6:
25:22:80:a8:f4:d5:6e:0b:d5:53:b1:4e:3e:0a:d2:
87:6f:d8:f6:1e:91:c7:dc:21:ae:a1:08:c8:02:76:
64:26:95:0a:a6:05:60:b6:07:55:a0:77:7f:6b:63:
a4:e5:7e:14:08:e9:c4:a5:70:4d:5d:be:ed:ce:ca:
34:d9:de:47:35:12:f4:b1:e9:5a:fa:80:9e:1e:bd:
40:73:30:f5:b8:e5:85:eb:0b:69:34:61:9a:85:00:
19:87:64:e9:8e:b3:eb:f2:35:13:4c:71:c4:67:ec:
03:3b:dc:df:54:a6:1b:05:3f:5f:06:be:77:90:20:
f2:a1:24:32:3f:78:d2:26:9a:70:f6:f6:55:dc:61:
66:14:4f:1b:b3:2d:d4:47:ec:a4:46:02:b2:fb:9d:
8d:f8:18:fc:18:63:12:52:ec:a1:27:d7:13:3d:77:
97:71:f8:fc:4d:28:2c:0b:96:70:94:37:7c:59:d8:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:03:AF:9F:BD:1C:EC:B9:4C:93:4C:C7:93:E6:A7:49:45:73:8D:D6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/sAOvn70c7LlMk0zHk-anSUVzjdY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:b1:87:dd:5a:0f:8e:06:a7:84:0d:79:46:ba:9a:5e:e2:f3:
e7:c5:0b:93:06:7f:90:e8:36:9a:e3:59:bf:af:c1:35:00:a9:
68:5c:da:1b:d5:27:f9:10:a6:a8:dd:18:0b:23:80:e1:5c:49:
1c:71:73:fe:c0:37:5e:a9:7f:32:9e:c0:84:e5:7f:81:dc:fc:
63:22:c9:b6:c1:01:4e:ad:30:00:69:0a:41:15:54:8a:a7:f2:
99:70:b4:79:64:66:7f:59:a1:db:aa:4a:de:32:de:aa:85:4c:
88:39:8d:dc:ee:2f:b5:7d:27:86:c5:9d:12:60:92:d7:8a:72:
b8:4a:d8:8d:76:88:b8:5e:ff:96:fc:5e:b9:d5:9f:02:39:40:
8e:c1:9b:76:ee:56:74:51:e0:d1:59:39:f7:43:90:58:1a:83:
ce:35:34:10:a4:86:70:8c:27:f1:b6:8f:96:fb:2e:8d:0c:40:
5b:8e:81:c0:77:45:cd:36:b5:48:9a:8f:7f:ee:d2:5e:34:40:
a4:a7:6e:d2:b9:b5:cb:59:3b:c3:f7:b4:ed:90:06:90:82:90:
a0:72:5a:48:81:3a:65:21:9a:89:41:57:14:e7:01:e4:02:b6:
57:65:1a:41:c5:ad:f9:fc:ef:4c:4f:9f:30:e3:2b:79:3c:ef:
f3:29:bf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 15:29:26 2025 by rpki-client