Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/uZxJ5aUZcIGxTjG4TNxpw_UynFM.roa
File: uZxJ5aUZcIGxTjG4TNxpw_UynFM.roa (raw, json)
Hash identifier: h5SiOx5vvN08uALHReJKxa3PVeX+5JSjrNDDNr5FP+w=
Subject key identifier: B9:9C:49:E5:A5:19:70:81:B1:4E:31:B8:4C:DC:69:C3:F5:32:9C:53
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1472
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uZxJ5aUZcIGxTjG4TNxpw_UynFM.roa
Signing time: Tue 03 Jun 2025 08:09:16 +0000
ROA not before: Tue 03 Jun 2025 08:09:16 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5234 (0x1472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 08:09:16 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B99C49E5A5197081B14E31B84CDC69C3F5329C53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c5:8f:bf:8c:6a:ba:f9:89:4b:9a:40:db:fd:
b9:50:3a:30:d3:6c:77:f9:97:a6:ea:63:14:93:f4:
d1:1d:44:32:ea:76:51:9c:f6:a9:db:b5:2b:c6:0b:
ac:61:c9:2f:11:18:1d:e4:80:55:76:2b:b6:f5:76:
cb:22:9b:81:a1:a0:18:f0:78:3f:97:17:6a:2f:8c:
ae:ff:ae:ff:46:4f:6d:dd:de:e0:8b:cf:55:49:20:
46:3e:0d:e4:b1:bd:89:ff:85:be:19:70:87:9a:6b:
8d:90:af:fc:1c:5b:b2:4b:b1:f0:e4:97:69:c6:40:
5f:39:75:4f:52:aa:61:02:e1:ac:42:dd:01:e6:be:
64:d0:f0:a5:f1:a1:ee:a6:64:77:a3:14:da:21:2a:
a0:4b:a3:73:82:20:5a:ff:93:2b:f8:59:b5:77:10:
b9:4b:6a:ac:56:28:c9:f5:ba:ed:90:5c:fd:13:9e:
23:10:de:bc:2e:3a:65:0e:3e:46:c0:10:6e:15:92:
8a:09:14:9e:9d:ee:52:c1:d9:bb:e0:75:39:e8:a1:
f8:ee:1c:e0:d8:33:9e:c4:6d:23:d3:ac:f2:87:40:
29:27:99:52:af:20:b0:ac:26:43:01:20:f9:21:66:
d3:45:d6:47:77:cd:81:76:2b:d5:d5:0d:cc:e3:b2:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9C:49:E5:A5:19:70:81:B1:4E:31:B8:4C:DC:69:C3:F5:32:9C:53
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/uZxJ5aUZcIGxTjG4TNxpw_UynFM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:b6:83:3c:88:c2:1e:ca:aa:c0:55:bb:60:1f:fb:c8:a2:04:
39:6f:6d:6b:01:b4:99:6e:cd:62:27:c1:a7:90:7e:0e:ef:41:
ff:9a:7f:c0:a3:60:b9:33:36:4e:5b:3b:ea:cd:5b:3e:4d:f2:
66:a0:12:1b:ff:29:9b:79:c9:f6:2a:b0:90:d8:d4:8e:9d:c7:
25:00:ba:32:49:05:e6:cf:d3:03:e9:44:2a:b2:08:5e:c6:ae:
b3:f2:b9:20:1e:d4:84:9c:64:69:c4:b7:9d:42:e1:1d:24:49:
85:68:29:7c:f3:4b:3c:67:89:e0:47:52:f2:05:5b:6e:c0:ef:
bc:c4:1d:54:6d:81:fb:21:d0:a5:ce:5e:67:b3:e4:ab:aa:14:
3c:d0:99:c5:5a:85:0c:94:21:7e:17:09:b8:70:a6:a2:f3:0d:
6e:0c:08:d3:ae:ad:57:07:2e:0e:fd:c9:75:24:63:04:b4:eb:
08:65:9a:d5:cc:17:9a:f7:ff:65:78:97:6b:0a:c1:b7:49:10:
3f:aa:29:3e:e6:62:0d:b2:d6:f9:47:35:e7:db:5a:f5:44:dd:
2e:ed:13:04:98:84:2a:7e:15:bc:32:c6:84:bb:df:3f:db:b7:
00:b0:b9:30:d9:2c:bd:17:f9:39:ac:38:2f:72:ba:55:de:f4:
df:a7:cb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:28:24 2025 by rpki-client