Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vCWWc42Uic53Y0HmEDv1sb0pNQc.roa
File: vCWWc42Uic53Y0HmEDv1sb0pNQc.roa (raw, json)
Hash identifier: /i545sVfmfxAY2Ag1BH+DkVbGS4X7V4YKghRqSJsx1Y=
Subject key identifier: BC:25:96:73:8D:94:89:CE:77:63:41:E6:10:3B:F5:B1:BD:29:35:07
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 189A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vCWWc42Uic53Y0HmEDv1sb0pNQc.roa
Signing time: Sun 08 Jun 2025 21:09:34 +0000
ROA not before: Sun 08 Jun 2025 21:09:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6298 (0x189a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 21:09:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BC2596738D9489CE776341E6103BF5B1BD293507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:f8:58:66:1e:36:50:ed:84:c9:a8:f7:60:
20:d9:55:ae:6c:11:10:8e:dc:ce:4c:c1:9e:c4:f9:
6c:00:bb:e6:cc:bd:9a:d1:2b:aa:bf:27:af:ce:ce:
49:72:15:40:fb:01:47:8a:9a:d4:a8:fa:8b:2f:72:
09:17:e2:6a:eb:06:13:4d:59:7f:15:02:23:81:ed:
66:db:ba:3d:8d:b0:fd:0e:89:79:2b:46:80:42:a8:
0f:bc:46:73:3b:27:90:aa:a7:fd:a2:9d:9b:cf:10:
4b:f5:cc:d3:67:c6:22:fb:ed:d8:ce:18:a2:b6:8a:
c2:08:b7:83:b3:56:95:c8:35:8a:9c:8d:88:bc:e8:
29:65:04:aa:f8:c9:7d:72:2f:5c:f1:ce:d7:b1:9c:
c5:73:d4:ee:4d:5d:e8:e8:18:a4:48:08:26:a1:cd:
ea:51:dd:49:bd:1a:48:b4:97:13:0c:94:6b:3d:90:
2e:7c:ac:cc:11:15:1c:98:17:d0:bc:9f:88:1d:74:
b6:b5:f5:46:68:47:0a:1c:a6:de:be:4d:0e:fd:9a:
01:cb:7f:ee:da:3a:46:fe:90:47:89:e3:7c:69:81:
ce:34:e7:07:6b:b6:22:50:da:ad:8a:51:5c:31:ef:
ec:7d:46:79:97:b0:64:6e:21:bb:4e:c2:58:64:22:
0f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:25:96:73:8D:94:89:CE:77:63:41:E6:10:3B:F5:B1:BD:29:35:07
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vCWWc42Uic53Y0HmEDv1sb0pNQc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:98:33:85:34:31:1f:d8:db:5c:2c:0b:65:a8:c7:e1:9b:e3:
12:58:7d:b6:19:42:15:82:7e:c0:a4:5e:b6:8c:19:74:3f:a5:
1b:d4:ad:2e:37:93:68:a1:3d:b6:d5:ff:a0:1d:56:ef:fb:60:
40:01:9e:42:0f:f2:7b:82:eb:ab:73:36:c4:5e:b9:27:6c:7b:
af:7c:a0:bd:bb:8d:d5:38:63:a9:bc:82:53:f9:e5:29:f1:39:
ce:a2:06:ab:00:33:e6:eb:c9:06:10:4d:ca:83:dc:0d:de:cc:
32:b5:92:37:93:e1:22:fb:43:cb:8b:c6:00:74:a8:a9:64:b1:
80:66:02:ae:f3:94:bc:1e:f7:c5:c7:70:89:eb:b6:fd:65:2b:
f6:4d:cb:ea:a9:de:67:20:4f:92:7c:40:2e:55:2f:17:c0:d3:
9f:d2:ba:06:12:7e:84:2c:2b:32:07:70:5b:8e:67:d6:1e:e4:
f7:e7:94:6c:10:5d:60:fd:ac:c5:0a:35:77:a2:1b:dc:b9:2f:
3d:e6:d7:e9:c9:4e:cf:fa:77:a2:fa:e2:47:f6:3c:6b:af:c3:
93:8d:0b:bc:da:91:cb:7d:db:ce:da:9f:c3:1b:69:66:00:d3:
58:5d:b4:aa:ef:4b:de:0c:41:f6:a4:b8:65:0d:4d:e8:0f:58:
17:50:a8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 15:09:42 2025 by rpki-client