Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vaqVrisoP-oP3UWYJXID9PPapAg.roa
File: vaqVrisoP-oP3UWYJXID9PPapAg.roa (raw, json)
Hash identifier: zPAjhOm8e4kUaal/ey7MHFdEaxFfzMcD7qu8HPp1JhQ=
Subject key identifier: BD:AA:95:AE:2B:28:3F:EA:0F:DD:45:98:25:72:03:F4:F3:DA:A4:08
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1C66
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vaqVrisoP-oP3UWYJXID9PPapAg.roa
Signing time: Fri 13 Jun 2025 22:39:56 +0000
ROA not before: Fri 13 Jun 2025 22:39:56 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7270 (0x1c66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 22:39:56 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BDAA95AE2B283FEA0FDD4598257203F4F3DAA408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:fd:21:c9:6e:33:f0:24:92:c1:2b:7e:c0:
28:eb:89:e4:69:fc:4f:50:a0:67:a7:f0:e1:72:83:
8e:4e:2b:86:91:ee:52:77:62:44:a4:f9:25:69:a9:
87:3b:4c:54:5f:87:08:9a:4d:81:af:a3:5a:0b:cf:
2d:28:04:e2:02:8c:e7:fe:30:fc:06:dd:ad:48:23:
84:c7:d3:4a:b6:42:90:28:17:a5:71:f6:af:11:b0:
44:2a:c5:07:f5:af:f0:93:b4:65:e4:84:61:71:09:
cf:91:11:17:48:07:15:40:3b:c0:ef:d4:dd:55:b6:
82:79:c4:fd:c5:ce:93:96:44:4b:31:d9:71:d9:3f:
e9:ac:51:d9:57:91:52:89:ff:87:b9:0d:cc:be:15:
d7:ba:0e:42:8d:3e:69:db:93:32:63:2f:0a:68:17:
f7:dd:72:da:7c:29:7b:63:4b:59:77:16:6b:e1:ac:
c0:5a:7b:37:4b:ac:65:59:a4:fc:0d:bf:2d:f7:92:
95:7b:cc:02:88:1e:43:55:98:fc:04:a1:25:34:84:
4a:bc:26:4e:b8:c4:65:04:f8:7f:34:3c:2d:54:f1:
45:99:e5:7d:5b:fb:d8:0c:b8:cc:00:ad:e1:f2:57:
4d:68:9d:a9:32:91:48:34:35:01:cf:b6:4e:50:46:
69:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AA:95:AE:2B:28:3F:EA:0F:DD:45:98:25:72:03:F4:F3:DA:A4:08
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vaqVrisoP-oP3UWYJXID9PPapAg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:1a:c0:39:85:a8:71:03:e4:39:29:3d:ab:26:b6:47:1e:36:
c9:52:ba:7d:af:0d:58:34:77:21:b3:91:6d:37:8f:ef:59:56:
38:46:1e:11:5f:32:3e:ee:3e:e7:74:54:04:eb:1c:55:5e:4c:
c7:96:28:c4:e0:1a:87:56:8b:98:a5:11:06:ab:3e:c4:ce:c8:
b2:54:f3:61:15:a7:3d:74:ab:88:f1:6a:64:ff:b4:bd:24:c2:
02:b4:c8:69:c7:b3:78:d0:1c:e7:f2:1d:65:59:63:85:77:e1:
5b:71:5f:b2:e9:94:fe:91:d7:17:00:c8:0c:75:a9:8b:5f:ed:
05:b3:c0:8d:cd:ee:08:77:d4:cc:10:92:50:06:ed:43:cf:26:
9b:fa:15:30:a4:8f:5f:73:01:5d:9d:2f:eb:68:5e:40:ec:86:
02:2f:fc:db:81:e8:aa:52:64:22:8e:cd:6f:48:b2:43:57:1d:
c4:62:a5:2c:0b:8d:92:96:f6:31:cc:e2:09:e3:9e:c7:cd:14:
15:18:f2:55:6e:a7:f7:d8:26:ec:70:b1:33:62:40:4c:fc:82:
98:47:1c:f5:85:fb:b2:93:ea:75:11:9b:a0:ba:43:74:81:87:
f7:ef:37:9f:4a:a0:c9:c8:59:8b:e1:64:9a:cb:1b:99:77:4f:
d0:b0:8e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 08:08:00 2025 by rpki-client