Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/w8kNBsh8Ip7y-Kkd7G1Pl_Qxtbk.roa
File: w8kNBsh8Ip7y-Kkd7G1Pl_Qxtbk.roa (raw, json)
Hash identifier: DHapihW+lChrA8Gx0yIfwiIwrnJeWfRkmTulYZRXwn4=
Subject key identifier: C3:C9:0D:06:C8:7C:22:9E:F2:F8:A9:1D:EC:6D:4F:97:F4:31:B5:B9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 08EE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/w8kNBsh8Ip7y-Kkd7G1Pl_Qxtbk.roa
Signing time: Sun 18 May 2025 23:38:08 +0000
ROA not before: Sun 18 May 2025 23:38:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2286 (0x8ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 23:38:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C3C90D06C87C229EF2F8A91DEC6D4F97F431B5B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:82:b6:dc:f7:cc:87:b1:84:88:6a:03:75:
b8:7e:c9:07:d0:4d:42:5a:37:64:a3:3c:e4:91:b1:
a9:cc:5c:ce:80:d8:f1:70:eb:2b:40:63:75:a6:fd:
06:86:69:8b:9d:04:3a:20:ba:32:9c:e0:ad:7d:be:
a7:18:83:ff:b5:52:61:f9:9e:13:a6:28:ab:2f:6a:
0d:b6:50:87:95:76:1a:a2:88:6d:26:62:25:a1:41:
52:35:51:80:a4:7a:93:d1:59:ca:ce:0e:2a:33:f0:
2c:3c:69:57:52:a4:b6:5e:1f:95:0d:a9:52:71:55:
e8:87:cb:b0:ac:ef:e3:4d:c2:5d:54:90:1d:90:fe:
ea:73:f6:0e:3b:87:ec:3b:0e:d5:8f:95:3b:d4:9e:
50:44:79:20:18:44:22:2c:67:8c:fc:53:e6:41:8e:
35:59:2e:32:39:0a:76:1b:63:d4:20:ce:55:bc:1e:
c8:e6:d1:81:c4:01:93:53:fe:1d:26:b1:b9:fa:90:
87:9c:8d:32:36:6f:4e:78:df:30:5d:62:65:9f:ca:
62:32:ce:86:46:5c:42:3e:3b:93:05:39:f3:7b:4f:
cd:40:bb:38:68:89:e8:ca:52:bd:36:fb:ff:84:1f:
74:fa:17:94:0a:4d:0a:91:be:92:9f:6e:33:e2:23:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C9:0D:06:C8:7C:22:9E:F2:F8:A9:1D:EC:6D:4F:97:F4:31:B5:B9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/w8kNBsh8Ip7y-Kkd7G1Pl_Qxtbk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:a3:a2:58:05:2a:28:8f:1f:fe:7f:08:1b:1f:ce:8f:a0:80:
24:09:18:da:9b:05:3e:76:d2:b7:c6:e0:97:2b:99:c6:84:ee:
55:b0:05:a7:46:f9:a2:f2:a1:c3:57:cd:da:83:cc:c8:47:13:
f6:10:96:01:f7:df:98:aa:e7:1d:ae:21:6f:df:27:c0:c2:df:
ee:c1:a7:59:fd:33:52:eb:b6:c4:2b:cb:76:ea:c2:fe:d4:d2:
7d:3f:bb:90:f6:88:b0:71:52:d0:b6:00:45:79:e7:c6:07:26:
11:d3:86:ba:fa:82:73:e8:06:6c:f4:8f:50:6c:81:5f:46:35:
14:98:f0:ec:b7:57:15:c7:f7:fe:db:40:0a:b0:54:1f:98:3d:
db:ed:b0:6b:7d:74:48:79:b2:73:2f:9d:5e:62:a7:b3:21:4e:
12:34:dc:7c:98:e5:71:65:64:22:86:f4:7c:d4:a2:54:aa:c8:
ad:f5:4b:14:10:8b:30:6f:0a:9c:6b:73:79:67:b8:54:86:c5:
22:40:80:d0:21:67:b9:37:79:97:c7:49:57:e2:5d:24:b4:77:
54:e6:2f:22:a2:8b:ed:bd:b9:69:4d:f4:d4:bd:bf:8d:86:e9:
45:63:5d:c3:e3:39:f1:3d:bf:cf:cd:37:cd:f5:7e:d3:50:4b:
97:0a:9f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 14:34:21 2025 by rpki-client