Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/y8L4VHG_lWv9zB3a1TEEjAbu8nc.roa
File: y8L4VHG_lWv9zB3a1TEEjAbu8nc.roa (raw, json)
Hash identifier: sdqxZzT8mG4TfutgH9N4/b2MrWlhUZfCfl6JNB1JhYQ=
Subject key identifier: CB:C2:F8:54:71:BF:95:6B:FD:CC:1D:DA:D5:31:04:8C:06:EE:F2:77
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 038E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/y8L4VHG_lWv9zB3a1TEEjAbu8nc.roa
Signing time: Sun 11 May 2025 19:37:55 +0000
ROA not before: Sun 11 May 2025 19:37:55 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 19:37:55 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CBC2F85471BF956BFDCC1DDAD531048C06EEF277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:c0:d7:53:07:04:7c:9c:e6:78:34:ee:97:
e5:69:ba:3b:78:ff:5b:7c:ea:f0:4a:96:57:50:d6:
d4:b6:d7:5d:a8:eb:c7:8f:8f:9e:dc:d9:7c:c7:0b:
f0:9e:c9:1a:11:3a:bd:c1:8d:8b:ee:3d:c9:34:cc:
7b:08:a1:f4:1b:26:4d:01:49:75:77:54:e6:96:90:
2e:05:e8:1c:8c:1a:19:2c:e2:f0:ec:54:b5:ee:32:
57:21:b0:4c:c7:a8:97:e2:56:88:bc:58:fa:e5:03:
61:f1:50:c1:3f:5b:88:5a:65:08:7b:97:31:9a:ed:
85:f0:d4:b4:15:aa:74:da:c3:ab:04:84:ea:1f:8b:
1b:8d:01:74:77:b7:e9:b4:80:a9:a4:e3:c4:6d:f0:
8f:ba:6a:d0:51:e0:06:0b:a9:67:90:43:e2:51:4d:
e8:f6:06:91:b6:1c:fc:1a:cb:94:01:f5:2e:91:54:
a6:26:78:f4:d3:93:c9:c0:76:92:99:7c:64:78:9d:
7f:ec:12:cb:33:5d:46:a1:47:57:51:37:c4:aa:60:
5c:42:b5:76:8e:68:f9:96:8f:b1:17:58:d5:e6:f2:
49:7d:19:5e:e1:e0:79:c6:6e:91:86:ae:19:1f:79:
a1:1d:59:da:5f:20:e6:c0:d7:c9:0b:66:06:83:47:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C2:F8:54:71:BF:95:6B:FD:CC:1D:DA:D5:31:04:8C:06:EE:F2:77
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/y8L4VHG_lWv9zB3a1TEEjAbu8nc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:12:a8:72:ae:69:5b:c2:9a:8f:7a:6a:1f:92:fa:87:cf:90:
24:32:8d:ad:ef:03:4e:77:96:05:55:fa:f5:26:49:99:7a:6d:
bd:cb:3b:67:88:4c:c2:d4:32:c3:00:60:2d:71:e8:e6:f6:b8:
f6:58:59:49:5c:55:25:e3:fe:c4:00:08:9c:d0:89:32:29:02:
eb:0b:6c:1a:d6:c2:11:2a:37:ca:b9:2d:00:f1:72:14:cb:5c:
29:a0:7f:9d:6d:cc:c2:9d:18:59:29:40:51:39:22:ba:71:ba:
67:ae:51:f8:f4:4a:9c:89:8b:32:68:2b:d8:c2:96:47:c6:aa:
b9:74:3d:3d:73:85:32:d2:0c:f0:9e:1d:0a:30:ea:ac:9e:61:
95:67:f7:7f:e7:ab:29:ef:c7:14:52:1b:0f:6a:5e:f4:2e:cd:
87:91:0b:e2:d5:02:af:d7:0f:b3:3a:ac:09:26:97:26:13:a0:
c6:27:07:8b:da:6e:a6:e2:c7:e8:be:06:a6:fc:b0:40:91:ed:
79:f6:1a:ca:4f:16:d3:78:e6:ac:57:c9:4e:5d:fb:30:9b:6b:
22:f9:63:e7:1b:bc:b5:c5:db:2c:2b:23:06:91:60:8f:96:c8:
f0:02:f3:cb:76:fd:2f:d9:b1:62:25:65:68:6d:11:d7:18:a1:
6b:8b:7e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:05:57 2025 by rpki-client