Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/yZ0ibziBOnYBfShp1R_Lgl1aX3M.roa
File: yZ0ibziBOnYBfShp1R_Lgl1aX3M.roa (raw, json)
Hash identifier: u15gQSQkXf+A5zeaXwfqavfOg4TXbSLMkNobM/OTUrU=
Subject key identifier: C9:9D:22:6F:38:81:3A:76:01:7D:28:69:D5:1F:CB:82:5D:5A:5F:73
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1622
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/yZ0ibziBOnYBfShp1R_Lgl1aX3M.roa
Signing time: Thu 05 Jun 2025 14:09:26 +0000
ROA not before: Thu 05 Jun 2025 14:09:26 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5666 (0x1622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 14:09:26 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C99D226F38813A76017D2869D51FCB825D5A5F73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:37:33:7a:b8:46:93:9e:f7:46:dc:06:d1:
26:0a:b8:66:05:f2:37:2e:d5:f6:b1:27:5e:4b:70:
98:13:b7:66:a6:10:e4:a6:5e:33:63:d0:42:5a:4f:
d6:77:30:dd:83:a6:03:c6:47:1d:f7:97:6a:ee:e4:
d6:71:fb:ec:d8:ef:f4:c5:b4:f1:3d:f6:ae:3d:33:
0e:e6:9c:03:4b:d2:20:0f:c4:6b:f1:5c:a1:b1:20:
3f:c1:68:c8:9a:c9:d9:c5:bb:03:6d:7c:e2:8b:fb:
60:45:15:4d:7d:a2:8e:ea:3e:08:c7:9a:22:0c:af:
59:81:7e:fd:26:ea:34:29:86:57:af:23:5b:ab:61:
37:6c:71:55:8c:18:43:30:d3:8e:fc:62:14:3e:ec:
6e:bd:7f:d3:ec:ce:95:cc:21:9f:6f:a7:78:02:7c:
00:5b:55:31:f9:fb:ce:dc:35:bb:80:de:85:a3:cf:
c7:cb:be:3a:56:5d:97:71:c0:46:f4:23:78:b4:b1:
fb:6b:89:e3:27:fe:05:92:01:ed:1b:bd:d6:de:ca:
c0:f7:fa:f7:2e:4a:3b:bf:b0:2b:f4:32:fb:cb:a6:
a9:99:cd:c9:0e:42:30:83:6f:40:11:c7:11:a1:d7:
2b:04:ac:54:ad:f1:01:d6:a0:3d:d1:d7:b7:1f:c0:
ab:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9D:22:6F:38:81:3A:76:01:7D:28:69:D5:1F:CB:82:5D:5A:5F:73
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/yZ0ibziBOnYBfShp1R_Lgl1aX3M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:89:8f:2c:36:e3:b8:1f:82:f0:ac:6d:2c:0c:78:9c:cf:fb:
6e:ba:b6:1d:fa:d7:2c:78:2d:77:23:10:fb:57:86:e5:f4:f4:
7c:39:9a:11:de:68:bc:f7:c0:2c:e5:b1:83:42:fa:b5:31:97:
e2:4a:7b:64:39:a3:7a:53:b6:b4:cd:1a:84:ac:a0:31:6f:bc:
df:8a:08:74:86:79:87:28:7d:38:a9:7a:41:bc:e6:f4:cc:b6:
0a:22:f8:a4:83:5d:45:5f:a1:c9:4c:b0:00:e2:20:6f:8f:f6:
39:ee:2c:9e:4d:aa:97:af:85:9d:c2:6b:6b:ae:aa:f1:85:20:
47:89:c7:f4:29:a6:7a:98:82:e8:c5:93:b8:fa:b9:0b:e9:4e:
60:c8:72:27:5d:90:fe:8e:d4:42:70:0a:d9:c2:59:55:0b:2b:
3c:45:32:40:a6:d9:b8:e2:52:b9:25:0f:47:17:e3:49:c4:e3:
02:a6:84:98:e8:ef:47:89:f5:d8:5a:92:28:7a:af:5e:be:50:
07:ae:d2:e0:eb:a9:d3:e5:b9:8c:50:45:9d:0c:64:f5:4d:be:
1d:c9:16:da:7b:5a:73:8d:fb:ca:05:ee:ad:6f:3c:0e:d2:73:
3b:b9:48:9a:e0:a9:d3:02:1b:62:66:78:87:8e:32:96:89:3a:
f8:9a:85:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 11:20:16 2025 by rpki-client