Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/y_wjNIEWLZIPmTZ-_bA5Y6ogLas.roa
File: y_wjNIEWLZIPmTZ-_bA5Y6ogLas.roa (raw, json)
Hash identifier: s73y93lwmBnflAB2h4r32Vx9oaJFL7Q8qzXFiBXJs+A=
Subject key identifier: CB:FC:23:34:81:16:2D:92:0F:99:36:7E:FD:B0:39:63:AA:20:2D:AB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1B5E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/y_wjNIEWLZIPmTZ-_bA5Y6ogLas.roa
Signing time: Thu 12 Jun 2025 13:39:52 +0000
ROA not before: Thu 12 Jun 2025 13:39:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7006 (0x1b5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 13:39:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CBFC233481162D920F99367EFDB03963AA202DAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:27:1a:6b:6c:81:25:78:c0:51:68:49:e9:
21:e2:f0:ac:55:9c:43:a2:bb:fd:39:e8:cc:71:f2:
17:ca:20:d7:b3:6d:11:51:b3:89:a9:f7:39:72:c1:
74:eb:b4:dc:3e:c5:5e:af:ef:db:bc:bd:f6:79:c7:
a6:6f:2a:64:e0:49:90:67:c3:8b:16:15:d4:2b:4e:
8c:b1:e7:eb:c0:93:44:52:43:6d:64:04:6c:7e:0e:
86:d7:61:e3:33:30:59:13:56:55:3e:34:6c:bd:37:
75:2c:90:92:aa:33:ea:06:da:87:71:73:2d:63:d9:
97:6b:9e:79:8f:55:e1:79:5b:b0:b9:6c:e3:f3:90:
b9:0e:0c:d7:c5:24:55:13:1d:6a:e2:84:7a:0a:4e:
a6:4f:9c:ff:51:92:80:7b:19:6b:83:63:dd:19:47:
1e:f1:3c:15:9f:6c:35:ac:48:8b:44:9c:e7:9d:02:
d4:1b:b8:ed:27:86:10:03:f0:1e:4f:de:6a:51:16:
fe:3a:94:28:da:b2:c4:d4:fe:a6:f8:10:bc:e3:11:
22:01:7a:8f:99:d0:f6:05:15:c5:ed:36:13:fc:50:
de:ec:9b:f7:cb:70:14:51:13:f8:e4:c6:a7:1e:21:
b0:03:92:bd:8e:05:37:51:99:24:59:b8:f5:13:2c:
9b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FC:23:34:81:16:2D:92:0F:99:36:7E:FD:B0:39:63:AA:20:2D:AB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/y_wjNIEWLZIPmTZ-_bA5Y6ogLas.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:96:3a:08:c8:d3:93:53:31:b7:dc:55:13:bf:8a:08:91:c5:
82:b4:e0:c3:aa:04:d8:b7:42:5a:ac:96:bf:ae:ad:d7:30:18:
c8:ea:f4:05:28:c7:39:05:d2:9c:84:b7:fc:6f:6a:f1:fa:d2:
18:8d:ec:18:bc:7e:3b:98:14:89:9d:4c:81:a9:39:e8:28:5a:
22:b8:9c:64:c0:c4:46:9d:59:c3:43:50:85:de:ac:f9:e4:55:
a0:46:90:f7:2c:35:0f:64:31:01:99:51:27:5d:38:f8:92:f1:
76:b2:a3:d9:f9:e3:b0:99:35:3b:ff:72:7b:41:49:ed:ac:69:
d0:fc:a7:d4:35:1d:b7:8d:13:a7:ba:f1:90:0c:78:82:aa:4e:
dc:89:82:e7:3b:98:5a:8d:43:97:b4:9f:9e:c3:73:aa:9b:e3:
5d:a6:3c:f9:b2:71:39:f8:dc:89:6d:9e:5b:b7:25:22:1d:b9:
cd:d2:5c:63:90:a4:27:41:c8:6b:09:a8:73:ff:17:da:5c:48:
bc:90:aa:d1:a3:14:b2:be:99:87:ed:88:65:b9:a7:c0:4c:3d:
6b:61:17:6e:9b:78:c5:ea:5f:f2:a9:a1:c4:d1:80:31:5c:b4:
3b:a5:80:35:6c:a6:f7:09:38:4f:58:23:b5:07:6e:76:12:b1:
d7:c7:50:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 18:08:40 2025 by rpki-client