Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-aNrRaUksC-b0iX1MWRtGSvycQU.roa
File: -aNrRaUksC-b0iX1MWRtGSvycQU.roa (raw, json)
Hash identifier: izJFC1hQ7uFhg+qwHGeyI0eUSSwC5oJEZtV4c2jR8s0=
Subject key identifier: F9:A3:6B:45:A5:24:B0:2F:9B:D2:25:F5:31:64:6D:19:2B:F2:71:05
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 131A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-aNrRaUksC-b0iX1MWRtGSvycQU.roa
Signing time: Sun 01 Jun 2025 13:09:30 +0000
ROA not before: Sun 01 Jun 2025 13:09:30 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4890 (0x131a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 13:09:30 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F9A36B45A524B02F9BD225F531646D192BF27105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:df:f8:64:d4:e4:eb:57:cc:25:db:d0:96:2e:
a0:30:78:a3:38:d7:79:94:cd:71:61:df:38:2f:fd:
1d:d1:54:11:a5:94:39:6b:a3:89:db:71:c5:8f:24:
cc:66:a8:a8:17:ae:10:29:71:f0:d9:60:65:28:ef:
b6:04:d5:45:31:23:f1:d2:b1:8b:c3:30:5f:f6:24:
be:b4:ec:81:b8:35:fd:84:e1:70:d6:6e:81:6a:66:
f1:4a:fb:7d:3c:33:04:7a:7e:a6:8b:0d:d3:41:1b:
bd:c4:4c:c9:70:6f:75:c0:8f:4b:4e:93:3f:b0:41:
84:b5:e2:6e:56:38:99:1e:9c:40:12:24:65:31:7c:
1e:5a:54:45:6f:5a:d0:a6:f5:5b:2b:67:9e:44:14:
b1:8d:4e:cb:27:43:11:0a:5b:3a:35:bb:18:88:29:
45:fd:11:bc:49:1d:29:26:ef:a8:a7:58:5b:92:6b:
b3:83:cc:2f:c7:05:a5:f9:f7:4a:1c:73:37:df:b8:
54:fc:d3:4c:17:46:6c:d1:9e:36:fa:76:34:98:bb:
5d:b8:c7:ea:e8:f7:d6:8b:f7:ba:82:66:8a:7a:07:
b8:60:69:2c:82:00:04:49:87:13:69:27:1b:2c:d4:
d5:7c:3e:53:3d:f9:3c:83:46:a1:e5:ef:62:bb:a5:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A3:6B:45:A5:24:B0:2F:9B:D2:25:F5:31:64:6D:19:2B:F2:71:05
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-aNrRaUksC-b0iX1MWRtGSvycQU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:0f:65:2f:73:a6:d1:3a:74:ce:a5:7f:cd:bc:25:c5:04:de:
c4:4e:4d:7e:9b:54:eb:d5:8a:f3:c1:7a:05:9b:07:2c:47:91:
f6:d1:a1:4b:b5:62:1d:7a:4a:db:e3:06:8f:0d:65:fd:6b:f7:
ae:bd:b6:ff:ba:3c:a9:5a:41:ae:84:ae:ee:51:bb:fa:d3:f3:
b7:c9:2a:33:31:8e:c1:65:91:b6:06:19:58:7d:6a:ff:d2:a9:
8d:4a:d9:3b:53:cb:62:9b:da:3c:3e:3b:4c:c5:f3:c3:cb:6c:
c5:ac:c0:95:3d:4b:6d:ad:35:ea:27:0f:22:89:9e:78:5d:2c:
a0:e9:6a:a2:2e:0d:28:9e:b1:00:05:b4:c5:9a:d4:bb:77:3f:
7d:2a:87:19:3e:40:a4:d0:29:ec:43:19:e3:b8:e8:a2:cd:07:
7c:5a:19:74:d5:1d:22:05:5e:03:2f:a2:82:27:67:53:3a:a1:
2e:06:a0:40:09:f3:14:e5:d4:c5:0f:9d:5a:0d:0f:c7:ec:95:
43:f7:e9:78:ba:05:8c:eb:6b:2e:89:49:90:21:ad:f9:6b:a1:
7b:80:15:bf:54:8b:85:a3:c6:25:dc:95:f9:74:41:6f:c4:3f:
03:ff:48:ab:a4:3f:5b:d5:c0:af:d2:31:f2:33:61:ef:59:ae:
87:31:76:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:58:22 2025 by rpki-client