Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/0-Et5-mYQo6TL87FVnklRfj0-zk.roa
File: 0-Et5-mYQo6TL87FVnklRfj0-zk.roa (raw, json)
Hash identifier: wS/7eJgNLxUXLcpIzfOiOTz1hmi6KlPZR/k55IZiXLM=
Subject key identifier: D3:E1:2D:E7:E9:98:42:8E:93:2F:CE:C5:56:79:25:45:F8:F4:FB:39
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 09C6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0-Et5-mYQo6TL87FVnklRfj0-zk.roa
Signing time: Tue 20 May 2025 02:38:16 +0000
ROA not before: Tue 20 May 2025 02:38:16 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2502 (0x9c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 02:38:16 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D3E12DE7E998428E932FCEC556792545F8F4FB39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:f8:75:d1:c4:4a:93:47:41:e1:8d:9f:ca:
43:9c:50:fc:61:1c:8d:e2:b9:5d:bc:38:70:d9:46:
44:32:79:92:83:58:f5:e0:4c:ff:1c:49:99:5c:80:
dc:5e:8b:27:52:27:39:8a:d1:85:0c:09:bb:c4:98:
4e:7e:75:fe:95:1b:2a:b4:ac:5c:ec:a7:95:dd:35:
65:23:07:79:e8:6c:4d:d5:9b:4b:0e:ec:e5:4b:dc:
f0:f7:a1:0c:27:00:10:12:57:75:f7:0c:e5:51:20:
3f:fb:64:fa:36:31:21:fe:7a:4e:e1:20:38:17:04:
76:ff:b9:ee:11:d0:88:3e:c7:5f:8c:90:16:cb:59:
ac:7b:92:72:c4:57:0d:43:8e:8a:3a:f5:a7:7f:75:
1b:74:2c:f6:11:03:c1:a7:2b:9f:2c:f6:08:9b:5f:
ba:cc:33:e5:5a:ac:92:28:de:23:6a:76:4d:cd:70:
eb:81:a0:6b:31:81:13:e7:45:ea:e5:eb:8e:d3:9f:
4a:36:bc:d9:cc:db:54:26:6f:7e:a6:c2:19:a2:2a:
92:1d:c0:52:18:c6:3d:22:b1:79:5a:32:e7:17:8a:
f4:08:74:4d:f7:b0:09:94:55:e4:af:05:05:8e:c4:
73:c3:a1:04:47:29:a5:07:58:5c:13:07:e8:28:51:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E1:2D:E7:E9:98:42:8E:93:2F:CE:C5:56:79:25:45:F8:F4:FB:39
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0-Et5-mYQo6TL87FVnklRfj0-zk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:7b:29:31:38:fa:dd:73:df:b2:89:1c:f6:14:5b:c9:a3:39:
85:4c:f9:04:54:fa:61:14:ea:b2:52:b1:f0:7d:c7:9d:c1:77:
93:02:0a:a7:ec:f5:19:2b:cf:8c:a9:e3:13:1a:67:4c:79:0b:
5d:26:c1:5f:37:75:d1:b6:cb:f0:8d:c3:b5:94:13:62:25:9d:
f9:81:7a:92:fd:fb:f9:40:50:20:bf:29:00:a9:45:57:4d:31:
ba:15:e6:ef:05:15:f4:59:8a:8d:ab:e1:b7:a7:c8:16:e8:35:
06:f2:7a:01:db:e7:96:86:ee:68:3a:b9:10:58:2c:77:5d:1e:
4c:76:b8:86:e4:c0:d5:12:61:b7:ff:24:e2:fe:b0:3a:32:f8:
f7:86:e7:28:34:55:f7:7b:01:ce:38:0f:1a:5a:27:b1:3b:44:
87:bc:ef:5a:28:f9:14:2d:37:3a:51:f5:3d:6d:90:8f:2a:18:
4f:94:1c:0b:8c:7e:c1:c7:16:7f:02:2c:f7:d9:3e:d4:7b:a6:
ce:c7:7c:5a:53:c5:b9:3e:9b:92:c5:5e:1d:45:e5:58:a6:86:
e9:8c:01:45:87:d5:dc:29:0b:b2:fe:b7:d3:a4:1a:15:cd:f0:
8d:d3:09:87:9a:ca:fa:a5:66:72:b0:a4:37:5e:23:b9:19:20:
36:ed:4e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:23:30 2025 by rpki-client