Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/0K7QMR-WusSNr3uuTFLL21MZ7uQ.roa
File: 0K7QMR-WusSNr3uuTFLL21MZ7uQ.roa (raw, json)
Hash identifier: xOIGE8pXIrrX9aOo9aFLOWu+71YCiGhqO6ZpLK8BLxA=
Subject key identifier: D0:AE:D0:31:1F:96:BA:C4:8D:AF:7B:AE:4C:52:CB:DB:53:19:EE:E4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0AFE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0K7QMR-WusSNr3uuTFLL21MZ7uQ.roa
Signing time: Wed 21 May 2025 17:38:20 +0000
ROA not before: Wed 21 May 2025 17:38:20 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2814 (0xafe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 21 17:38:20 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D0AED0311F96BAC48DAF7BAE4C52CBDB5319EEE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:88:56:53:a3:93:46:e8:57:a2:45:af:dd:73:
28:12:9b:fb:e1:d9:c0:4f:04:6c:4a:1d:4b:51:46:
b4:06:87:9e:7d:9e:7f:a2:7a:2f:a6:3a:94:1a:41:
3b:fc:bd:35:4f:0c:d1:7f:f4:65:76:69:36:53:fe:
2b:ad:45:d8:10:c6:1f:6c:0f:62:c4:5e:15:49:ca:
2b:09:14:a5:10:77:31:de:52:11:70:18:d7:a0:61:
74:13:f7:9e:75:16:c2:40:38:89:f3:91:09:13:35:
87:ac:b5:a5:c6:7f:8d:f8:0e:9d:a6:0b:72:0e:66:
fe:7e:13:03:67:bd:8b:60:fe:88:ea:dd:f1:56:d9:
34:d7:b9:c6:73:f4:bd:66:b0:d2:08:0e:10:2f:f8:
47:a9:fb:a5:27:f0:fc:d9:4b:3b:30:8e:49:84:0e:
89:b7:f0:33:f6:b6:9e:72:4c:0e:a0:c0:bf:30:9c:
95:d7:08:cc:7b:80:48:76:11:ec:e9:d8:65:64:d4:
3b:3d:27:59:22:7b:8e:ae:a9:4b:76:ac:65:3d:84:
93:9e:a6:65:90:f5:89:40:a7:4f:91:2b:5e:e4:6f:
86:8a:2d:90:9a:3b:bc:cd:cb:04:4a:5f:34:5e:77:
b9:0e:05:d9:0c:d3:a2:62:cf:fd:5d:55:ee:bf:8d:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AE:D0:31:1F:96:BA:C4:8D:AF:7B:AE:4C:52:CB:DB:53:19:EE:E4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/0K7QMR-WusSNr3uuTFLL21MZ7uQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:c0:7c:b5:a4:56:0d:78:cb:af:36:50:a9:fc:55:7b:67:87:
28:9c:85:0e:8d:d0:68:06:23:b2:e3:17:9a:b5:5a:ee:82:3e:
0e:41:97:e1:b6:63:83:a9:21:2a:89:87:71:5f:28:bd:52:35:
13:31:7b:6c:56:10:36:88:01:e9:ee:8e:28:b2:9c:a6:8e:0e:
55:d9:e4:a0:ab:7b:4d:78:a3:be:60:28:c5:dc:dd:64:0e:95:
93:17:12:32:59:04:04:9a:05:20:5c:d0:d7:f5:31:9d:81:e1:
ab:cb:30:9b:80:53:ac:79:65:76:1d:f1:3a:ad:5b:a3:d1:a6:
7b:68:bc:3b:99:c0:55:98:5d:0d:e4:53:ca:b7:66:b4:e7:a1:
3d:37:e0:bb:8d:e4:7b:a8:59:95:bd:2a:c2:7d:bd:54:dc:9d:
8c:18:3e:8d:3f:b2:f6:49:37:e4:9b:29:70:ff:7d:eb:6e:94:
de:12:88:c6:84:01:79:aa:41:00:46:ca:11:85:af:a7:e5:79:
ee:3d:6b:5e:8b:77:f0:ab:96:21:19:54:bc:ac:72:9e:a0:05:
08:78:a8:96:c9:19:e7:6f:f3:57:1f:70:e2:8b:e8:2f:32:f0:
6b:f9:be:0d:71:60:f3:5b:29:4c:a4:0f:ed:79:6e:f9:4d:42:
57:87:98:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:10:27 2025 by rpki-client