Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/1e-mGIz3y2yapTxquhuOvgNQ8ls.roa
File: 1e-mGIz3y2yapTxquhuOvgNQ8ls.roa (raw, json)
Hash identifier: iLKYBSmA3+mo1k3xYKEDGMaaEdH+/wATDSj6jMTOyLk=
Subject key identifier: D5:EF:A6:18:8C:F7:CB:6C:9A:A5:3C:6A:BA:1B:8E:BE:03:50:F2:5B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0636
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1e-mGIz3y2yapTxquhuOvgNQ8ls.roa
Signing time: Thu 15 May 2025 08:38:04 +0000
ROA not before: Thu 15 May 2025 08:38:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1590 (0x636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 15 08:38:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D5EFA6188CF7CB6C9AA53C6ABA1B8EBE0350F25B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0a:64:83:52:50:f3:ce:25:fb:92:14:24:5d:
83:cb:54:c3:89:64:e0:68:82:09:46:92:5d:4c:cc:
b0:85:95:e5:20:25:79:45:27:1a:fa:c7:dc:86:66:
d8:02:51:91:1e:e9:5b:82:87:2e:d6:17:b4:ad:e1:
cb:8e:ec:61:69:88:e2:fb:7a:66:da:a2:97:cb:db:
aa:00:3a:5b:81:b5:86:c4:e4:67:6b:b9:67:5f:91:
cd:8d:0b:2c:d0:53:3f:06:48:4c:29:de:88:88:d9:
f7:02:08:0d:82:e5:7a:1c:2a:16:1d:92:b2:89:31:
6f:53:a7:3a:a5:68:f2:a7:fa:3a:9a:88:cf:13:c7:
36:0f:f2:10:e4:dc:89:81:b3:06:7d:06:51:1d:26:
d0:f1:b2:f1:e9:28:b3:71:5c:1b:3e:0f:7b:3f:ce:
1e:d8:5b:35:7d:5f:49:d2:96:02:2b:f3:a9:6c:ea:
af:96:c5:a6:be:f2:17:c4:58:f6:eb:81:c1:73:da:
47:95:6b:c7:e0:c2:63:73:30:f7:c1:c9:55:47:5c:
f8:18:49:80:36:48:78:eb:af:1d:5f:1f:62:9b:73:
3c:3c:13:7e:50:5a:42:17:89:6c:88:1f:23:42:45:
7d:ab:46:01:4b:ca:f9:5b:e3:9e:ad:90:ac:41:bc:
2d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EF:A6:18:8C:F7:CB:6C:9A:A5:3C:6A:BA:1B:8E:BE:03:50:F2:5B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/1e-mGIz3y2yapTxquhuOvgNQ8ls.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:2f:70:f0:92:ab:31:12:0e:0d:4d:da:32:4a:1b:d7:d9:de:
15:cd:21:fa:30:f7:33:ab:67:9b:d0:bc:a9:eb:36:85:3c:66:
3d:ba:bf:82:ca:09:75:3a:f1:26:7e:5c:33:57:0a:14:73:0f:
26:d0:35:4d:d8:e6:e9:3b:c9:01:7e:43:7f:e8:cd:f7:39:2f:
ea:98:b4:f5:96:78:c1:1c:9f:a0:7d:64:21:d4:83:1b:b9:0c:
2c:55:45:be:be:96:d0:b7:65:4a:bc:4e:c7:d4:27:e2:ca:3a:
2f:4d:af:29:c1:18:9e:90:eb:10:bb:20:61:e0:bf:16:54:34:
97:d7:76:fb:ac:b1:88:d5:86:07:5e:f8:26:5a:f1:a5:95:50:
b4:33:b6:30:7b:28:14:0c:86:d1:eb:91:d5:16:1f:4e:d9:0b:
6d:bb:80:12:b8:04:54:48:6d:f1:ba:28:e8:7b:6a:d6:da:2d:
13:b7:aa:f5:5a:cf:3a:2f:6c:4b:9c:bb:06:7f:fa:f8:ce:70:
49:ac:fa:6b:57:74:05:a9:2b:a6:0c:bb:34:14:db:3a:43:fe:
28:aa:1f:bb:c3:71:7d:6e:86:c7:73:74:a6:19:3c:26:72:ae:
c6:33:9a:e6:a0:ca:09:8d:32:84:24:4c:d9:78:e8:42:04:a9:
98:3e:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:30:54 2025 by rpki-client