Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/2NphpAHjgVI58thsSgSbwVJ8qe0.roa
File: 2NphpAHjgVI58thsSgSbwVJ8qe0.roa (raw, json)
Hash identifier: dTgwyfJiRgd2o8T9B4sY9qE9lD4Up5ZnkfCwy0NsZ3k=
Subject key identifier: D8:DA:61:A4:01:E3:81:52:39:F2:D8:6C:4A:04:9B:C1:52:7C:A9:ED
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 23AE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2NphpAHjgVI58thsSgSbwVJ8qe0.roa
Signing time: Tue 24 Jun 2025 03:11:59 +0000
ROA not before: Tue 24 Jun 2025 03:11:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9134 (0x23ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 03:11:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D8DA61A401E3815239F2D86C4A049BC1527CA9ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:c1:81:f2:2a:07:00:65:c5:82:f3:a0:83:
a3:12:db:9b:b4:40:bd:42:f4:be:50:3a:c9:a7:e1:
32:85:72:8f:63:f4:a6:a4:3c:55:b0:07:a4:6a:2c:
02:6b:d7:75:35:56:a5:ef:38:58:ee:19:46:ba:f9:
7d:56:77:64:02:3c:99:3c:66:81:aa:8a:55:75:8c:
94:20:6c:3e:54:97:0f:29:44:b7:3d:a8:c7:44:a8:
84:ae:e2:11:64:5b:2a:71:10:ff:5f:e4:89:e0:84:
ec:bb:83:5d:e9:26:42:c7:2b:4a:7a:b8:ba:01:8d:
a8:6e:55:ab:de:fb:37:b4:72:4d:43:7a:f9:3a:e1:
b5:45:81:8f:ea:e8:67:78:63:8f:35:71:b6:b9:84:
b6:1b:35:57:f6:af:bb:5c:a1:66:23:24:0b:9a:92:
c6:70:0c:58:e2:12:cd:cf:07:22:7a:a7:da:6c:24:
8d:98:07:6c:14:b6:e2:2b:6e:74:6d:f1:a5:71:20:
1b:f4:9d:0a:a1:eb:4d:54:48:da:21:09:8b:22:d5:
c0:11:1b:46:d0:6f:c2:36:c8:8d:8c:fc:eb:ad:4a:
24:d2:cb:4c:1e:35:0b:21:ab:b0:25:8c:c1:84:4d:
7e:e5:3c:53:f1:ea:e3:16:2e:c2:4f:c4:74:49:8f:
ec:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DA:61:A4:01:E3:81:52:39:F2:D8:6C:4A:04:9B:C1:52:7C:A9:ED
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2NphpAHjgVI58thsSgSbwVJ8qe0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:20:bf:de:68:6e:fd:45:67:84:bd:19:05:4b:b6:75:43:83:
d8:de:6d:cd:b8:31:1b:d5:dc:15:b2:15:f8:96:f6:22:3a:55:
f6:29:3c:ab:ab:eb:9d:3a:94:3c:ce:11:3f:b2:8b:be:af:3d:
ca:fa:0a:9a:87:74:61:ab:48:a9:e2:b2:82:2f:20:69:96:8f:
0d:59:21:ac:76:6d:95:b0:ea:4d:26:ff:77:59:9e:33:c3:7e:
2f:b4:f3:5d:10:27:bc:cf:43:45:40:af:1b:fb:f1:8a:ba:3b:
c0:7a:00:ba:ba:c6:93:61:8b:9f:13:82:c3:ec:82:dc:17:00:
94:a0:47:60:58:78:1e:18:97:46:8d:f6:26:74:40:fa:e0:ec:
b2:0c:5f:be:c8:de:3e:cf:ac:72:0d:9b:0c:aa:21:af:c3:ff:
84:62:1a:ca:6b:fa:d6:68:e7:21:36:99:46:58:b7:09:37:22:
5b:59:b3:61:f5:12:02:e1:dd:5e:28:bd:bb:8c:d2:88:ea:34:
6d:e6:2e:70:3c:32:f3:fb:af:72:3a:91:b1:c1:85:1f:c3:5c:
c5:06:99:51:a4:0c:0e:bb:f4:c9:79:af:52:34:ec:af:07:5d:
d0:0e:d6:17:68:e8:9f:44:ff:59:cb:35:c0:bb:83:fc:ed:09:
47:2d:a6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:58:02 2025 by rpki-client