Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/2UWsASgwdBeQBylZEOUS8A7TNqs.roa
File: 2UWsASgwdBeQBylZEOUS8A7TNqs.roa (raw, json)
Hash identifier: 5UxJYVfPo6is3ByQEaJL9l3oiLcYJglZ0pDlhvwSGZo=
Subject key identifier: D9:45:AC:01:28:30:74:17:90:07:29:59:10:E5:12:F0:0E:D3:36:AB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1E76
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2UWsASgwdBeQBylZEOUS8A7TNqs.roa
Signing time: Mon 16 Jun 2025 16:40:22 +0000
ROA not before: Mon 16 Jun 2025 16:40:22 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7798 (0x1e76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 16:40:22 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=D945AC01283074179007295910E512F00ED336AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3f:15:0b:17:26:6d:56:3d:aa:85:4f:4a:71:
88:7d:f6:7d:84:02:5d:f5:d2:79:be:c2:46:b8:fa:
4a:30:0d:f7:3a:6b:bc:02:da:74:1d:49:18:85:15:
4d:76:f8:07:58:31:9f:6e:2d:24:0f:66:51:fa:7d:
70:89:75:df:02:17:d9:5f:9d:46:97:5e:64:98:26:
c1:18:05:c5:a4:f4:dc:c7:93:8a:07:93:16:95:d1:
43:75:a8:78:2e:8c:7f:90:97:39:80:23:65:98:da:
bd:01:59:a1:4e:52:7b:42:74:0c:57:b8:5b:8c:fd:
57:3f:6e:a5:3a:64:96:ef:21:4a:b0:3a:b0:3e:b4:
e1:5f:4e:f7:41:ff:49:78:5c:c4:05:26:a3:42:15:
79:d3:e8:62:ce:db:36:fb:3d:a8:b3:63:86:af:dc:
5e:cf:dd:0f:c1:42:9c:29:dc:b4:15:65:65:9d:1f:
b5:3a:3b:8a:43:1c:b9:c3:e0:2a:ba:6a:aa:39:1f:
a9:43:ea:ba:dd:39:f4:02:7f:20:63:0f:fd:e3:e7:
fb:0d:88:1f:a7:24:ed:03:a2:95:6f:c3:a4:5b:18:
3c:2d:d6:cb:5d:4f:4d:70:4e:f8:dc:23:6f:6d:f2:
9b:c6:cb:65:f4:ae:ab:fc:3a:73:af:79:8b:ed:01:
43:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:45:AC:01:28:30:74:17:90:07:29:59:10:E5:12:F0:0E:D3:36:AB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/2UWsASgwdBeQBylZEOUS8A7TNqs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:8e:b7:7f:a7:57:1f:75:c4:fd:23:f0:9e:82:d7:6f:63:5b:
3d:6c:31:fd:bf:f9:cf:b0:84:28:64:2d:2f:40:61:6d:d2:ef:
4c:97:fa:e1:f8:9b:88:22:1c:37:e2:01:73:47:db:31:15:47:
fb:b3:cf:88:53:11:98:56:50:2b:aa:52:61:cb:95:0f:60:fb:
9a:bd:50:2f:d0:f6:d6:6e:d1:26:e1:d8:a4:d1:90:c3:dd:29:
b0:ce:17:0a:aa:ae:e8:b7:b8:3e:a3:89:67:e3:07:fb:ce:4e:
ff:10:da:f5:27:d2:12:da:3e:a9:e3:bc:4d:d7:7e:a8:83:f8:
31:27:d8:44:21:3b:b7:87:16:44:af:72:4c:a0:ed:4d:7d:ed:
88:85:44:aa:93:3b:7d:87:b5:e7:0c:1e:3a:1b:de:18:57:ad:
42:fd:f4:4b:c2:5e:1a:63:a4:6d:18:cc:a2:c6:b9:0e:55:d0:
c9:83:51:39:fe:3b:aa:fe:2c:4e:13:80:20:da:f2:32:0c:b4:
8c:96:23:10:ae:f3:dc:66:f5:a9:8d:02:98:8e:18:ba:52:47:
59:e1:db:27:94:f8:f3:d3:9c:67:ba:14:29:19:76:4e:7a:a4:
dc:23:27:96:52:72:5d:25:ad:8e:be:d8:7a:79:f4:11:bc:a3:
f9:1b:a7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:09:17 2025 by rpki-client