Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/3BqTvtXezKSYvMEpALzuDykz9IU.roa
File: 3BqTvtXezKSYvMEpALzuDykz9IU.roa (raw, json)
Hash identifier: i7XFVLLy0fi3mdy1r9uI5xv8Dwk16X6g9UtyYAX8X44=
Subject key identifier: DC:1A:93:BE:D5:DE:CC:A4:98:BC:C1:29:00:BC:EE:0F:29:33:F4:85
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 048A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3BqTvtXezKSYvMEpALzuDykz9IU.roa
Signing time: Tue 13 May 2025 03:08:01 +0000
ROA not before: Tue 13 May 2025 03:08:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1162 (0x48a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 03:08:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DC1A93BED5DECCA498BCC12900BCEE0F2933F485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:13:ef:17:60:0f:53:6d:73:81:f8:9e:cd:
61:dd:da:16:90:8f:81:f6:5d:cd:e4:cc:9d:05:35:
44:5e:4c:93:f3:6c:2b:60:69:92:ab:a8:c0:ae:06:
1e:da:cc:31:ed:f8:d5:da:cf:4e:5c:ce:c9:dc:de:
b4:e0:55:ed:1a:cc:40:48:43:a3:2b:39:20:d7:07:
45:a6:ba:df:f9:0a:13:52:8b:8f:f0:7e:29:04:51:
c4:41:25:9e:fe:5b:7a:c8:5f:4c:ef:44:8e:ce:fd:
71:3e:26:2a:a5:da:8b:b0:33:09:0e:c2:79:13:76:
95:5f:bf:67:d7:b7:29:70:2e:1d:ee:e8:ad:92:a9:
44:f4:01:d1:01:76:a9:fa:1d:96:72:7c:ae:24:9a:
24:1f:f8:69:13:58:64:27:d1:3b:25:77:e8:a4:cb:
54:ae:4a:1e:c6:6b:75:28:fc:78:cf:38:21:95:b7:
d2:e8:6c:3a:c4:e5:a5:62:36:80:37:8d:11:4f:b0:
c6:2f:0e:d8:4d:2b:b7:97:ae:4d:a7:c2:46:a1:d5:
af:b9:23:8d:0e:1e:07:a9:07:73:7e:f4:85:8a:13:
a7:fc:d4:50:78:9c:7c:b6:45:d2:9b:2c:37:8e:c6:
88:09:55:60:df:1c:ad:3a:fa:81:cc:20:f4:32:21:
9c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1A:93:BE:D5:DE:CC:A4:98:BC:C1:29:00:BC:EE:0F:29:33:F4:85
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3BqTvtXezKSYvMEpALzuDykz9IU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:63:a3:08:27:e9:65:66:10:59:dc:46:b7:b7:26:5c:30:31:
62:9e:91:cc:2f:41:f1:9d:9b:a2:03:bb:53:05:31:4e:c6:c7:
7d:25:e3:64:5e:f1:84:29:04:33:34:10:49:7b:9e:13:73:03:
c9:53:89:63:61:75:f3:0a:de:88:e6:d3:f2:91:54:6f:a3:8a:
9e:e2:03:1a:59:a3:09:c6:35:a8:71:06:7d:3a:17:86:63:52:
00:70:97:65:97:88:0c:58:91:c2:8a:87:09:7e:6d:52:23:b7:
8c:2f:86:d7:af:4e:66:e3:8e:88:dc:fa:ed:7c:c1:64:1e:8e:
a0:2a:dd:17:06:60:82:cb:b3:3c:73:d6:b2:d4:89:ad:5f:c8:
24:be:f4:92:00:3d:c6:8a:d4:f5:27:74:d9:34:43:4d:66:37:
a9:90:a1:a7:7a:2a:d7:47:8e:6e:20:11:12:5e:22:0d:ec:f9:
98:e4:95:65:ad:2a:b8:9d:fb:71:da:c5:de:22:09:34:50:85:
a0:e7:a8:d2:48:65:00:45:75:2d:1f:4e:1b:25:43:3e:ed:24:
48:a4:cd:e5:85:3c:f7:54:01:35:90:16:66:ab:c1:38:e6:be:
83:d8:f3:16:98:f2:5b:88:35:20:eb:27:7b:a4:11:86:7e:66:
96:2c:16:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:03:39 2025 by rpki-client