Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4zgkZEwjlcczW7O7DMUAh-XJ6dg.roa
File: 4zgkZEwjlcczW7O7DMUAh-XJ6dg.roa (raw, json)
Hash identifier: q6UudInGoP4krZ3iQdi3UBn39fh8sIPjI36tUcq3o/4=
Subject key identifier: E3:38:24:64:4C:23:95:C7:33:5B:B3:BB:0C:C5:00:87:E5:C9:E9:D8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1E2A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4zgkZEwjlcczW7O7DMUAh-XJ6dg.roa
Signing time: Mon 16 Jun 2025 07:10:00 +0000
ROA not before: Mon 16 Jun 2025 07:10:00 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7722 (0x1e2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 07:10:00 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E33824644C2395C7335BB3BB0CC50087E5C9E9D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:22:5b:ac:83:f4:ea:2a:a4:8a:09:2a:09:
46:c0:05:cf:d7:ee:72:e4:c8:9e:a1:12:78:6f:0c:
e2:83:3c:7b:e7:b1:50:ff:51:51:0e:85:90:6f:7a:
14:50:d3:7e:5c:a3:c3:44:d6:3c:c8:e1:ec:fd:b3:
b7:13:41:73:57:e3:9d:d0:fc:e0:19:0f:64:bf:01:
98:3c:09:ce:4e:29:86:d3:f3:c9:37:50:7d:49:16:
95:d3:ec:8d:7e:7b:9d:7d:2a:20:2f:e8:ee:fa:d1:
f1:11:e8:be:6a:85:fa:91:0a:f2:e1:c8:43:94:44:
ad:63:52:8f:9f:71:a0:da:2e:9d:65:3b:d4:38:e1:
20:ed:83:63:b4:2a:d4:f8:8d:7f:56:6a:7b:a4:c6:
52:1c:e8:37:d9:8c:bf:13:0c:5d:ab:18:45:e6:81:
20:98:ff:14:79:da:46:b1:f4:c1:fb:ab:94:66:f1:
8d:4e:60:82:76:cb:83:a1:c0:bb:25:50:84:01:6d:
eb:e8:fa:66:c8:6e:37:5c:59:38:16:91:e7:04:da:
ef:74:8d:8a:b7:f2:28:ba:26:78:3d:eb:90:c3:72:
46:a1:fb:9c:2f:eb:2c:1a:a3:f2:06:47:3f:65:0e:
15:49:6e:26:4d:c3:de:f7:71:4b:cc:fd:7a:d6:a6:
9c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:38:24:64:4C:23:95:C7:33:5B:B3:BB:0C:C5:00:87:E5:C9:E9:D8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4zgkZEwjlcczW7O7DMUAh-XJ6dg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:8b:f1:90:18:59:3e:13:2f:cb:79:62:a9:81:2a:8b:74:5d:
43:64:f8:45:f1:0f:21:91:88:f6:3b:b5:03:ec:b2:5a:46:37:
8b:02:6f:b3:b7:5d:67:2b:09:7e:b7:03:3f:56:73:f0:9a:fc:
99:6a:b4:8f:2b:6d:0b:05:b4:ee:70:ed:cc:f5:8d:e3:74:fe:
39:9b:a5:d7:f6:5b:75:d4:ca:4b:77:c5:7c:b9:8f:2e:9b:e0:
91:56:a7:2c:27:96:2d:94:b4:ca:bb:48:a7:51:c6:03:9e:af:
e1:33:cd:d4:cf:1c:9f:38:5d:83:c6:3f:91:88:ef:31:7c:cb:
b4:16:6b:ac:5a:8f:e3:19:e9:b8:46:bc:9a:63:04:b8:6d:de:
af:77:32:c9:6f:7a:e3:a8:46:c1:e2:ef:f9:b5:4f:63:2e:98:
6f:01:01:88:a6:fa:b6:82:db:95:9d:1e:39:31:51:33:62:6f:
6c:1c:64:bd:e7:87:aa:ff:49:6e:94:f4:d5:da:e3:f7:6b:5b:
29:11:f2:45:ea:74:e7:6e:c1:e8:a4:55:e7:cf:c9:d3:14:87:
57:c8:33:14:5a:89:49:61:a0:36:b6:3c:fc:ba:44:bf:25:2a:
4e:73:ac:e2:63:cd:bd:2c:f7:10:02:74:89:eb:09:71:10:a9:
e8:91:e8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:03:36 2025 by rpki-client