Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/5cJqIcDwXxgifsyZopGb5uAjBaM.roa
File: 5cJqIcDwXxgifsyZopGb5uAjBaM.roa (raw, json)
Hash identifier: bS5UdO/zT6yc0KrKAlyErte4Yrli0eHPB/ug69aYFws=
Subject key identifier: E5:C2:6A:21:C0:F0:5F:18:22:7E:CC:99:A2:91:9B:E6:E0:23:05:A3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 15BA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5cJqIcDwXxgifsyZopGb5uAjBaM.roa
Signing time: Thu 05 Jun 2025 01:09:37 +0000
ROA not before: Thu 05 Jun 2025 01:09:37 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5562 (0x15ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 01:09:37 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E5C26A21C0F05F18227ECC99A2919BE6E02305A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:28:6a:cb:4c:02:b0:13:5d:e4:47:0e:fb:
9c:7f:52:cd:54:e1:ac:dd:76:8e:a9:39:27:e3:0b:
9f:89:ae:61:da:d7:eb:31:52:12:e6:f7:26:23:74:
f0:bb:8c:b9:57:c5:5e:3d:bd:e4:0b:21:a9:44:38:
fa:ad:68:e2:44:0f:a6:78:d9:f5:ed:33:99:e8:4f:
8b:ca:23:7c:ca:66:54:df:c8:55:d3:34:d2:34:1d:
74:04:93:17:a2:71:92:63:b6:1d:f1:9e:3f:bc:03:
c7:ec:10:a5:33:43:80:5f:3f:a0:8c:c7:64:47:93:
fb:d8:cb:14:68:9c:4c:d9:10:9e:24:30:70:cd:b8:
4f:a1:81:66:c7:7a:2e:3a:75:96:3c:70:ce:a7:a8:
ec:6f:46:ab:92:6d:5b:26:36:b8:77:d0:ef:67:0c:
61:c8:36:b0:ba:b9:4c:e6:b5:87:18:f4:a6:72:83:
52:f5:11:35:bd:b1:16:0a:96:d9:3a:21:48:a5:b7:
bb:c4:d4:a0:6c:7c:3a:7a:d5:d4:68:d4:eb:39:fb:
92:56:99:fc:01:7e:c3:be:dd:08:41:c5:90:2e:8d:
3e:fc:2e:a6:d7:19:e0:87:09:cb:8d:81:b5:31:5d:
e7:a3:ba:d7:74:c0:a2:f2:a5:7c:72:15:1e:11:63:
68:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C2:6A:21:C0:F0:5F:18:22:7E:CC:99:A2:91:9B:E6:E0:23:05:A3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5cJqIcDwXxgifsyZopGb5uAjBaM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:9c:3d:ff:b4:e8:53:16:12:91:5f:0e:d6:71:b8:e1:33:9d:
79:03:89:5c:38:e5:16:f3:c4:12:9b:03:aa:71:97:7c:cc:63:
c5:8d:49:28:35:a6:32:6c:e2:c7:b5:61:40:05:76:1c:ef:4a:
f6:97:00:f2:c8:b1:70:95:df:c8:a2:94:eb:96:dc:14:6f:13:
8e:78:c7:1a:ea:1f:61:61:11:7b:d6:67:3b:ff:4d:78:f6:9c:
27:e8:76:a5:b2:ac:2d:fe:62:71:9d:00:5e:e9:e3:ae:b0:11:
f0:42:4a:cf:74:cb:53:27:b9:ea:27:07:cb:cb:b5:cd:be:4a:
b2:1d:18:91:ed:b1:9e:13:21:08:03:33:69:ea:6e:3f:54:13:
56:c2:ed:c4:f3:c1:ea:98:e8:e3:89:33:2f:e9:f9:06:c0:03:
f1:69:db:8a:04:e4:f0:0c:0d:2a:cb:b6:af:62:8c:18:0b:97:
ce:5b:f0:5f:b6:38:0a:59:42:25:d2:c0:6e:18:b5:f2:a2:e6:
6a:96:8c:d0:84:64:e9:3d:f7:c3:45:dc:e1:f2:9e:1f:12:45:
c2:7b:90:09:39:b8:b4:a2:02:26:72:b2:34:fa:d5:c5:11:0b:
5f:4c:c9:76:ab:53:69:c5:69:73:a1:78:b0:ef:30:d2:f5:a2:
a1:45:49:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:01:07 2025 by rpki-client