Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/5k9e_o5YRErHWvAZ1vTq_9Bd0_k.roa
File: 5k9e_o5YRErHWvAZ1vTq_9Bd0_k.roa (raw, json)
Hash identifier: YBalKIBL+37lDPQfNF1piA3lUOP5iHkzbvbeCd8aLVI=
Subject key identifier: E6:4F:5E:FE:8E:58:44:4A:C7:5A:F0:19:D6:F4:EA:FF:D0:5D:D3:F9
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1926
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5k9e_o5YRErHWvAZ1vTq_9Bd0_k.roa
Signing time: Mon 09 Jun 2025 14:39:36 +0000
ROA not before: Mon 09 Jun 2025 14:39:36 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6438 (0x1926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 14:39:36 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E64F5EFE8E58444AC75AF019D6F4EAFFD05DD3F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4e:45:c7:e8:24:de:76:8c:18:74:7a:7e:e6:
70:40:81:2f:a5:8d:fb:84:ab:e8:c4:b6:fa:31:b6:
4a:bd:c6:bb:ee:80:43:75:67:7f:bb:cb:15:92:a2:
12:a3:8e:91:a3:53:8f:05:6e:84:c4:07:d6:80:37:
32:80:88:fc:71:a3:68:d9:dd:f3:e2:63:51:ee:31:
dc:22:e3:a5:d9:1c:2f:d3:c2:e5:21:55:68:4b:15:
58:c3:0d:ba:ff:82:a9:72:dc:f5:8f:7c:7e:26:be:
27:bf:c4:74:95:8e:10:07:7d:b5:b3:74:e6:da:13:
7b:f6:61:13:07:64:3d:9f:ab:a6:3c:1f:5d:f1:79:
04:b8:f2:65:f9:06:6a:79:47:f4:f2:77:08:d5:96:
d2:58:02:3b:b7:45:0e:db:6f:3f:a6:d5:42:2e:c8:
08:8a:63:5b:62:05:84:40:3e:ef:0a:09:01:79:b3:
26:55:8a:ad:15:5b:12:87:8c:4b:c5:3d:c6:32:21:
2a:34:17:51:8a:4c:ff:b1:a0:e1:27:a3:53:2b:ef:
d2:bb:87:17:ca:bb:6f:9a:b3:dc:f2:74:68:2b:eb:
11:0f:1e:13:e4:51:f3:9c:62:de:45:41:45:ed:f7:
6d:d3:2b:9e:af:8d:9d:d2:e9:e8:8f:2d:c5:ba:5c:
23:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4F:5E:FE:8E:58:44:4A:C7:5A:F0:19:D6:F4:EA:FF:D0:5D:D3:F9
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5k9e_o5YRErHWvAZ1vTq_9Bd0_k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:d3:a7:95:17:26:d4:b5:81:70:92:11:d7:d7:04:ef:8d:3b:
72:70:c8:fe:7d:f4:4c:57:5b:5e:68:cf:bc:40:9c:17:51:3f:
2d:75:57:89:cb:30:8f:a3:2c:dd:f9:3c:0e:3f:f6:6a:11:b1:
80:d4:07:90:a9:df:72:13:9a:85:f0:4b:15:e5:e5:ea:e5:da:
20:19:b7:8f:79:28:1b:34:a8:5e:58:d4:18:aa:51:37:5e:47:
6b:35:2c:fb:7a:3f:dd:bb:30:6b:49:b8:34:e7:39:87:78:11:
6f:d9:d0:1b:03:0f:61:19:33:46:ec:70:e2:f1:51:a0:66:3c:
08:25:f8:4c:23:ba:41:db:1b:67:77:be:d4:1e:35:3f:92:4b:
48:f7:65:eb:d2:ba:ca:66:a9:3c:f5:a5:2c:18:26:38:6f:74:
bd:ef:11:a6:af:23:6c:af:02:fd:d8:b3:23:3c:47:75:09:2f:
d6:84:f6:34:3e:58:39:dc:94:46:37:87:c8:b5:4a:38:05:de:
0c:1d:73:30:6c:d7:8a:cc:f8:8e:8d:6f:43:72:09:94:08:85:
48:b9:4b:cc:d9:76:f3:ca:35:7b:91:80:c2:aa:77:9c:70:bb:
81:36:28:17:28:df:56:a7:15:01:8b:f6:b1:6c:90:6a:18:1a:
cd:f6:6d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:12:43 2025 by rpki-client