Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/6MYFqQsy9VmFSW5pZ3oFBb06dFA.roa
File: 6MYFqQsy9VmFSW5pZ3oFBb06dFA.roa (raw, json)
Hash identifier: YelW8kBzw3KB7AQZdyJmm0UXn7YcgqTH40zNqr9eLtM=
Subject key identifier: E8:C6:05:A9:0B:32:F5:59:85:49:6E:69:67:7A:05:05:BD:3A:74:50
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0472
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6MYFqQsy9VmFSW5pZ3oFBb06dFA.roa
Signing time: Tue 13 May 2025 00:09:08 +0000
ROA not before: Tue 13 May 2025 00:09:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1138 (0x472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 00:09:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E8C605A90B32F55985496E69677A0505BD3A7450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d2:83:71:bb:80:58:df:4e:08:01:e0:24:31:
c6:e2:93:65:bc:ae:4d:95:07:5f:d6:19:d9:04:e4:
08:ae:f9:82:fe:40:3a:dd:98:62:c4:91:d9:ac:9a:
0f:33:ae:17:47:bb:c5:63:d3:6f:5b:d7:59:9a:36:
0f:ae:70:37:a8:52:a1:40:0d:f3:fe:a8:96:65:c1:
38:00:84:8d:64:10:2f:40:ca:d5:d9:8d:af:4d:a9:
cb:36:c2:9c:3c:e6:1d:10:8f:37:c9:cb:2b:5e:5a:
b7:6d:2f:bf:a3:d6:ab:73:9e:75:b8:fc:12:ae:88:
5b:fe:62:33:13:6d:aa:00:2d:82:6f:d1:88:fe:38:
85:38:a6:fb:79:2a:be:96:5c:21:3d:1b:c4:a3:2f:
8c:c3:34:82:46:fb:22:ec:18:31:21:89:7a:ad:2e:
33:44:61:ce:67:52:c4:51:13:b1:08:b4:4f:b2:0b:
32:e7:d1:51:ad:a2:3c:43:82:45:f4:88:75:51:f3:
71:71:ed:1f:f8:ca:6a:51:75:fb:ce:08:16:64:86:
40:55:b5:85:ea:8e:af:c1:23:f1:7b:f9:5e:9d:15:
a2:d5:b7:d3:76:ce:6e:0b:57:03:6d:37:2b:3e:69:
89:4b:b2:5d:e0:31:c9:72:8b:bb:55:9a:fb:00:04:
ac:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C6:05:A9:0B:32:F5:59:85:49:6E:69:67:7A:05:05:BD:3A:74:50
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6MYFqQsy9VmFSW5pZ3oFBb06dFA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:66:33:b7:7f:ef:d4:5c:54:5f:ac:4a:38:98:e7:b4:f2:91:
b8:6b:36:48:e1:ff:c4:a0:e8:d0:84:1e:ce:18:b9:39:25:69:
13:a1:eb:8f:c2:bd:0e:ba:64:1a:3b:cc:21:29:f2:ca:63:39:
e4:e1:de:a6:d1:bd:f5:8e:bc:6d:63:10:ce:d9:b4:c2:27:6d:
5b:8a:3b:0f:cc:32:0e:f4:e0:c3:48:db:7b:07:b8:2c:72:91:
e8:36:01:08:92:9a:94:af:94:bf:f3:20:15:3d:b6:9f:01:da:
60:45:f6:3b:af:ea:df:e2:a4:33:de:bb:c4:19:42:91:28:e4:
46:12:70:4b:d6:c6:53:ae:a4:c3:93:04:12:75:a7:d2:38:e4:
f3:da:f3:10:10:45:52:b4:06:1f:23:07:82:b7:41:f0:23:dc:
69:a7:31:d4:02:c8:ab:fc:e8:77:0b:59:e2:dc:32:5d:50:16:
fc:0a:fd:5a:08:af:02:2d:59:0b:6a:49:24:34:a7:4c:de:0c:
8d:81:04:66:8b:2c:e5:ed:1e:7b:ab:20:15:4a:3b:1d:cf:fe:
64:1b:b5:b6:b5:6a:10:76:61:33:7d:d9:61:51:7a:20:12:71:
bc:11:e8:ae:91:17:60:07:63:15:8f:2e:fb:7a:3e:ec:5b:e3:
6f:30:1e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:50:45 2025 by rpki-client