Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/7NPXK5lrJpGU5l29GNNTZXgwVKo.roa
File: 7NPXK5lrJpGU5l29GNNTZXgwVKo.roa (raw, json)
Hash identifier: irs4/LCr/Sr41A8nSgXM9vkUvoi9VHXo3qq6hdZZvmw=
Subject key identifier: EC:D3:D7:2B:99:6B:26:91:94:E6:5D:BD:18:D3:53:65:78:30:54:AA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07DE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7NPXK5lrJpGU5l29GNNTZXgwVKo.roa
Signing time: Sat 17 May 2025 13:38:12 +0000
ROA not before: Sat 17 May 2025 13:38:12 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2014 (0x7de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 13:38:12 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=ECD3D72B996B269194E65DBD18D35365783054AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:82:ee:37:04:c9:ba:d7:52:2c:2e:ad:0b:86:
b9:32:13:63:27:da:23:a4:b3:19:f7:9c:4c:7c:e2:
8e:f6:00:b3:87:65:19:2a:93:0c:80:7e:bd:70:45:
8c:fd:c3:c9:47:69:5d:40:fc:6a:2e:07:b0:75:38:
39:d3:16:5d:d8:2f:51:c1:65:7d:8e:fc:22:2d:fe:
fb:3a:5b:11:c3:61:03:97:51:65:a8:06:6f:3d:28:
41:44:ca:a1:f9:22:5a:7a:8d:fe:ee:d8:be:cf:98:
d3:44:8d:a8:86:30:10:ed:c3:ae:f5:d8:9e:b1:6b:
30:d1:0e:ba:7f:fa:aa:a8:21:2f:f1:a9:97:d5:0f:
b5:e9:fe:69:99:cb:3e:f3:fa:89:5b:b4:69:e6:31:
28:07:72:ed:bf:b3:b7:e2:1f:c7:ca:3d:e1:1e:d7:
a9:50:31:d6:56:c6:bb:71:8c:94:6a:ba:0a:bd:f4:
b3:4f:5e:65:4d:99:03:4f:96:f1:4c:d5:ad:9a:ef:
27:14:06:84:74:d1:2c:a8:f4:15:29:c1:82:bf:4e:
d5:b4:1f:de:5d:4b:81:b6:b6:41:75:c8:85:dd:f9:
b6:5d:8a:37:8e:3b:b8:e8:5f:25:2e:98:0f:14:56:
b7:b9:f4:29:0c:0b:98:43:68:1d:75:72:be:89:c3:
16:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D3:D7:2B:99:6B:26:91:94:E6:5D:BD:18:D3:53:65:78:30:54:AA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7NPXK5lrJpGU5l29GNNTZXgwVKo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:c4:1f:d3:c0:c9:9a:5f:40:55:54:2d:4d:20:bc:e6:99:0b:
5f:af:d4:49:10:72:3f:8e:10:a2:76:e4:40:fc:c1:12:b1:62:
6d:98:fd:cc:aa:54:3c:8a:e6:51:3a:dd:96:de:c9:dd:85:76:
3a:f9:8b:4d:cb:c8:86:36:f2:23:6c:5f:0a:a7:67:4a:dd:e1:
c7:de:6c:13:b7:c9:d2:d4:ab:59:e9:f7:65:fd:20:a7:3d:52:
70:1c:c9:43:88:d3:4a:df:38:26:00:9c:21:09:d5:42:c5:2f:
57:f4:d3:00:87:b1:c3:06:c5:b6:3b:72:75:ce:7a:36:57:2d:
d9:7a:8b:d5:1d:07:ea:98:7d:03:18:08:e3:6f:6d:95:cf:57:
76:a1:46:e0:5a:c6:23:90:ed:35:a9:54:40:ce:a6:3a:51:8f:
1b:90:80:70:c9:95:9e:4e:45:4e:ce:dd:ac:e5:98:67:1c:49:
4a:f9:6d:88:41:6e:dc:8e:5c:f7:c9:af:ab:7f:bb:99:65:dd:
9a:2a:d5:cd:42:06:7d:4f:18:3c:e5:32:8f:f0:1d:6c:04:b3:
f2:95:15:01:89:aa:95:20:a0:10:54:c9:8e:68:3d:b7:1d:30:
81:ba:bf:91:20:cd:ce:db:ba:81:59:ce:ba:a6:ee:61:71:83:
0d:e8:05:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:15:46 2025 by rpki-client