Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/7uK0ih3ngulj_DHkIgvpcWnFqqw.roa
File: 7uK0ih3ngulj_DHkIgvpcWnFqqw.roa (raw, json)
Hash identifier: WuQZ37lQjIxFWHTC7gWy1yN278E4YuuSASKW7MKH6Kk=
Subject key identifier: EE:E2:B4:8A:1D:E7:82:E9:63:FC:31:E4:22:0B:E9:71:69:C5:AA:AC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0ECE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7uK0ih3ngulj_DHkIgvpcWnFqqw.roa
Signing time: Mon 26 May 2025 19:38:43 +0000
ROA not before: Mon 26 May 2025 19:38:43 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3790 (0xece)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 19:38:43 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EEE2B48A1DE782E963FC31E4220BE97169C5AAAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:70:a5:39:14:8d:60:8c:61:2e:09:42:0d:b8:
f3:17:ec:4c:00:b8:ae:61:ce:20:03:52:1b:62:b2:
ed:51:97:86:fe:22:c0:ad:7d:cf:fb:fa:d1:2e:26:
2b:87:57:24:e6:60:50:f7:2a:5d:86:22:6f:55:1a:
22:0b:61:1b:96:66:fe:c8:9c:ca:aa:4c:81:8d:25:
cf:b1:12:39:53:2b:86:26:ce:15:f7:31:51:55:c2:
b5:6f:40:5c:3a:3d:de:d4:5b:39:73:dd:23:4b:ed:
aa:3d:a1:69:df:25:93:8b:4e:3c:7b:12:2d:6c:29:
69:39:72:db:c6:55:64:bf:7b:8c:d5:50:77:45:fb:
5e:02:54:07:10:6e:94:4d:52:2c:95:66:aa:7b:cb:
37:ef:f7:ad:63:54:85:fc:3b:d9:b8:90:e1:8a:ec:
a8:82:e0:ce:17:21:51:61:0e:9f:7a:8c:cc:68:ad:
b6:2b:50:e7:cf:95:b3:37:da:b3:36:7f:24:56:94:
72:02:34:52:fd:4e:cc:dd:1c:b6:dc:ef:77:9a:44:
63:a6:12:e0:33:75:ed:19:74:5a:09:24:a3:90:fe:
cc:49:8e:96:e2:a5:51:ab:28:f2:18:c5:9f:c2:6b:
de:24:56:6f:8a:d2:61:c9:2d:c0:30:52:e7:46:3b:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E2:B4:8A:1D:E7:82:E9:63:FC:31:E4:22:0B:E9:71:69:C5:AA:AC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7uK0ih3ngulj_DHkIgvpcWnFqqw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:84:83:f2:a8:43:20:81:25:40:66:99:a7:96:82:70:74:d3:
c8:02:1c:92:28:18:d4:2c:79:26:b6:28:75:ab:0e:d1:08:43:
09:eb:b9:48:dc:23:52:a9:f2:a9:b5:77:63:3f:57:5c:da:3f:
7b:9d:a1:5e:b2:1d:5b:87:7f:e9:8e:8a:87:28:5a:3c:91:11:
ef:1b:5c:1d:e4:e4:05:ed:27:50:4b:bf:2d:c1:33:c7:b3:29:
a7:0d:16:d2:d6:26:b8:68:d7:72:d7:f8:53:17:ad:95:18:66:
d4:4c:15:5b:75:e4:23:2b:fc:40:47:fd:42:16:71:eb:d3:26:
df:1b:89:3b:0b:4b:57:de:d9:81:ba:5a:a0:f6:d7:c2:16:7c:
ee:e3:8f:43:1b:89:a2:c6:15:d4:b6:0b:c3:44:07:7f:ad:1c:
22:68:49:de:7d:4a:70:68:22:50:4e:41:01:5c:1f:69:74:b4:
70:a5:fc:4e:0a:25:0b:e4:5f:0c:72:8b:0e:c4:ba:c1:0d:02:
d9:f5:31:11:f9:1f:96:40:54:f9:33:67:ef:13:12:f5:70:10:
0c:5c:08:59:1a:bf:e5:52:89:41:c5:21:24:85:3e:b2:8d:19:
d3:76:30:ab:ef:a1:63:9c:51:da:a7:93:17:fb:5a:38:a6:a0:
8d:38:b8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:30:15 2025 by rpki-client