Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/7x9ruZssdMvi9UCjOhKAd8faZoE.roa
File: 7x9ruZssdMvi9UCjOhKAd8faZoE.roa (raw, json)
Hash identifier: rw5G2Lcu2CCR8SKh6tRBb5Y4VKyIbHj4sGbk9nBQzZU=
Subject key identifier: EF:1F:6B:B9:9B:2C:74:CB:E2:F5:40:A3:3A:12:80:77:C7:DA:66:81
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1572
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7x9ruZssdMvi9UCjOhKAd8faZoE.roa
Signing time: Wed 04 Jun 2025 16:09:19 +0000
ROA not before: Wed 04 Jun 2025 16:09:19 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5490 (0x1572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 16:09:19 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=EF1F6BB99B2C74CBE2F540A33A128077C7DA6681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:b8:c3:ce:5c:7e:9d:f2:a0:25:26:8d:81:
b0:91:44:b9:6c:2f:b9:f3:06:c9:25:4b:df:51:57:
33:7d:0e:9b:77:30:11:59:b6:ae:0f:bd:cc:3a:87:
fe:8a:f6:12:16:15:9d:f2:f8:5e:92:b6:31:28:5f:
6f:59:2b:da:bc:f7:6a:5d:2e:0c:dd:30:d7:e1:24:
78:e1:5f:57:d6:9d:e2:51:c2:95:af:ef:b0:6e:50:
f4:39:63:c0:7c:ba:5c:32:f9:23:e4:74:c9:e6:e4:
23:f9:0b:1c:7d:cb:20:bc:a6:d2:d5:d1:26:8d:7d:
89:fb:ef:90:3d:97:5f:ee:f7:07:c8:43:2f:c9:37:
8c:d6:f2:a6:7c:49:e6:fe:5f:b6:b2:32:60:78:e4:
39:94:4f:5b:c9:a1:3e:3b:fc:33:c8:d1:aa:d5:09:
ef:6a:41:b4:70:4c:36:3b:56:6e:af:2d:b8:dc:de:
48:7a:8e:0d:64:2b:24:ae:12:40:93:40:df:a1:cf:
50:7e:b6:44:2c:f9:4c:c1:e6:07:31:05:e3:1b:cd:
d2:b5:4c:7a:fc:8c:3d:78:de:a2:57:17:20:8b:66:
25:e6:af:e2:45:3e:f9:f2:cf:26:98:f9:70:02:ef:
6e:36:11:e4:8e:15:4f:b9:b4:31:6c:05:45:f0:de:
e6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1F:6B:B9:9B:2C:74:CB:E2:F5:40:A3:3A:12:80:77:C7:DA:66:81
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/7x9ruZssdMvi9UCjOhKAd8faZoE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:cf:7d:73:d1:4d:96:c9:47:00:19:9c:ee:d9:9f:d8:35:1c:
8c:0c:07:9f:bc:89:3b:34:77:e4:5e:4b:4d:e4:a4:5f:ab:52:
f8:d0:3f:a3:98:2e:65:5c:32:24:5c:c1:cd:a1:45:6d:ed:e7:
b3:4a:a7:8a:6c:30:ec:41:d1:1c:ed:70:01:43:88:10:d6:11:
ea:dd:11:cd:9a:ff:5b:d9:43:85:0c:b6:0c:45:a4:46:f1:27:
39:42:9d:7e:3c:7e:99:60:0b:ac:5a:4b:fc:9d:4e:ba:27:d2:
c5:2e:e7:5b:40:ca:ed:ae:77:f4:ba:ec:cb:c9:83:99:e4:33:
de:77:e1:69:f6:6c:a7:cd:25:03:bd:50:6b:f4:93:ab:13:5e:
f9:31:64:dd:7a:91:91:c0:af:e2:bc:91:ec:0a:31:aa:3a:33:
c4:42:a4:a2:01:8b:9f:25:dc:c4:33:54:30:63:a0:a8:93:20:
79:71:4f:8c:13:c9:93:45:db:c4:3f:84:6f:e1:f2:00:3b:17:
c6:6e:e6:90:d9:c5:8d:93:ac:3b:ad:10:4a:09:3d:12:94:be:
0a:4b:06:01:82:81:9c:76:ab:c0:3e:21:31:1c:68:fe:41:9c:
d2:f1:8b:91:b9:6e:bc:1c:f7:42:b7:73:f8:51:de:8f:18:55:
b7:39:98:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:13:59 2025 by rpki-client