Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/8wmzamv9EUS80MionevPSar2uqA.roa
File: 8wmzamv9EUS80MionevPSar2uqA.roa (raw, json)
Hash identifier: w6Y3dCAoD3cPcIf3lTSxDgOjP8CqJva1QZDbxprJI7I=
Subject key identifier: F3:09:B3:6A:6B:FD:11:44:BC:D0:C8:A8:9D:EB:CF:49:AA:F6:BA:A0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1596
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8wmzamv9EUS80MionevPSar2uqA.roa
Signing time: Wed 04 Jun 2025 20:39:22 +0000
ROA not before: Wed 04 Jun 2025 20:39:22 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5526 (0x1596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 20:39:22 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F309B36A6BFD1144BCD0C8A89DEBCF49AAF6BAA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:8a:ae:d4:2f:ef:83:61:1b:c8:2a:51:d8:
2e:5f:7c:3a:d7:d7:41:4c:0b:dc:22:3d:0b:6a:82:
14:8d:fb:ad:63:98:3d:3c:ef:f0:71:4e:c1:a8:26:
90:34:9c:e3:5d:c3:01:96:a3:ca:05:f3:3e:1e:b6:
8a:54:17:cf:12:ad:c6:71:d8:14:99:73:ac:d5:bc:
63:e7:c2:b9:f3:49:8a:e5:28:ca:5e:73:78:ac:26:
87:ec:bc:33:3d:25:1f:0b:2b:62:52:3d:4e:6e:0f:
06:ff:ed:23:a9:9f:d6:2e:36:1d:04:1b:93:7c:ff:
f5:a6:6e:46:3e:81:3b:45:d1:05:75:79:3f:6f:31:
2d:25:c5:6f:9e:e6:3d:fc:c5:7b:2c:51:9a:21:31:
27:11:e0:03:3b:37:bc:f8:53:bd:2d:18:d8:0b:5d:
f1:aa:8f:9d:d4:ea:40:d6:f5:6d:27:40:41:50:9f:
76:ce:68:b1:c4:35:67:37:00:78:4a:14:0a:c2:8f:
bf:9e:78:87:c0:6c:07:8b:b1:b4:9c:d0:91:ed:a4:
74:58:3d:18:f9:b0:14:d5:08:b4:d3:19:25:b1:d9:
12:08:8f:61:d0:16:ac:80:c0:b4:27:73:8c:ea:c9:
0f:c4:ee:66:c6:66:38:85:13:f7:af:3c:18:ef:a4:
8a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:09:B3:6A:6B:FD:11:44:BC:D0:C8:A8:9D:EB:CF:49:AA:F6:BA:A0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8wmzamv9EUS80MionevPSar2uqA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:ae:e7:ae:f0:81:fd:c2:66:c7:37:af:9f:03:fa:e6:63:80:
88:7f:52:ca:0f:a8:d9:55:d0:65:73:cc:e3:cc:b9:7d:50:f3:
9b:fb:2b:13:c3:79:5e:f8:09:67:8e:2c:b4:9b:6c:aa:29:46:
70:f9:e7:dd:25:20:90:29:df:ab:73:8d:c1:d0:fe:87:3a:f5:
bf:9b:04:84:db:49:f8:92:11:e1:1a:8a:26:b3:5a:80:c8:99:
c5:69:a4:f8:1a:74:0b:02:c8:c3:c2:68:73:ae:46:7b:50:25:
57:c4:15:92:fd:4f:c3:a5:bb:26:50:08:d0:f7:9e:97:03:e2:
f7:2d:67:d1:51:3b:23:55:df:19:dd:98:af:38:7b:7e:03:e2:
e6:cb:96:43:a4:cc:00:61:6a:a1:17:1f:81:b1:a9:c8:ec:87:
00:c5:5d:d7:9a:3c:bc:7f:da:dc:31:f9:c2:08:9d:53:09:61:
07:86:5d:1a:38:92:88:84:be:14:cd:85:64:d5:b8:90:ff:64:
20:29:31:5e:96:45:bd:cb:5d:3c:23:02:36:17:36:1e:86:51:
e6:c7:95:db:fd:a5:d2:18:87:91:17:cc:0b:05:90:a8:32:08:
71:66:1c:a3:d1:60:7d:b7:bd:87:69:0a:45:fd:41:fb:4f:df:
39:1a:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:35:24 2025 by rpki-client