Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/94xrvDrRviWXmpTsxGDXgye1uhU.roa
File: 94xrvDrRviWXmpTsxGDXgye1uhU.roa (raw, json)
Hash identifier: kTTD28OuyePz4PDENPt6SPgBfypAMhxerqr99OWU10U=
Subject key identifier: F7:8C:6B:BC:3A:D1:BE:25:97:9A:94:EC:C4:60:D7:83:27:B5:BA:15
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C42
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/94xrvDrRviWXmpTsxGDXgye1uhU.roa
Signing time: Fri 23 May 2025 10:08:27 +0000
ROA not before: Fri 23 May 2025 10:08:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3138 (0xc42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 10:08:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F78C6BBC3AD1BE25979A94ECC460D78327B5BA15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:79:b3:1c:bc:df:2d:d2:b3:eb:a9:77:37:
5f:da:46:c9:5c:ac:c3:81:e7:43:dc:56:a8:29:ea:
bc:44:6a:79:6e:a8:b4:45:a9:f0:0f:2a:22:4b:8f:
7b:b5:8a:9a:84:4f:84:15:f9:92:2c:f8:c4:00:d9:
5f:10:49:ee:01:65:a2:08:d4:e7:38:89:25:07:04:
4e:47:80:98:17:2d:f5:e3:fc:a8:37:84:c7:37:90:
04:ac:08:c8:da:65:fb:cc:ac:8b:09:10:49:0a:48:
44:42:be:f7:71:a0:5b:f1:fc:a2:b7:38:8d:60:51:
70:40:2b:37:af:4b:86:2c:7c:7e:9a:cd:8c:82:3f:
59:e5:81:c1:ca:81:dd:b5:ae:69:77:c4:42:94:57:
61:49:6b:14:2f:c4:92:41:fe:dd:2d:d1:84:7d:ac:
5f:e5:8d:2c:28:f2:4b:f6:0a:ce:76:1f:8a:37:b4:
7a:4c:e5:24:d9:0f:83:fe:45:77:8b:c6:a3:8a:43:
ce:28:6d:e8:09:d8:e2:51:49:7e:95:31:31:64:95:
46:d7:e9:2c:56:82:77:a6:a0:32:2b:c8:ec:e4:ae:
e1:73:07:24:a5:a0:a6:b4:a6:0c:5c:4a:39:78:af:
b7:ed:ac:ad:74:12:e4:18:78:f9:65:75:4e:34:b4:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8C:6B:BC:3A:D1:BE:25:97:9A:94:EC:C4:60:D7:83:27:B5:BA:15
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/94xrvDrRviWXmpTsxGDXgye1uhU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:dd:20:74:94:da:c4:a0:23:c6:cf:02:ea:8b:84:e6:c6:fc:
0a:64:f3:d9:09:ef:6c:3e:b9:cc:02:7c:f7:65:2f:4c:03:da:
cd:40:2d:ac:b2:df:ad:c1:68:cd:ca:8e:e1:e4:63:6e:ad:5d:
4d:72:66:b5:86:b7:b8:bb:ca:e5:82:ac:15:77:8a:62:5f:2d:
48:6d:4f:64:05:c6:9c:0d:4c:ce:2e:d9:66:35:25:e8:80:c4:
a4:5f:08:4c:44:23:de:73:d2:fb:65:66:ee:65:42:bd:8d:21:
70:a9:f2:b5:2e:29:78:26:97:0e:c6:e9:19:93:b1:8d:20:be:
d7:a8:32:97:65:e0:2e:cd:0b:b1:a1:bb:15:33:e1:65:a2:f1:
37:4c:ff:cd:c2:48:90:1a:87:6c:1c:e3:45:93:26:61:cf:89:
e9:bd:84:df:6d:ed:6f:4d:ac:99:57:98:63:3d:b5:ed:de:c5:
2b:88:49:85:19:52:1b:ed:d5:0d:f4:9b:29:b0:3a:e2:aa:e4:
9f:32:07:cf:d2:4e:84:e7:74:a4:66:cc:cb:d7:c6:69:95:65:
1a:41:5f:6c:3a:92:28:da:24:4e:a4:91:9a:77:35:83:4d:e1:
c3:e9:8d:37:0e:ea:a5:c4:b3:a8:ed:16:d4:98:f8:7a:ad:ee:
97:c3:75:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:31:24 2025 by rpki-client