Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/AHZI9hbrWUqGxSq5HyDulZI7SqE.roa
File: AHZI9hbrWUqGxSq5HyDulZI7SqE.roa (raw, json)
Hash identifier: YAUDaPaA44z5YF7hDhqmbKAwRvT7H8aomJ3f97Vt4ME=
Subject key identifier: 00:76:48:F6:16:EB:59:4A:86:C5:2A:B9:1F:20:EE:95:92:3B:4A:A1
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1F1E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AHZI9hbrWUqGxSq5HyDulZI7SqE.roa
Signing time: Tue 17 Jun 2025 13:40:19 +0000
ROA not before: Tue 17 Jun 2025 13:40:19 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7966 (0x1f1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 13:40:19 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=007648F616EB594A86C52AB91F20EE95923B4AA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:22:8d:e3:2e:f6:ea:ad:75:96:e5:7a:c7:0f:
d6:ae:e6:a8:3b:79:01:af:57:a6:43:df:a2:c8:b5:
0b:65:9c:2d:8b:e4:b7:c5:0a:02:5c:07:74:d7:8d:
7b:ad:ad:e0:8e:b3:36:59:5d:1b:53:a6:0d:05:30:
30:d3:4e:30:43:ee:98:ee:41:c3:6f:e5:4d:70:a1:
15:48:f7:0d:14:26:1f:0c:f0:59:e2:05:c9:67:c0:
79:a7:01:71:48:9c:c8:c4:21:d0:b0:80:0e:da:03:
aa:e5:8a:91:f4:81:f7:67:a0:68:67:d7:ad:98:b1:
38:68:20:98:89:bb:da:d7:9d:90:c9:d5:96:d6:07:
32:72:4d:16:63:81:70:24:a0:49:bc:41:6f:1a:63:
de:ba:a5:ff:67:0a:90:7f:77:de:f8:d7:94:7a:18:
c7:de:0e:6d:5b:de:27:41:7f:fa:1a:10:59:fe:fe:
7f:bd:aa:1c:c8:6b:f4:b8:e2:a4:bc:30:85:48:90:
99:1a:28:9d:e7:f1:bd:f0:68:7f:28:73:21:8b:0d:
86:15:88:38:98:89:42:d3:c3:02:84:cf:ba:6c:f1:
ad:b9:0b:5a:63:fd:f0:f5:6b:35:6d:06:63:a9:fb:
17:62:39:fb:1a:35:0f:de:69:8a:5b:75:c5:e2:a8:
4b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:76:48:F6:16:EB:59:4A:86:C5:2A:B9:1F:20:EE:95:92:3B:4A:A1
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AHZI9hbrWUqGxSq5HyDulZI7SqE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:19:aa:53:6e:e7:e1:c0:a3:68:70:7e:65:05:ce:76:be:3f:
c2:3a:80:7b:02:01:5f:00:d5:97:cc:7c:a4:32:13:2a:48:3c:
2d:71:b6:c9:dc:6e:c7:ee:e6:1b:b5:ae:e8:9e:88:27:13:ff:
10:29:4f:63:7c:ca:27:11:a0:ae:db:42:29:9d:b7:8f:0f:0c:
eb:fd:4d:b1:f3:a6:d6:f9:04:f7:f4:87:94:a6:82:f9:a7:b1:
64:36:3e:53:00:33:33:2d:eb:b8:ee:e1:ee:3d:f3:7a:40:98:
2e:4d:40:02:90:1d:e9:d6:86:12:88:ae:99:03:cd:07:72:60:
86:49:cd:94:da:90:b1:8e:8f:92:11:e5:18:ce:e6:0d:ca:98:
8f:c3:c3:43:4a:b2:ae:6a:df:ca:6e:1c:67:80:28:51:c6:5a:
0c:1c:ae:47:3f:bd:9b:a0:c0:14:8e:ff:62:75:53:43:fd:01:
da:d3:ac:a9:aa:93:a3:fb:69:4d:af:f7:c3:dc:c1:e6:bc:d3:
19:e3:8e:46:e2:60:bc:0c:5f:c6:50:5f:f3:1c:7f:94:a6:09:
ad:f7:ee:b6:02:81:56:9f:f6:bb:92:62:ed:6a:b6:4b:64:38:
b1:d8:2f:00:c7:d3:ae:c9:a1:2b:2b:f0:95:b6:4d:47:e9:13:
d7:71:19:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:14:22 2025 by rpki-client