Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/AUqRTecx-lGNB8WSYCbnLXSnAK0.roa
File: AUqRTecx-lGNB8WSYCbnLXSnAK0.roa (raw, json)
Hash identifier: b3h7Ph35VvT3npcvsmgir0Pf5/BqN03tgbdCageK7aE=
Subject key identifier: 01:4A:91:4D:E7:31:FA:51:8D:07:C5:92:60:26:E7:2D:74:A7:00:AD
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E46
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AUqRTecx-lGNB8WSYCbnLXSnAK0.roa
Signing time: Mon 26 May 2025 02:38:39 +0000
ROA not before: Mon 26 May 2025 02:38:39 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3654 (0xe46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 02:38:39 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=014A914DE731FA518D07C5926026E72D74A700AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:2b:c1:d3:91:58:3c:f4:65:f1:92:3b:74:
1b:24:b7:9a:ad:88:1f:26:1b:e5:48:dd:7a:6d:a9:
72:9d:65:c3:c5:b4:f8:77:19:86:a4:5d:4d:22:01:
2c:a0:c7:2f:19:2c:c6:eb:c1:b4:48:18:f8:ac:02:
f6:ab:3d:90:9c:16:2e:eb:fa:75:ea:ea:22:72:f0:
5d:8b:d2:23:5d:1f:e4:33:8e:02:93:52:a2:a9:f1:
3b:dc:71:d4:11:e4:b0:08:19:33:fd:db:3b:86:db:
d0:b9:00:ce:93:d1:43:8d:42:09:a5:16:0e:7a:72:
d3:24:29:e1:d4:9e:0b:86:c1:ee:ae:7f:60:6b:24:
07:54:45:95:c1:08:22:14:8e:d7:b2:03:81:0f:27:
84:ec:ab:da:1c:db:ca:ee:00:e9:60:72:0b:98:c5:
32:dd:f8:b5:f0:9b:a2:62:0b:31:3d:6b:1e:16:d9:
05:71:de:e5:b4:46:cd:20:b8:e8:06:b5:8a:fa:3b:
77:55:e3:09:b4:eb:4e:86:2f:12:2a:5e:55:dc:c9:
a0:e9:af:25:21:f3:67:97:d4:0e:59:11:ac:5c:59:
98:7f:5e:87:5d:59:c4:d6:33:48:b0:18:f0:05:51:
16:58:4f:bc:4a:93:93:8f:b9:bf:58:a6:0a:0a:2f:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4A:91:4D:E7:31:FA:51:8D:07:C5:92:60:26:E7:2D:74:A7:00:AD
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AUqRTecx-lGNB8WSYCbnLXSnAK0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:ad:d2:3a:f2:f9:33:a6:04:40:86:d7:3e:22:5d:a9:f2:5a:
ad:b8:62:ce:11:d8:de:51:10:d5:c2:28:54:ab:76:47:44:13:
60:3e:98:2e:6e:f1:ae:c3:38:c8:e9:0b:1f:55:ec:aa:88:e3:
8b:98:27:f2:86:fd:16:47:97:9b:2d:dc:c1:b4:fc:14:32:34:
84:04:b4:ee:30:46:9e:67:70:5c:1b:27:b5:83:1f:ec:f9:9a:
ce:52:60:68:15:6b:39:9e:aa:f2:be:39:41:83:bf:e7:6f:95:
05:0e:13:7c:1e:0e:8f:64:46:43:97:b6:ba:4d:c0:04:c0:b8:
d7:04:9a:9f:98:cb:e8:34:cd:5e:c6:e4:0c:c4:19:ee:1d:61:
53:2d:05:d3:52:d6:42:fe:f7:01:e4:e9:74:54:b1:02:40:be:
fa:3f:e0:ee:06:56:e2:48:d6:5a:61:7b:12:f2:bb:db:e7:3c:
49:1b:74:9a:87:b0:bf:66:12:1f:e4:2a:aa:ef:d9:07:d1:b4:
01:2c:c4:e2:83:ef:89:50:ae:2a:20:f2:8f:0b:c4:dc:01:84:
9f:dc:48:a0:e4:9f:11:28:8c:5f:56:51:3b:90:dd:c8:4a:42:
70:6a:b2:66:6d:b9:d6:4e:65:fa:23:89:5e:d0:96:1e:e4:c3:
8a:80:82:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:19:44 2025 by rpki-client