Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/AYPilgJk65qt5gkgOFqD0JFKpG8.roa
File: AYPilgJk65qt5gkgOFqD0JFKpG8.roa (raw, json)
Hash identifier: Elbw+y7O77OA/ORJnxhehZyzDT3zkTiFXZya3VMc8jc=
Subject key identifier: 01:83:E2:96:02:64:EB:9A:AD:E6:09:20:38:5A:83:D0:91:4A:A4:6F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B7A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AYPilgJk65qt5gkgOFqD0JFKpG8.roa
Signing time: Thu 22 May 2025 09:08:57 +0000
ROA not before: Thu 22 May 2025 09:08:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2938 (0xb7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 09:08:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0183E2960264EB9AADE60920385A83D0914AA46F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:71:27:8e:ec:11:0b:4e:d9:be:51:5b:c0:
e4:aa:8f:09:0d:9f:4c:4b:0d:3c:f3:a4:12:92:85:
92:4a:ad:33:14:b2:eb:6f:b6:51:4c:52:8e:fa:5d:
c9:24:09:af:a2:43:98:d1:34:05:95:79:fa:da:1f:
58:93:7c:fb:cd:cd:be:c5:e3:5c:ca:d6:86:be:f9:
c5:69:5c:56:00:b3:8d:c1:d3:9f:d3:55:06:a0:2d:
57:c3:7c:02:45:02:6f:d0:c4:35:b6:3e:4a:3d:20:
f3:19:0a:94:8e:96:4c:fd:1e:15:35:fb:df:fd:8d:
91:d2:65:59:af:73:bd:05:26:e8:93:26:e3:ec:12:
04:7c:72:a9:1a:c7:b1:2c:79:2f:7c:01:b5:89:c5:
95:8e:ad:da:e2:cb:84:b8:e0:60:2d:61:2c:70:ef:
da:ed:37:f2:30:0a:38:65:f2:85:6b:7c:27:b8:7e:
71:7e:e6:9c:6f:34:82:c1:fa:36:24:b8:69:71:bb:
d4:85:53:88:f5:bd:64:17:5c:a0:71:4e:96:4e:08:
2f:c6:1e:ce:ee:4f:90:48:61:00:e0:00:0e:0c:9d:
e8:5a:01:de:f2:77:00:81:07:57:2c:e4:28:d3:3f:
79:7b:0c:32:4a:e9:d6:81:76:cc:58:ec:8f:a9:6b:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:83:E2:96:02:64:EB:9A:AD:E6:09:20:38:5A:83:D0:91:4A:A4:6F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/AYPilgJk65qt5gkgOFqD0JFKpG8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:b0:58:65:b8:2d:83:73:32:f2:e3:f2:6c:bf:e3:94:d3:94:
ce:22:8a:37:a9:34:87:be:e6:05:0d:26:b5:b8:0e:40:b1:15:
0e:cd:5f:f3:e3:15:cc:04:75:82:a7:3c:63:5c:24:b2:74:94:
27:ef:e4:50:5e:10:ec:46:e1:da:62:c0:62:56:01:84:73:ef:
f2:66:5a:25:b5:db:c0:9d:8e:61:ba:c3:73:a8:63:43:32:a3:
fc:d7:6e:cb:b5:d7:35:7a:a5:78:10:d9:96:57:33:63:d4:a6:
e4:b8:49:42:98:d3:24:ed:4a:18:9c:2a:b5:de:fa:38:42:b0:
2c:61:d0:2c:51:3d:84:6d:9f:fc:f5:f5:37:1e:be:da:55:6a:
9c:b6:0f:68:37:7b:78:76:63:de:66:56:52:e6:c4:3b:da:54:
ab:64:8e:03:28:44:26:1e:5a:69:61:be:9d:79:f5:c3:98:1e:
9e:35:5f:64:0d:a8:1a:49:7c:a0:95:fc:b5:95:90:33:94:b8:
33:87:ef:98:d9:b2:37:32:c6:27:41:07:3a:d8:5a:aa:78:83:
5d:27:93:52:45:76:d6:9d:eb:8c:22:09:75:c8:77:2e:0c:db:
70:9e:66:eb:9e:aa:c1:9a:80:0f:2c:71:e0:82:a1:d0:c5:cc:
cd:1a:d5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:12:26 2025 by rpki-client