Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Afw29WTCF2sRksc0WfpNFYF9EhA.roa
File: Afw29WTCF2sRksc0WfpNFYF9EhA.roa (raw, json)
Hash identifier: pWTi8skUzcpJoWqXcoskzxW4pyk2bFQWmSTc4iwV5Pg=
Subject key identifier: 01:FC:36:F5:64:C2:17:6B:11:92:C7:34:59:FA:4D:15:81:7D:12:10
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C5E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Afw29WTCF2sRksc0WfpNFYF9EhA.roa
Signing time: Fri 23 May 2025 13:39:09 +0000
ROA not before: Fri 23 May 2025 13:39:09 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3166 (0xc5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 13:39:09 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=01FC36F564C2176B1192C73459FA4D15817D1210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:cc:93:39:d5:f3:44:cd:42:b3:0e:9f:9f:
00:27:89:e2:42:8e:54:43:de:20:90:57:08:7f:c4:
ba:11:ae:27:e5:f0:68:a8:96:57:66:f1:a5:bf:f2:
42:d9:40:36:c7:8a:fc:e3:0e:5e:c3:34:bd:30:bd:
36:f9:01:c3:24:dd:f9:27:62:10:ad:d6:f6:99:b2:
64:d6:2c:3f:cf:97:15:60:4c:e9:0f:46:08:81:b6:
5a:97:9e:b2:c1:5f:0f:fb:e4:bc:a1:49:11:df:92:
c2:0a:7e:88:b8:ee:cf:06:c9:2a:f8:23:46:49:01:
b9:de:2d:93:54:d8:0f:fd:eb:d1:b0:74:6a:6b:ff:
b9:05:22:0f:fb:8e:b5:9c:f9:4a:a3:46:07:52:5a:
8f:f6:30:89:df:03:03:89:f7:5f:e7:40:e6:be:c1:
62:2e:1b:da:62:2a:40:47:8e:ce:dc:e4:25:0d:6d:
29:43:d6:83:ec:87:65:fa:73:71:85:3f:e0:07:95:
9e:ec:37:ba:fd:76:b7:5c:b9:fc:42:25:1f:b1:c3:
89:64:5a:1d:6e:dc:95:8a:7d:59:75:0f:bf:b3:92:
31:80:3f:87:52:9c:63:b6:0c:85:18:26:59:b4:83:
fd:72:f6:ed:85:e8:4d:3f:87:01:0d:4e:17:11:d4:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FC:36:F5:64:C2:17:6B:11:92:C7:34:59:FA:4D:15:81:7D:12:10
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Afw29WTCF2sRksc0WfpNFYF9EhA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:91:b6:db:68:c6:f9:e7:e0:28:94:09:d6:b8:d1:98:a4:b5:
40:0f:be:68:ed:0c:d4:1e:9a:1b:5b:9a:69:0e:fd:23:3f:8f:
9c:7e:34:01:82:fa:74:9b:ce:8d:03:35:3d:3a:47:3e:db:c8:
8c:4d:de:e4:70:60:48:ec:6e:2d:7c:11:eb:9c:11:2f:30:47:
2b:21:22:6c:46:3c:5b:b0:55:34:d9:df:c4:2b:e9:63:46:a7:
39:03:f8:51:7a:18:62:26:c6:8f:b1:0f:d8:16:e9:ee:48:05:
af:2d:cc:63:e4:a8:b3:a2:7b:45:ea:7d:b0:d6:d9:02:8e:ff:
f3:31:b3:34:3e:96:ca:b3:ed:9f:1f:d2:60:9d:06:71:d4:5e:
0f:40:58:41:11:27:9a:6d:9a:32:f6:8c:d3:37:a7:10:44:e0:
65:4f:9d:bc:18:35:f5:b5:4d:b9:f2:08:0e:9b:91:de:69:ff:
df:cd:b4:e3:48:f9:70:41:09:0f:30:76:05:1f:38:55:e6:87:
2a:6b:48:38:52:74:a9:f4:58:c1:7f:dc:4a:f4:2b:c6:be:d5:
7f:4e:ee:31:ec:17:1a:6b:e4:ed:01:39:f2:c0:be:c7:64:e9:
1a:03:d1:07:18:f3:0b:d1:47:02:cf:2a:3a:20:50:42:1f:e9:
49:a5:b7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:17:44 2025 by rpki-client