Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/B3uh0sDh7AWocFIRYVc7yawg_cM.roa
File: B3uh0sDh7AWocFIRYVc7yawg_cM.roa (raw, json)
Hash identifier: 5RVOLHL+h/xmONTfFDzEVTILzQPbRB+trunK4+V75AE=
Subject key identifier: 07:7B:A1:D2:C0:E1:EC:05:A8:70:52:11:61:57:3B:C9:AC:20:FD:C3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0CAE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/B3uh0sDh7AWocFIRYVc7yawg_cM.roa
Signing time: Fri 23 May 2025 23:38:32 +0000
ROA not before: Fri 23 May 2025 23:38:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3246 (0xcae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 23:38:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=077BA1D2C0E1EC05A870521161573BC9AC20FDC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:08:f6:22:b8:eb:11:c7:9f:1d:b6:b6:a4:
d6:fb:55:84:92:47:5e:90:bb:c0:4c:b8:bd:c4:fd:
21:30:73:28:60:95:7a:22:d7:4f:78:87:d2:1d:e9:
81:e8:09:b9:59:c7:29:39:fa:f1:69:20:ec:65:79:
a8:d8:60:0e:af:38:e7:6e:d9:56:d8:dd:62:91:56:
aa:1e:dc:09:06:4e:96:44:7a:1a:14:b7:6e:54:59:
e9:52:bd:bb:8b:83:bc:25:cc:f7:a1:e3:f6:2a:fd:
71:f4:d9:ac:52:09:ca:83:b0:0e:02:02:b6:33:63:
ba:1c:d2:de:9a:59:d4:b8:75:eb:f8:f2:38:00:fc:
ad:19:ff:4d:e3:a2:e4:c0:12:3c:74:e4:d3:ff:1b:
e5:fe:6e:0a:5d:8a:49:28:ee:7a:c5:99:aa:62:69:
d6:b4:d1:53:15:a0:f1:64:be:be:b7:41:aa:2b:21:
f3:40:b3:f9:0e:cc:a6:13:44:c4:46:69:e1:b6:60:
7e:af:3b:c2:cc:2c:b3:86:44:b1:8a:dc:5d:90:b8:
16:67:1f:2c:6b:04:07:17:42:35:6f:e9:3d:a6:2f:
00:b3:80:3f:81:ef:bd:8e:ae:89:cf:f5:dc:dd:a2:
9c:9e:90:e9:3b:2c:bb:c4:94:2c:25:d8:d7:ba:dd:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7B:A1:D2:C0:E1:EC:05:A8:70:52:11:61:57:3B:C9:AC:20:FD:C3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/B3uh0sDh7AWocFIRYVc7yawg_cM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:89:46:ae:e7:0b:ce:41:bd:5d:41:94:b7:9f:a4:b8:56:8c:
47:47:99:11:a9:96:da:54:91:69:d9:c6:93:4e:56:a4:08:81:
50:4d:22:8a:9c:93:73:13:da:bd:00:e7:a8:db:b2:f8:52:74:
f1:44:fc:6f:e0:47:1a:91:92:d2:e2:11:cf:16:e5:60:70:9d:
f3:e8:a5:67:b0:fb:b3:de:0b:78:e4:01:48:48:71:f8:b4:37:
35:8d:d4:47:a3:f9:ea:3a:94:e2:7b:df:34:5a:50:62:d3:3d:
29:4a:db:2c:df:3b:fb:54:97:16:23:f5:c6:1c:00:ed:01:b8:
8c:ba:da:69:af:49:50:56:17:9c:ce:25:a3:d4:a8:21:99:2e:
7e:07:d7:f9:86:a2:ef:96:0a:e6:f7:35:7d:70:da:0c:97:ce:
00:7c:0e:c2:2b:38:be:fc:c7:7a:1d:d0:6c:e1:c7:f1:03:22:
d7:01:fc:84:41:7d:b8:80:6e:6d:ec:f7:3e:aa:43:9d:40:13:
bb:f2:10:9a:a0:a7:1e:4e:35:cf:df:47:fa:05:3a:fa:40:87:
89:8c:03:c2:d8:cc:63:89:88:22:06:c8:57:01:62:47:41:05:
91:e8:f2:c0:b8:7c:ca:18:e5:56:75:db:4b:00:6e:87:37:f8:
ac:03:8c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:12:50 2025 by rpki-client