Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/B4SE0nO7PLZFv73ejzZ4PmhuNFg.roa
File: B4SE0nO7PLZFv73ejzZ4PmhuNFg.roa (raw, json)
Hash identifier: GhKAEt7bX6r08p8uhX9SBHvaUxtaKW1ilwHbVpe7tGM=
Subject key identifier: 07:84:84:D2:73:BB:3C:B6:45:BF:BD:DE:8F:36:78:3E:68:6E:34:58
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 23EA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/B4SE0nO7PLZFv73ejzZ4PmhuNFg.roa
Signing time: Tue 24 Jun 2025 10:42:04 +0000
ROA not before: Tue 24 Jun 2025 10:42:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9194 (0x23ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 10:42:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=078484D273BB3CB645BFBDDE8F36783E686E3458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:09:d3:0c:51:b6:ca:7a:29:13:f3:e0:59:
df:81:55:9a:5e:d8:36:4b:53:77:d1:b4:65:b9:cd:
93:bd:3a:28:42:61:03:da:3d:fa:31:64:14:bc:87:
1c:1e:7c:c7:d7:28:c3:ab:fe:27:95:12:45:fd:c6:
ee:9a:6d:cb:59:3e:87:5b:43:07:a1:29:47:5b:3f:
14:ad:0e:a4:70:28:af:a3:61:2c:ee:cd:75:df:56:
3a:a4:bc:4d:3f:f9:91:19:f8:83:54:e5:f9:cb:67:
d6:8d:93:db:ee:41:0a:bb:8e:6d:70:19:4f:66:38:
a1:80:ed:0e:ab:45:44:8d:df:cf:b9:2e:3f:4f:84:
e3:11:95:34:a3:c6:d7:06:4f:2e:c9:37:05:50:be:
2b:8f:d3:9f:e8:d2:73:f3:2a:3e:dd:17:99:bd:9c:
b9:c8:ba:a0:d2:ec:c5:92:0c:4d:cd:2a:99:36:70:
5c:91:89:a6:63:fd:32:ff:d4:cd:04:aa:10:2d:99:
2b:29:6f:37:b2:69:e0:9e:63:47:42:6a:ca:78:59:
92:80:2a:41:90:e8:39:bb:e4:66:fe:a5:b2:d3:ae:
96:27:e2:90:97:d3:09:ab:cc:87:44:72:ce:5a:f9:
d3:c5:88:2f:e1:fe:8e:8c:32:53:3e:8d:36:98:93:
19:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:84:84:D2:73:BB:3C:B6:45:BF:BD:DE:8F:36:78:3E:68:6E:34:58
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/B4SE0nO7PLZFv73ejzZ4PmhuNFg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:79:ac:71:3f:49:15:f9:dd:cb:8d:33:6d:43:17:d7:df:ee:
01:cf:27:8d:0a:93:5f:d4:62:83:ac:9f:e3:3a:13:36:72:88:
35:5d:27:8d:8a:a0:5c:64:08:71:a0:45:ec:36:38:81:b6:36:
51:74:59:16:7a:28:a1:09:45:ed:68:0b:d6:e9:93:14:ba:c8:
fd:8d:7b:24:1b:12:54:9f:6e:ee:01:68:bc:c9:a9:5f:38:fb:
ae:93:e7:5d:ec:df:b1:14:ac:1f:ea:6c:94:ba:a5:40:6f:38:
fc:fb:8f:03:1d:89:92:59:c7:f5:04:a3:c2:8f:d5:d7:e9:87:
a0:32:3a:30:06:9c:f0:3b:64:14:24:12:4b:db:33:90:2a:59:
16:5b:8d:c9:20:b0:ce:94:d3:bb:55:48:8a:77:5b:5f:a2:2b:
b6:73:39:1b:00:04:67:86:78:0d:71:c4:12:40:fb:05:9a:73:
a4:94:90:87:0d:2c:4a:44:67:bf:ee:56:ae:9b:0a:6a:d7:27:
1b:fd:d0:db:46:4c:f6:77:47:18:fc:d5:4b:ed:27:b4:76:51:
91:b8:ef:11:ec:69:7f:7f:e6:9d:02:3a:c5:c1:d7:98:6b:1c:
e7:80:6a:42:ea:88:19:a1:55:22:d0:ae:24:96:7a:42:4c:21:
f5:c0:97:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:51:00 2025 by rpki-client