Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Ba1XCtQnjOGWVRB22xhKEA9E_Ys.roa
File: Ba1XCtQnjOGWVRB22xhKEA9E_Ys.roa (raw, json)
Hash identifier: rEKpl5Wxh/5IpIOV9CRL4NQdpdiGIEtBHgrvx5m44gI=
Subject key identifier: 05:AD:57:0A:D4:27:8C:E1:96:55:10:76:DB:18:4A:10:0F:44:FD:8B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 162E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ba1XCtQnjOGWVRB22xhKEA9E_Ys.roa
Signing time: Thu 05 Jun 2025 15:39:35 +0000
ROA not before: Thu 05 Jun 2025 15:39:35 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5678 (0x162e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 15:39:35 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=05AD570AD4278CE196551076DB184A100F44FD8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:da:0f:a6:a4:06:f1:6d:3a:6b:be:8c:22:
3f:53:7b:fa:9a:b4:7c:05:f8:66:ce:af:a4:cd:aa:
b8:21:44:d4:d4:1d:0c:ba:ed:ba:d6:7c:3d:e6:a3:
f3:d2:4f:e6:a0:a9:7c:21:a0:26:3f:1a:bc:85:88:
6d:78:8e:89:0e:fd:e4:af:c0:e2:26:72:62:9c:72:
77:1b:db:fe:97:ee:0d:23:d1:a1:ca:ed:55:3b:c8:
53:90:75:12:c7:29:00:f3:48:cd:5b:76:eb:98:0f:
1f:9a:2c:3b:22:46:49:5c:75:c7:8b:bd:f0:93:62:
84:a1:12:d6:ec:c0:43:51:80:a1:38:56:ab:1a:52:
e7:aa:4e:7e:00:8d:38:8b:33:8e:24:33:b8:14:ea:
22:5b:30:83:71:43:05:4b:7f:e2:00:2a:17:c7:dd:
d6:25:d0:1f:42:6f:91:ef:b5:16:d5:96:22:b3:30:
2b:a4:1e:39:c5:71:b3:72:09:9c:aa:90:54:1d:b2:
b4:4b:9c:dd:25:74:93:a5:76:4d:24:0c:76:8a:2a:
cd:27:2a:0d:98:da:90:12:f6:2e:c8:8e:39:e6:b5:
d4:b0:5b:b5:c2:3f:10:85:7b:3c:ad:d1:31:00:ba:
c0:18:03:fe:5b:cf:30:3a:67:d4:39:83:d1:14:46:
25:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AD:57:0A:D4:27:8C:E1:96:55:10:76:DB:18:4A:10:0F:44:FD:8B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ba1XCtQnjOGWVRB22xhKEA9E_Ys.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b0:23:32:37:88:43:42:90:b2:fc:60:78:2e:a4:1b:91:f4:3f:
37:a4:cb:04:d7:49:0b:b2:f1:b0:0f:b7:d8:ac:16:ca:f4:01:
6a:42:da:8d:d4:fe:48:c7:e1:71:32:5b:14:92:c8:0a:bf:3a:
41:e4:c5:f7:22:4b:e3:09:23:5d:d8:ed:4f:ee:b3:a6:7c:cd:
79:76:5b:dc:cb:09:18:44:6e:cc:7d:f2:cc:14:36:ef:12:37:
30:78:3c:5c:56:59:79:8d:09:b3:ee:a3:31:6a:4e:1b:c9:05:
00:88:e9:6f:a4:49:23:c8:89:6d:a1:e5:f4:a4:5b:6b:19:08:
7a:10:ad:48:c4:1f:ed:96:61:14:e8:b2:0e:df:e6:4d:98:e3:
b5:86:96:11:f8:e6:1a:7c:8a:31:2a:c3:3e:d4:6f:9f:3d:9c:
43:0a:ca:83:5d:05:c1:6f:a7:b1:53:73:f2:61:a0:0e:a9:a0:
37:fe:15:03:17:e9:68:bb:e7:36:60:e1:cb:3b:31:f1:e5:99:
b9:81:92:7f:d5:77:c1:f1:ae:1a:68:1d:f5:a7:36:65:9f:55:
e9:58:7a:ad:10:03:13:53:f8:c6:dd:21:96:66:f8:19:cd:2e:
50:23:7f:bf:51:9d:1a:cc:dc:e2:e1:c7:cc:0a:09:6c:50:a6:
40:b0:6b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:24:02 2025 by rpki-client