Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/COnEtA49cwNR7PDMytTATAcbbWg.roa
File: COnEtA49cwNR7PDMytTATAcbbWg.roa (raw, json)
Hash identifier: Qxt4SODDiweSh6UN0sG0DW2duwohFqMSKry88YdDFII=
Subject key identifier: 08:E9:C4:B4:0E:3D:73:03:51:EC:F0:CC:CA:D4:C0:4C:07:1B:6D:68
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 08CE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/COnEtA49cwNR7PDMytTATAcbbWg.roa
Signing time: Sun 18 May 2025 19:38:11 +0000
ROA not before: Sun 18 May 2025 19:38:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2254 (0x8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 19:38:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=08E9C4B40E3D730351ECF0CCCAD4C04C071B6D68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:11:66:30:24:37:ce:6a:75:55:5f:eb:c5:
30:ef:4d:19:e6:bc:39:e7:b7:b0:e2:c1:eb:6f:f5:
5d:5d:4b:97:a7:29:bd:2e:80:9c:f1:5e:9c:e8:c8:
9b:e4:b4:61:be:a4:c4:5d:d7:1f:9d:47:cc:da:1a:
87:93:0d:d1:1e:24:d2:00:7d:38:07:1c:7d:8c:ff:
7b:20:58:71:12:a2:c2:2d:29:07:8f:fd:86:1f:32:
1f:29:55:50:9c:1a:38:11:fb:2c:c5:c1:6e:8c:d5:
22:a4:91:9b:a6:2b:82:4c:4f:03:8a:e0:ad:29:ce:
2c:56:e4:09:c3:68:be:70:b8:57:39:17:c6:df:a1:
48:2a:67:0f:38:20:57:72:e4:e6:40:a2:1d:c7:2b:
10:93:f2:31:63:db:f8:71:3d:e0:55:04:65:7a:bd:
f6:70:d0:40:80:11:95:cb:b9:09:b1:0c:5d:5c:06:
bb:1c:99:64:03:71:66:67:99:84:50:ac:39:09:e0:
0d:6f:db:02:65:8b:99:39:38:1e:76:99:45:d6:4e:
7d:09:3d:b1:36:c1:81:e1:20:e5:bc:ba:a0:76:e8:
2c:91:4d:61:38:e7:90:c0:60:19:f9:6c:0f:c0:db:
21:b2:15:29:96:8d:40:53:7b:3b:9d:ed:dc:3c:b9:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E9:C4:B4:0E:3D:73:03:51:EC:F0:CC:CA:D4:C0:4C:07:1B:6D:68
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/COnEtA49cwNR7PDMytTATAcbbWg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:70:fe:c0:2f:b0:51:32:2d:86:85:08:9f:4e:2e:67:92:21:
07:ce:59:99:35:9e:97:f0:ae:48:fb:b6:da:af:6e:be:78:24:
b0:a9:f0:45:f0:77:ce:04:ab:0e:aa:95:37:3d:eb:84:8e:83:
a4:10:9e:6e:ae:d0:53:57:66:31:78:f7:63:54:7c:95:bc:f4:
22:58:1b:a3:86:b2:e9:a0:14:92:a8:f9:ac:55:44:71:52:d6:
2f:65:34:03:82:e0:23:cd:a5:f9:5a:e3:1f:fd:7c:62:de:fa:
fa:78:81:73:7d:ae:95:d2:8a:01:74:fa:b9:71:13:69:41:17:
c1:89:c5:67:77:ba:7e:7b:82:5f:8d:aa:ec:2b:e2:52:12:4e:
6e:c0:a5:bb:12:b0:6e:d2:ea:83:60:b5:6b:ee:2b:83:9d:ff:
3d:82:8e:48:59:fd:e5:f6:bd:fc:86:c5:58:ec:ec:44:3f:c0:
91:5b:8d:e5:5f:fe:4c:d1:8f:6f:99:fb:aa:84:62:5f:94:69:
b7:96:a8:45:ea:cd:47:8d:55:39:d6:c1:32:c4:dc:19:bc:1a:
bd:fc:6e:03:d9:e5:f1:e7:55:d1:e9:a0:93:c6:0e:78:58:2d:
07:7a:63:e2:32:4f:79:d9:8c:9e:87:b8:7b:84:b6:5f:78:e7:
c3:c6:c9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:49:32 2025 by rpki-client