Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/CcRLul5tcp2Pqe4lyn_nxNShRig.roa
File: CcRLul5tcp2Pqe4lyn_nxNShRig.roa (raw, json)
Hash identifier: 2q2/fVxVsXUk5JAVr6EWVB8JqS0f+vDHhzlbNScXCbA=
Subject key identifier: 09:C4:4B:BA:5E:6D:72:9D:8F:A9:EE:25:CA:7F:E7:C4:D4:A1:46:28
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 088A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/CcRLul5tcp2Pqe4lyn_nxNShRig.roa
Signing time: Sun 18 May 2025 11:08:11 +0000
ROA not before: Sun 18 May 2025 11:08:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2186 (0x88a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 11:08:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=09C44BBA5E6D729D8FA9EE25CA7FE7C4D4A14628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:98:81:36:d8:71:b1:8d:cb:68:97:bf:e2:
ee:17:73:64:1f:db:f6:21:d6:c5:5f:5d:48:1f:84:
d6:17:17:bf:ae:c8:7c:cb:a6:19:97:c5:f1:ac:42:
01:67:56:7b:57:1e:e9:1d:98:01:3d:82:77:e4:8a:
09:d4:62:a9:bb:d8:0c:a1:7e:63:80:2e:e6:a9:81:
c9:be:d8:9e:06:16:f5:84:d8:98:0f:e4:66:30:40:
ed:d9:fe:fc:f9:3b:c3:a4:82:63:a3:7b:9d:b6:cc:
63:19:23:4a:8a:87:9c:72:6d:b7:82:b9:7f:d6:61:
ee:fb:9b:aa:a5:8c:83:0e:f3:85:c8:36:6f:24:c2:
13:de:a3:99:e3:d7:b6:9e:10:b8:7e:09:10:29:a2:
26:23:fb:3b:31:86:7b:56:e6:ac:c7:0b:03:e9:9c:
81:66:65:0e:24:c0:96:8b:5a:06:84:fb:d8:38:fd:
a8:90:ca:ad:6e:91:06:b5:07:a9:55:65:f6:f8:e5:
da:17:f1:fc:f6:45:a0:c7:22:ea:1c:22:67:ab:85:
39:bf:26:e4:29:24:e6:ef:89:e6:2d:eb:85:ec:10:
44:8e:85:ab:3d:73:a1:cb:b8:f3:fc:17:89:2b:49:
1a:a5:ea:09:b5:59:da:23:8e:5e:74:35:b5:71:1e:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C4:4B:BA:5E:6D:72:9D:8F:A9:EE:25:CA:7F:E7:C4:D4:A1:46:28
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/CcRLul5tcp2Pqe4lyn_nxNShRig.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:5b:59:2c:98:1f:46:ae:40:4c:74:fc:b7:f8:0b:cb:6e:32:
60:0f:55:97:cb:75:24:96:bc:9c:6a:a4:d8:4e:67:12:3a:79:
1b:be:d6:5c:eb:0d:81:07:9e:78:0d:15:54:46:06:6c:b1:40:
ea:88:81:35:58:9e:cf:b5:8b:c7:cf:5a:1a:a2:4a:95:41:29:
b4:22:67:82:d2:1b:dc:92:47:42:f6:f2:e7:42:95:fa:75:6a:
01:a0:a4:bd:c5:bd:fb:8a:83:f1:14:5f:a9:49:0a:58:14:8e:
c0:b5:85:f9:eb:fc:d5:88:4c:82:11:f3:6a:77:8e:fb:9f:52:
2e:0f:d8:73:db:d5:d0:61:3d:8d:80:36:21:a8:4c:f5:4d:e4:
42:cf:eb:63:fc:84:39:1f:03:f1:6e:7d:96:6e:59:81:7a:ac:
c8:b8:3b:21:6c:d3:d4:36:cb:0d:f4:a5:9e:9d:17:14:b7:37:
05:5e:c0:a1:e0:32:97:2b:71:77:b5:49:cc:25:81:d8:d4:5c:
ab:cd:e8:1e:80:37:4c:5b:08:ca:5e:3f:38:ac:21:5b:56:55:
7e:b8:68:1e:f8:f0:39:84:9f:c1:5f:eb:07:39:31:92:4e:15:
70:cd:41:62:2e:7d:37:4a:4e:c1:0b:53:72:86:b4:56:5f:4b:
a5:ee:27:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:24:15 2025 by rpki-client