Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/E0vJVrZZFdJHZjURDMEuSwwTfG0.roa
File: E0vJVrZZFdJHZjURDMEuSwwTfG0.roa (raw, json)
Hash identifier: 8ymrjVug/U5BsnrsJSXcJcsoxXWWIaZqRHxCbOrE/8M=
Subject key identifier: 13:4B:C9:56:B6:59:15:D2:47:66:35:11:0C:C1:2E:4B:0C:13:7C:6D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1286
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/E0vJVrZZFdJHZjURDMEuSwwTfG0.roa
Signing time: Sat 31 May 2025 18:39:11 +0000
ROA not before: Sat 31 May 2025 18:39:11 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4742 (0x1286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 31 18:39:11 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=134BC956B65915D2476635110CC12E4B0C137C6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:c9:55:f8:fe:2a:23:27:ca:3d:a8:85:16:
36:15:31:13:5f:7c:ba:2d:c4:17:80:8d:81:c0:75:
64:68:f3:01:6f:a4:9d:6c:63:39:bb:8a:76:b6:6b:
52:53:4a:de:e0:ad:85:18:91:fe:aa:18:64:73:79:
01:5d:6b:c6:ff:a9:b3:52:03:53:cd:12:09:be:8f:
c1:ee:4d:d5:69:8b:14:c3:de:8c:b7:a9:9b:33:3e:
32:64:ec:42:b9:ae:94:5c:87:b5:58:20:45:ce:92:
96:aa:c9:6b:1b:ce:e7:8e:47:4d:b0:a2:5a:05:2b:
51:02:fb:22:27:10:4c:24:74:42:61:c9:63:a8:83:
71:b8:85:67:b6:4f:75:94:cc:f0:28:75:6d:c8:b4:
33:9a:83:af:7c:5b:d7:9a:bd:d5:21:88:ec:1a:97:
5d:0b:f3:46:f6:4e:92:8f:f5:0c:59:29:c1:87:9a:
25:8c:37:19:ab:d5:12:13:55:ac:e9:a3:fc:11:aa:
c2:ff:56:9c:b1:9d:3e:6b:ed:1c:69:17:5c:a9:30:
0d:46:25:80:76:fd:68:99:62:41:dc:d4:3c:8c:24:
a7:ae:3f:fd:27:79:da:82:9e:1f:ff:e0:6c:45:cc:
14:a9:cb:5e:9d:b9:66:47:06:cf:d3:4d:64:6b:40:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4B:C9:56:B6:59:15:D2:47:66:35:11:0C:C1:2E:4B:0C:13:7C:6D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/E0vJVrZZFdJHZjURDMEuSwwTfG0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:e6:6d:0d:0b:43:7f:c4:ca:0d:ab:73:66:06:ce:24:92:33:
11:3d:07:d5:9f:f8:31:10:5c:fc:62:40:ab:c3:fe:9b:9c:8b:
b1:36:4f:f8:63:34:cd:e6:71:7d:f5:76:aa:d0:6c:b6:b9:5c:
4b:fd:31:4c:2c:a2:ed:9e:0c:2b:bc:30:24:5c:73:6d:16:30:
42:b8:62:e4:d7:f9:5d:27:0e:88:16:59:09:43:2c:63:63:04:
de:d1:fb:4d:96:3f:0b:2a:26:46:a8:73:fd:d2:69:d1:5a:7d:
d5:06:9b:b6:85:9b:61:fd:16:cf:ae:63:07:59:1b:1c:0e:5c:
ab:41:d3:da:b3:3e:9f:83:4c:e2:7a:64:78:75:45:6d:f9:02:
53:1e:f3:01:03:55:5c:ab:80:9d:69:ce:44:73:a8:14:a2:b3:
67:36:7f:ed:73:ab:3a:b6:64:d0:3c:0f:e6:d2:ae:ff:af:65:
f7:60:73:ca:61:a6:e6:6d:4a:3b:c5:84:e2:aa:87:d6:3a:2a:
79:2e:cb:0f:4d:f9:31:78:6c:50:8c:40:92:7d:4e:97:f3:0c:
44:5d:6d:d9:e4:5c:dd:3a:25:f1:07:e9:ac:a9:4a:85:18:df:
53:92:d0:dd:c0:b0:e2:de:38:15:7e:a1:ec:b0:37:b9:80:39:
d5:c8:7d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:12:01 2025 by rpki-client