Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Ed0ILDylAjYPbVQGVSP3KuN9pLM.roa
File: Ed0ILDylAjYPbVQGVSP3KuN9pLM.roa (raw, json)
Hash identifier: lJik/BZSejDTPyo99BB4s9mLwtseAru0fz+bVn5ByCg=
Subject key identifier: 11:DD:08:2C:3C:A5:02:36:0F:6D:54:06:55:23:F7:2A:E3:7D:A4:B3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 20C6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ed0ILDylAjYPbVQGVSP3KuN9pLM.roa
Signing time: Fri 20 Jun 2025 06:08:25 +0000
ROA not before: Fri 20 Jun 2025 06:08:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8390 (0x20c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 06:08:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=11DD082C3CA502360F6D54065523F72AE37DA4B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a9:ed:17:e8:7c:f1:5d:d2:30:e8:17:8c:bf:
07:6c:f9:c5:84:c2:b5:fa:7c:10:d0:10:b9:60:31:
48:02:d3:1d:c5:08:e1:93:1c:2f:8a:35:2c:8f:e2:
46:8d:92:78:22:87:cd:8a:60:0e:cc:16:fa:7c:68:
e2:cc:81:84:13:44:57:96:5e:57:09:f6:55:20:bc:
34:3a:48:b4:41:7c:18:4c:0c:f1:80:3c:94:e5:33:
14:84:3c:fd:62:75:17:eb:79:6e:67:69:9c:5b:91:
78:28:f0:dd:7f:99:c2:75:2b:ad:21:1a:ab:3e:3b:
81:5f:b6:31:fe:10:4b:14:03:58:66:f5:10:5d:75:
d7:a0:b5:02:19:6c:b3:a2:3b:c0:50:65:bb:7d:bf:
76:47:39:1c:89:ab:96:ac:b3:90:7b:53:b9:92:37:
ec:f0:60:a4:e1:02:f8:5a:bc:32:95:86:ea:b9:c0:
55:c6:f2:6e:ff:bb:6f:0a:ad:b6:e4:76:a5:6f:63:
14:01:ab:87:7d:04:6d:35:57:15:6f:11:7f:28:2d:
f7:11:c1:1b:9c:92:87:66:2a:ba:f3:14:b5:59:70:
c5:6a:dc:07:90:80:b3:77:9e:d4:08:47:8a:eb:cc:
ae:ab:c3:9c:8e:f1:3b:a6:b6:71:41:4d:7c:22:05:
a0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DD:08:2C:3C:A5:02:36:0F:6D:54:06:55:23:F7:2A:E3:7D:A4:B3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ed0ILDylAjYPbVQGVSP3KuN9pLM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:13:fa:20:87:2c:5b:89:91:ee:7e:40:d9:da:6c:4c:80:c2:
4d:09:0e:9e:32:59:5e:89:2e:af:b2:00:07:85:34:01:32:ad:
ed:4a:fe:f0:29:f0:c0:b2:55:19:06:5c:4f:ad:e5:0a:c3:eb:
d6:9e:f8:cc:2e:e9:61:fc:59:ce:90:95:90:78:5d:00:ce:72:
37:69:f3:ac:e3:b7:4a:fa:14:d4:7f:4f:e1:dc:18:c2:b4:ca:
4d:f7:24:63:43:c9:3c:8b:a0:6e:05:d9:b0:54:0d:b3:86:3c:
04:ea:c6:4e:af:78:59:58:7a:ce:fc:ea:fa:92:02:af:36:8c:
ef:34:18:64:b7:de:a5:5f:26:24:a1:46:46:e1:d8:25:f7:68:
ce:b8:d3:58:bb:d0:86:21:6a:13:54:d9:86:8d:3c:54:e5:84:
51:79:4e:dd:fe:b6:46:6d:f4:1a:d2:79:f5:f2:f9:0e:f8:fd:
43:05:27:1e:06:2f:7b:f3:a3:7c:2f:b3:5c:f0:ae:ef:b7:84:
09:97:24:34:e3:c2:9f:70:3b:b3:14:85:b1:e2:b5:62:a3:ec:
3e:70:08:91:16:49:99:3f:a0:a7:7e:bb:fe:d0:f1:b5:99:c6:
47:85:a4:7a:e8:d9:b6:cc:01:f6:0c:43:d1:b0:86:23:9e:c8:
07:b7:f2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:09:57 2025 by rpki-client