Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/F1HLxQ6mugEOh6elIxyDAd53rIo.roa
File: F1HLxQ6mugEOh6elIxyDAd53rIo.roa (raw, json)
Hash identifier: tUi4EFHWLgYU7RhGQJVPqiP6rTu4v0RA0Osq6pBmj8g=
Subject key identifier: 17:51:CB:C5:0E:A6:BA:01:0E:87:A7:A5:23:1C:83:01:DE:77:AC:8A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1F32
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/F1HLxQ6mugEOh6elIxyDAd53rIo.roa
Signing time: Tue 17 Jun 2025 16:10:18 +0000
ROA not before: Tue 17 Jun 2025 16:10:18 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7986 (0x1f32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 16:10:18 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1751CBC50EA6BA010E87A7A5231C8301DE77AC8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:5b:c0:9a:01:50:f3:49:1c:47:95:8b:ef:
cd:6d:c1:89:6d:28:8a:0e:f6:94:30:e8:96:a9:8e:
4e:17:b4:fa:ec:7c:c6:aa:4d:12:91:4a:82:a8:1e:
bc:1a:f1:07:a2:c3:15:fd:56:6e:d9:92:18:b9:99:
53:59:ae:59:0d:37:6a:99:4f:72:85:a3:d1:f9:6d:
01:58:4b:83:f6:50:50:46:86:b6:6a:51:b5:c5:15:
e0:6c:95:1b:9d:72:73:13:6f:ff:b7:fc:72:fb:a5:
f7:4c:6d:b7:67:c7:da:cb:cf:da:f0:f5:32:d1:66:
c0:1b:bd:6f:4e:8c:83:63:d5:15:77:fc:2b:2d:ce:
8d:92:2d:37:ce:a3:6e:f8:92:65:28:ee:ba:2e:97:
d5:1a:40:44:9d:46:15:79:a0:24:ac:40:75:48:f5:
9f:e7:7e:68:59:26:64:15:18:8f:71:29:cb:95:5d:
cd:83:98:42:8c:19:82:b6:f6:7b:a5:67:cc:1f:52:
e1:c1:20:dd:c2:71:09:7d:82:8e:f8:0f:f4:b9:95:
ad:f1:5d:bd:0f:4d:d7:37:11:ac:67:02:9a:0a:b0:
e4:0a:c1:1d:f3:4f:f9:08:b0:5f:bd:72:33:73:ae:
59:d4:a0:37:b1:34:c9:2d:aa:85:d2:1e:64:b7:89:
16:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:51:CB:C5:0E:A6:BA:01:0E:87:A7:A5:23:1C:83:01:DE:77:AC:8A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/F1HLxQ6mugEOh6elIxyDAd53rIo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:7f:df:52:18:96:7e:93:cb:60:b9:67:e6:cc:a3:95:dc:ee:
2b:8f:98:f0:4d:ea:e9:26:38:f5:fa:f2:42:cb:32:42:b9:34:
22:e8:8a:a0:68:b7:3a:63:34:ec:4d:0d:9c:ce:0d:1e:7f:c9:
54:97:a3:5c:54:25:fe:93:be:b2:ee:9c:cb:f7:83:4f:90:12:
af:e0:86:86:1c:0e:2c:d6:22:49:06:4b:33:b2:c2:b5:86:1e:
2b:00:f0:f9:e7:94:e7:f5:8a:9b:0d:35:3f:ef:98:4f:cd:93:
55:54:f1:53:95:2a:ce:8a:a2:f7:21:cf:cf:c4:23:19:5c:86:
52:3f:1c:1a:ff:b8:93:a1:7c:be:e1:1b:ad:7d:bd:05:0e:63:
c1:8c:bf:13:49:f0:ff:b2:0c:75:c6:6f:dd:85:2c:d1:2b:a8:
e5:9c:2f:16:78:ca:ae:7c:5d:c3:5f:12:5f:59:e1:ee:4f:73:
55:8d:a1:44:65:fe:18:11:18:93:f4:c0:ef:a1:ed:bd:9c:e4:
cd:94:a0:1d:3b:78:8b:d5:6b:c7:00:e3:f5:7d:2f:bb:f9:da:
0a:ae:37:d4:7f:ea:26:a8:fe:3a:6c:5b:44:19:b9:31:33:df:
80:f0:85:40:d5:25:c9:c3:c8:b7:91:f0:8e:63:11:b1:ba:24:
1c:d5:6e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:31:44 2025 by rpki-client