Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/GGLXE9fJZW1yZNkh5dDBDAxV-vE.roa
File: GGLXE9fJZW1yZNkh5dDBDAxV-vE.roa (raw, json)
Hash identifier: EhF6D6STcGED2C+xfB5w2rphtu4RZ5WvE9yzSlKZfe0=
Subject key identifier: 18:62:D7:13:D7:C9:65:6D:72:64:D9:21:E5:D0:C1:0C:0C:55:FA:F1
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 035A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GGLXE9fJZW1yZNkh5dDBDAxV-vE.roa
Signing time: Sun 11 May 2025 13:07:51 +0000
ROA not before: Sun 11 May 2025 13:07:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858 (0x35a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 13:07:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1862D713D7C9656D7264D921E5D0C10C0C55FAF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:03:b9:e9:f3:78:35:74:27:24:c8:7f:7e:
9d:79:35:be:16:e6:d2:88:b0:21:c3:23:f3:37:c0:
a6:a8:3c:b8:e6:29:24:a8:50:cc:5e:a8:0e:42:8e:
38:a0:24:0d:ec:b3:29:16:3d:dd:a9:e7:b2:4f:6b:
3b:9c:93:64:14:14:22:53:ba:2f:3d:a4:3b:10:eb:
23:4a:05:e3:db:57:c4:9c:9a:ef:64:09:cc:b3:89:
4d:69:40:c6:8a:f6:83:4e:fd:0a:28:b2:85:b0:b3:
8a:8d:c1:21:4b:87:ba:74:83:48:5f:c3:93:18:59:
2a:8a:6f:40:92:75:f8:29:12:53:71:9e:d6:cd:28:
b2:32:87:38:bf:f6:b4:4e:7e:64:23:9f:22:22:f3:
d1:b7:1b:c0:0a:32:e7:77:fc:a4:c9:58:bb:5c:d3:
df:b4:e4:49:0b:00:7f:14:31:ac:74:36:8d:1c:5c:
20:90:ad:c2:60:e8:28:9e:c8:4b:c4:3b:6e:83:cc:
03:8e:74:4b:1d:18:67:e8:fa:95:11:4f:ea:52:c2:
03:bd:36:01:fa:7e:3b:01:1d:a4:57:4c:ca:26:73:
65:c5:f4:4e:1c:44:0f:b2:64:f7:17:9e:f7:94:f0:
76:39:a1:dd:c3:3e:c0:67:d8:3c:a5:da:39:36:39:
0d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:62:D7:13:D7:C9:65:6D:72:64:D9:21:E5:D0:C1:0C:0C:55:FA:F1
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GGLXE9fJZW1yZNkh5dDBDAxV-vE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:60:84:57:92:3a:b2:d9:e2:4a:88:de:91:df:f8:7d:56:ed:
57:9f:76:ef:e7:17:4f:99:d0:9b:eb:0e:49:47:cc:a5:96:78:
a0:56:11:5a:c2:54:87:bb:dc:02:e9:42:b6:bc:76:08:b0:60:
cd:70:ed:d1:50:da:b1:df:4d:49:a5:d8:91:2c:7e:54:bd:79:
05:be:c7:b3:43:c9:28:66:ea:a4:c7:db:50:59:76:6b:1e:cb:
47:b6:ef:e3:9e:16:e0:db:88:4a:70:a8:50:74:f2:f8:3b:9f:
a7:9b:13:a8:c4:fe:cb:c2:35:b1:1b:23:94:db:5a:39:13:38:
0c:19:64:b1:ba:f6:14:71:03:f1:1d:23:dc:8a:26:bb:26:65:
a9:84:e5:9b:68:77:f9:6e:2d:36:47:66:b9:6a:31:16:67:07:
dd:a2:97:b6:97:04:ea:f2:17:d6:a8:47:3b:53:53:39:f9:70:
0c:c3:f0:7d:25:93:6b:82:55:2a:2d:c7:62:cf:81:3a:5a:49:
e3:b4:d9:19:df:63:bf:30:36:3d:32:c6:f0:56:fa:59:04:bb:
97:18:60:df:62:16:44:71:55:b4:c5:10:4e:3d:ce:a7:5c:c7:
2b:2e:ef:0e:27:a1:88:e6:57:5c:85:eb:e5:d3:ba:05:1d:f0:
9b:2c:4d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:04:13 2025 by rpki-client