Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/HClrsYiYj4t9YQq5nc1ylWl3yQE.roa
File: HClrsYiYj4t9YQq5nc1ylWl3yQE.roa (raw, json)
Hash identifier: yxEBq55hkgN2pTL8f4N/lbwtkG+5dU5sGN3HXnKq3jY=
Subject key identifier: 1C:29:6B:B1:88:98:8F:8B:7D:61:0A:B9:9D:CD:72:95:69:77:C9:01
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 20A2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HClrsYiYj4t9YQq5nc1ylWl3yQE.roa
Signing time: Thu 19 Jun 2025 23:04:29 +0000
ROA not before: Thu 19 Jun 2025 23:04:29 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8354 (0x20a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 23:04:29 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1C296BB188988F8B7D610AB99DCD72956977C901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:0b:e7:00:92:4f:00:c5:14:3e:d7:c9:b3:
dd:58:22:28:23:bf:5e:a0:5e:01:90:92:6c:d8:91:
36:8b:f9:24:54:c6:a1:f8:7c:2a:5c:6f:da:b7:8d:
4a:2d:a4:59:89:30:2a:6f:42:1f:98:3e:c2:a9:a9:
5b:bd:09:37:51:c9:12:9c:59:60:3c:54:58:67:1b:
40:45:5d:c7:f0:1d:50:55:57:95:12:65:93:1e:3e:
5c:95:82:dd:f7:17:e0:c2:5c:c8:41:29:fa:f7:7d:
37:fb:3d:ca:2c:b8:55:5f:59:76:6c:72:9a:28:34:
8a:1f:c3:4f:aa:12:8e:b5:6b:b7:b5:87:f0:0b:f8:
a1:dc:c7:8b:68:d6:78:ea:66:c7:49:04:ae:53:91:
b8:40:29:73:05:ec:3b:ba:87:3e:31:ec:c1:42:c9:
0e:67:f8:3f:9f:c5:54:6f:dd:2c:0f:e1:bc:16:f9:
e9:40:31:79:52:e9:6b:2c:d6:73:3f:a6:29:58:aa:
cb:29:13:74:a0:22:16:33:76:da:77:d4:9c:96:b6:
d9:9e:b8:73:55:21:f7:ee:e8:17:1d:9b:e6:a7:3c:
94:d1:7c:35:3b:db:92:96:68:b1:6a:a5:59:4e:29:
5e:e2:84:0c:3e:98:09:69:68:cc:3c:3d:8b:19:e7:
31:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:29:6B:B1:88:98:8F:8B:7D:61:0A:B9:9D:CD:72:95:69:77:C9:01
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HClrsYiYj4t9YQq5nc1ylWl3yQE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:d4:6d:f9:45:88:dd:b3:4f:2c:64:c6:76:c7:74:87:49:f8:
af:98:7b:01:db:a7:45:97:b0:49:d7:a3:62:09:ad:d4:c9:10:
d1:7f:d0:2b:14:4a:aa:59:53:eb:00:fc:e3:6d:f5:1d:00:e2:
30:32:55:88:27:dc:80:72:5c:9e:ed:fa:e7:7e:04:5e:d9:4d:
1a:6c:66:96:15:ec:fb:a4:41:b9:0f:74:a5:50:c4:43:29:b6:
07:97:39:36:38:1c:7e:8e:0e:30:b4:07:7f:7e:05:a5:a9:d4:
64:dc:1d:94:8b:90:29:06:d9:2f:a2:70:a5:4f:1e:e5:0a:66:
b0:ec:98:4a:20:dc:ea:a6:9b:c9:a3:6a:e7:4f:35:30:bb:e2:
29:11:e9:02:84:f4:1d:06:5a:31:a6:f0:d8:43:d1:6c:ee:d9:
6a:47:5c:72:4f:03:42:11:3b:58:48:55:10:57:9c:41:3c:c2:
d8:c1:1d:37:40:48:a1:1d:c2:ff:a2:b4:31:c9:f0:87:48:fb:
be:c1:4c:48:e2:62:a8:1f:7f:73:a0:4f:09:7c:5b:fb:47:07:
64:64:01:d2:7a:58:63:0f:dd:76:49:6a:d2:fb:aa:13:1f:89:
67:51:37:63:86:c6:a8:61:44:32:67:88:54:47:67:de:46:b8:
47:f9:85:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:46:21 2025 by rpki-client