Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Hbgcf8FUxDxoLRc-d4Wl0aTVm3U.roa
File: Hbgcf8FUxDxoLRc-d4Wl0aTVm3U.roa (raw, json)
Hash identifier: dFETRqvsX9MFHWqSYrsDy9mUZU65ASZ6H7IXzfREwIQ=
Subject key identifier: 1D:B8:1C:7F:C1:54:C4:3C:68:2D:17:3E:77:85:A5:D1:A4:D5:9B:75
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2352
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Hbgcf8FUxDxoLRc-d4Wl0aTVm3U.roa
Signing time: Mon 23 Jun 2025 15:41:54 +0000
ROA not before: Mon 23 Jun 2025 15:41:54 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9042 (0x2352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 23 15:41:54 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1DB81C7FC154C43C682D173E7785A5D1A4D59B75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:cb:ff:07:45:4a:8d:4b:58:50:ec:2a:32:
20:9d:c9:16:1e:f8:d5:36:45:da:0b:97:b7:a7:eb:
de:c5:87:ca:76:23:f3:6d:fd:f0:4e:16:e9:50:a8:
18:3a:56:8e:a7:a1:89:a5:75:0f:c5:e3:72:5e:ac:
13:5e:37:89:1f:31:6e:88:ae:66:b3:e8:f1:51:82:
f6:f8:0a:80:da:4c:f5:8c:65:27:14:43:3f:d8:41:
14:12:53:62:26:74:70:11:08:6d:84:06:bc:f4:e3:
f3:56:df:1a:4e:af:5a:db:8c:95:45:76:f9:78:de:
c7:1e:f8:f7:1e:ba:ef:25:bf:58:e7:3a:f3:7d:95:
8d:d7:ec:c9:ba:70:75:3b:18:f3:9f:3a:19:2e:1a:
6b:3a:2f:e1:0c:5c:51:25:7f:ec:64:f5:61:4b:b7:
18:a6:d0:40:97:fb:df:e5:86:79:5b:a2:78:ca:3e:
e4:b8:a0:56:ef:78:56:92:c4:e8:1b:76:f2:d7:8f:
fe:7b:0c:8e:14:c4:ee:9d:4c:f3:e9:ce:a3:c5:1c:
e0:d4:d8:d4:19:f0:7c:d4:3a:ca:c0:ab:b8:11:b7:
f3:df:d7:d7:70:7d:e2:ff:f3:d9:e1:6e:72:a7:9b:
6c:95:c9:56:9e:1b:40:67:e1:8e:ed:29:7e:1d:a4:
45:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B8:1C:7F:C1:54:C4:3C:68:2D:17:3E:77:85:A5:D1:A4:D5:9B:75
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Hbgcf8FUxDxoLRc-d4Wl0aTVm3U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:ec:2d:b7:ca:38:79:26:25:c6:78:80:1a:63:1c:7f:f7:b0:
23:19:87:76:06:55:79:3e:8f:be:71:61:77:0b:6e:0b:6e:54:
6d:ae:3d:93:f7:f6:38:79:bb:8d:61:9c:bb:33:5e:60:45:32:
d1:f2:0e:8d:dd:1f:8a:6a:f9:a6:61:64:86:ea:1e:12:b9:1d:
38:78:c6:69:e1:81:0e:ac:d9:70:ef:ed:f4:21:2f:3a:f3:96:
8b:89:10:9b:91:d1:85:13:75:ac:67:c9:94:95:5a:1f:09:34:
f3:78:58:7c:e8:14:f6:a9:f1:f1:3b:ec:0f:70:3c:4f:cb:49:
84:25:36:a1:f7:50:7b:f5:61:05:ce:78:79:85:7b:68:b6:39:
54:a6:a4:5f:a9:4d:69:47:f7:ba:58:59:6e:08:f8:22:a4:ee:
9d:4c:92:d0:26:8c:f6:01:63:7c:a0:e6:96:23:f6:a4:53:d5:
d3:1d:0c:ef:4a:b2:e3:ca:16:ce:35:0d:35:88:f4:23:a1:b5:
c1:23:34:44:bb:15:df:dd:4a:b6:6a:43:c2:db:e6:cd:2b:5c:
2d:5c:67:cc:ad:56:6a:0b:c4:d8:dd:92:1c:6f:21:5d:73:44:
8d:f5:3b:23:79:56:e0:91:bb:d0:9b:ea:4d:94:7e:b9:bd:63:
de:0e:c8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:07:15 2025 by rpki-client