Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/HnseVo8Elihko7xt00uyHsx9akY.roa
File: HnseVo8Elihko7xt00uyHsx9akY.roa (raw, json)
Hash identifier: YtpCnFR8u+cBroI712CIk+CB0N/x5/PEoDhoV1zxlDs=
Subject key identifier: 1E:7B:1E:56:8F:04:96:28:64:A3:BC:6D:D3:4B:B2:1E:CC:7D:6A:46
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B0A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HnseVo8Elihko7xt00uyHsx9akY.roa
Signing time: Wed 21 May 2025 19:08:20 +0000
ROA not before: Wed 21 May 2025 19:08:20 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2826 (0xb0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 21 19:08:20 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1E7B1E568F04962864A3BC6DD34BB21ECC7D6A46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:2e:2f:9d:13:93:a5:5b:f4:79:33:b8:f0:
47:d7:40:03:ac:8b:e3:92:69:e7:e2:68:22:1e:67:
c4:13:57:8e:aa:c0:c6:de:32:f8:9c:45:41:d2:ba:
d7:08:3e:6f:77:f3:a1:d3:f3:e3:a8:dd:17:3b:f7:
fd:c2:b1:f0:63:64:3f:e4:87:6b:e7:2b:b5:63:ae:
6b:7f:da:c4:bd:24:65:95:65:fd:ee:1b:5e:6e:a9:
5a:d9:9e:59:47:77:88:aa:ea:e9:70:df:63:ea:a8:
79:87:d0:a8:45:bc:94:ba:9f:48:2c:a3:f8:e4:d5:
1a:ef:25:20:8b:51:62:aa:19:a8:24:c4:c2:da:b5:
a5:9f:ce:b7:f9:62:67:2d:9d:4f:88:6f:da:6e:8d:
52:b1:7a:c3:07:fb:e3:0a:af:60:f8:ba:f6:df:d9:
88:f7:4e:78:a2:84:cd:41:45:c0:fc:3a:10:0c:dc:
da:e0:dd:6d:ca:a0:08:f8:59:29:65:c5:9b:f5:94:
de:23:34:88:b7:7d:e8:f5:72:10:dd:ef:04:e1:5c:
03:00:34:2d:13:84:4f:39:34:93:e0:62:d8:dc:3b:
0b:1a:78:2f:aa:a5:8a:93:8f:ae:89:97:f4:18:34:
38:a6:64:a1:c3:fd:bf:d1:72:0d:e9:b2:74:8e:22:
3c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7B:1E:56:8F:04:96:28:64:A3:BC:6D:D3:4B:B2:1E:CC:7D:6A:46
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HnseVo8Elihko7xt00uyHsx9akY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:3d:d7:2d:94:7b:29:c0:cf:92:a5:e4:2a:c6:7a:17:98:ed:
fc:81:78:99:35:49:6a:16:19:60:ce:2b:53:4e:f2:de:10:7c:
0d:6d:77:62:0e:2a:f5:a8:ab:6a:51:df:2f:73:50:29:2c:e5:
04:06:b4:bc:a7:5f:61:2b:88:42:e9:76:02:34:7f:4d:6d:56:
f9:eb:ab:26:a1:24:21:d2:2d:81:47:85:8c:9a:19:33:5e:b3:
d4:cc:53:84:7f:c0:88:f1:0c:0e:8c:23:32:3a:17:b5:26:a2:
5a:d4:f3:9c:bd:6e:73:69:5e:c3:df:57:1b:5b:94:b4:21:eb:
50:86:ce:b6:10:cd:05:34:e9:c9:8e:45:51:4f:f6:d4:8f:0a:
93:d9:83:6d:98:2f:00:6f:c8:3b:ef:d9:11:4f:cf:8d:bb:fb:
25:85:f6:a7:36:19:f4:f6:7d:e3:e6:0e:65:ed:e6:fb:23:9d:
4d:12:a0:5f:3d:f7:ea:15:94:cd:0f:23:a9:6d:ed:07:ce:5e:
6a:d7:6e:b1:a0:e2:a8:1c:b9:9e:77:95:2b:61:fd:dd:33:b9:
59:6c:4b:2a:c7:35:22:f5:f6:ca:b7:b3:04:1f:50:b0:82:6f:
79:95:f6:50:10:15:37:b6:44:94:d2:5c:84:c6:af:01:de:e0:
7b:97:cc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:08:13 2025 by rpki-client