Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Iqi2xua07XXtCPUcKQwtxlDjRwA.roa
File: Iqi2xua07XXtCPUcKQwtxlDjRwA.roa (raw, json)
Hash identifier: cncnmJhw0B1YW3WZYNp0EtNdyzRjF1eA1ctAMTy28eg=
Subject key identifier: 22:A8:B6:C6:E6:B4:ED:75:ED:08:F5:1C:29:0C:2D:C6:50:E3:47:00
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0DE2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Iqi2xua07XXtCPUcKQwtxlDjRwA.roa
Signing time: Sun 25 May 2025 14:08:36 +0000
ROA not before: Sun 25 May 2025 14:08:36 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3554 (0xde2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 14:08:36 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=22A8B6C6E6B4ED75ED08F51C290C2DC650E34700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a4:d7:52:5e:ff:6d:12:64:79:9a:8f:16:f2:
12:be:9e:ea:76:65:ae:a7:ff:6b:67:b0:bf:19:d4:
2c:ab:89:d7:e6:fe:cb:0a:85:f6:29:92:a0:69:1b:
8f:8f:83:ab:b8:5e:bf:a4:67:16:c0:12:b0:ce:63:
1b:2a:81:65:a1:50:c3:18:1b:b0:e8:10:d6:47:c5:
fa:30:f1:20:27:ef:3d:44:79:d4:2b:70:3c:54:7e:
a7:12:7c:4d:0e:62:58:9a:7c:db:21:db:61:87:d7:
0f:7a:b8:a7:ab:82:85:d7:a5:23:57:55:64:a9:d8:
9b:50:dd:7b:a4:ef:3e:cc:8a:8b:99:be:01:c9:82:
53:82:10:4f:e2:20:7d:b5:31:13:c6:1c:79:58:c5:
48:ae:91:e3:c6:28:74:45:39:3e:9c:a8:f4:0f:f1:
1a:87:95:04:fe:c3:d7:85:a6:a8:70:59:d9:a4:80:
d2:19:97:0f:b6:c3:f5:18:1e:71:cd:57:89:7d:c5:
71:a9:b9:73:3c:d9:00:88:aa:0e:92:aa:f3:e2:18:
2e:df:4d:dc:d0:58:e0:48:b1:e6:d9:f4:03:fa:35:
c3:8c:17:8c:eb:e4:6e:96:65:88:74:3b:e8:c9:ad:
61:7b:26:d3:43:ee:b2:62:63:f6:d0:a1:38:6a:f8:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A8:B6:C6:E6:B4:ED:75:ED:08:F5:1C:29:0C:2D:C6:50:E3:47:00
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Iqi2xua07XXtCPUcKQwtxlDjRwA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:a7:4a:ff:6b:f8:51:65:99:3e:76:e6:88:7e:45:d9:9b:09:
bc:5e:3d:58:17:4c:d0:ae:bb:63:f4:bd:37:c8:81:28:64:5b:
fa:d7:2d:12:37:e3:91:5b:e1:b3:99:f4:0e:48:b3:62:5a:f7:
b7:ee:11:15:e6:1b:06:d2:f0:f4:e3:30:bf:31:22:b2:93:f4:
d9:be:5d:1d:31:3e:5e:62:38:9f:41:a7:f7:1d:eb:8a:63:d3:
9c:e3:f7:d3:53:f7:2e:63:f8:41:d7:7d:f3:bf:72:27:b6:d5:
c1:e1:b4:f3:27:81:b7:90:3a:79:90:5f:b2:3c:48:4b:6a:c7:
ac:21:69:5b:f2:47:b4:fc:0b:38:3e:6e:1d:ba:48:aa:28:0d:
54:35:b1:6b:b6:f0:1f:d1:18:be:3b:7b:23:15:35:60:1e:90:
f7:1b:e1:c3:61:d2:ff:96:3a:df:9e:8e:8f:79:76:91:3a:e4:
9a:6a:e6:a7:74:b7:f0:49:e4:dc:f5:f6:35:5e:bd:0a:49:a9:
ed:bf:52:28:97:45:74:5e:ca:8f:25:7b:73:2c:59:c8:9f:94:
e7:ca:75:c0:7f:7b:c5:77:6e:1c:59:bf:77:b8:c4:72:39:af:
86:13:86:3a:43:5a:46:e7:77:77:72:7e:de:26:59:4d:88:b4:
59:16:56:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:49:48 2025 by rpki-client