Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/J4Bkx1v8x4IWF1V4Qvm7DTYSCoY.roa
File: J4Bkx1v8x4IWF1V4Qvm7DTYSCoY.roa (raw, json)
Hash identifier: rC3jaHm/7i4vqxL2zjnoPQ9sh7TAxU0OUPRDyuxQ8Tg=
Subject key identifier: 27:80:64:C7:5B:FC:C7:82:16:17:55:78:42:F9:BB:0D:36:12:0A:86
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 208A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/J4Bkx1v8x4IWF1V4Qvm7DTYSCoY.roa
Signing time: Thu 19 Jun 2025 18:49:40 +0000
ROA not before: Thu 19 Jun 2025 18:49:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8330 (0x208a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 18:49:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=278064C75BFCC7821617557842F9BB0D36120A86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f1:01:d5:7f:76:85:08:ca:a9:4e:b3:89:93:
8d:58:4b:6a:11:40:d8:8e:63:77:80:4b:04:ca:07:
08:1a:ec:1b:b4:65:80:81:8f:83:ae:40:6d:38:bb:
6a:41:37:24:43:71:c4:ba:d8:0f:76:ba:c3:7f:6d:
75:1e:8a:99:b9:8c:70:e6:a2:98:ce:b3:38:5c:80:
29:96:06:b5:49:88:4d:dc:ce:83:73:03:29:15:57:
37:f3:1d:43:b9:30:f9:d2:27:93:81:e1:07:80:70:
f4:ac:4f:89:58:69:a3:bc:a6:47:a8:3c:51:89:65:
9b:95:3b:b1:fb:86:af:f2:17:fe:9e:1c:cd:6f:6c:
2a:a2:c7:89:36:67:b7:fa:70:58:74:f1:7b:11:a1:
80:95:39:0e:e5:30:2c:9e:0b:b6:20:c2:41:b3:0a:
9b:df:9f:9c:32:5f:09:4d:5f:89:91:a6:96:c7:0e:
2f:7d:93:68:e2:59:92:c3:c1:15:70:c2:4d:16:a9:
94:21:7b:fb:6f:41:88:15:cb:5a:74:3b:23:01:fa:
58:30:a2:ea:21:de:08:aa:7c:2d:c7:c9:a5:9a:5d:
3d:1e:cf:8b:e4:ae:89:17:6f:dd:4a:a9:2d:54:37:
da:64:c8:c7:b9:23:a5:e4:be:27:f4:ad:01:77:a0:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:80:64:C7:5B:FC:C7:82:16:17:55:78:42:F9:BB:0D:36:12:0A:86
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/J4Bkx1v8x4IWF1V4Qvm7DTYSCoY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:a7:e5:29:bb:67:65:ef:39:0f:a4:1a:ad:7d:48:c3:84:bd:
fc:e7:9c:42:31:48:b0:41:b4:b4:fe:87:70:93:dd:d0:b4:22:
89:db:df:63:5f:83:a1:7e:b9:95:1d:97:40:5b:ee:98:e9:36:
0e:88:7b:d3:6d:01:25:cc:28:44:88:70:08:30:13:a9:bb:47:
4e:9c:5c:37:ca:d6:f5:8c:9f:3c:cf:37:a5:1b:53:d8:68:f0:
6e:80:a8:05:9f:ea:bd:ce:19:c6:28:a5:ff:b9:55:66:af:06:
bf:61:18:8e:ce:23:50:01:7c:d1:d6:14:ef:aa:38:a9:96:65:
e4:ef:64:65:e6:d9:46:a3:93:1d:28:ee:a1:1d:f9:47:56:3f:
2c:35:e5:5b:61:1f:c8:8f:48:c5:ad:fe:72:08:37:cc:63:82:
a0:e1:2c:f0:6a:c6:ff:4e:cf:a9:60:0f:f7:87:a9:ab:b1:2c:
00:2d:5b:28:fc:87:80:39:3a:4d:2b:70:28:6d:05:c9:8f:5b:
b1:13:d3:8c:31:19:80:d7:4d:4a:34:8a:13:80:9e:69:59:0d:
a4:53:ed:0f:72:05:bd:cb:fc:58:f2:36:a2:59:bd:9c:a8:e4:
98:d2:1d:d9:eb:15:93:69:77:38:72:2c:bd:90:3e:8f:de:e7:
f9:1b:00:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:06:56 2025 by rpki-client