Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/JaXm2cXiN4YD-6FxlOEPpQxqO_Q.roa
File: JaXm2cXiN4YD-6FxlOEPpQxqO_Q.roa (raw, json)
Hash identifier: oKhOEL0rh/rf8KPmKnEwPsr5sPNhhg4hNsnP4S5L/wg=
Subject key identifier: 25:A5:E6:D9:C5:E2:37:86:03:FB:A1:71:94:E1:0F:A5:0C:6A:3B:F4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 214E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JaXm2cXiN4YD-6FxlOEPpQxqO_Q.roa
Signing time: Fri 20 Jun 2025 23:11:52 +0000
ROA not before: Fri 20 Jun 2025 23:11:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8526 (0x214e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 23:11:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=25A5E6D9C5E2378603FBA17194E10FA50C6A3BF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d6:91:e5:a7:fc:11:7b:0c:43:c0:12:75:93:
cf:39:b6:42:e2:d9:59:88:b4:86:0a:1e:0e:5a:6a:
43:67:08:65:52:b6:05:fe:2f:5b:6b:bd:fb:3a:6b:
73:a8:15:12:cc:51:ac:f7:69:e6:50:97:f5:7e:69:
3d:dc:bc:44:f0:f1:ab:7b:45:63:f9:73:3f:4d:fc:
06:e5:cc:85:c8:86:75:7d:50:b6:d9:36:a3:70:08:
75:47:7d:2b:7c:69:45:94:65:c1:e4:39:8b:76:79:
1b:14:f8:dc:90:23:8c:47:df:f9:79:c6:3d:d6:fd:
2a:4e:2a:a0:1a:64:7e:c9:4f:21:b8:f8:ab:a1:fe:
98:90:d7:f8:b8:34:3d:31:be:85:75:6c:03:98:ed:
99:d6:f1:e9:da:37:82:a1:e2:cd:d5:22:99:dc:0f:
f1:ed:67:37:83:b5:95:ba:27:03:94:1d:41:5f:04:
a1:5b:9c:9c:20:1c:01:ce:59:e9:b4:ca:07:17:d2:
68:31:2b:c2:bc:85:54:db:fc:6d:e2:74:90:40:ad:
a7:47:15:a7:6d:8b:71:48:35:bc:c5:29:3b:af:2b:
14:07:8d:96:01:c1:71:e8:8b:9f:29:d4:43:66:ce:
ac:ba:87:eb:2a:24:75:34:b6:04:1c:c5:bd:c4:43:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A5:E6:D9:C5:E2:37:86:03:FB:A1:71:94:E1:0F:A5:0C:6A:3B:F4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/JaXm2cXiN4YD-6FxlOEPpQxqO_Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:84:f7:7c:e6:01:0f:66:77:cb:e1:07:17:37:5a:0e:86:a9:
14:a5:41:5b:15:05:be:53:48:02:d5:4e:39:78:0d:59:a6:bc:
60:7f:53:64:7c:91:a9:96:9d:ea:af:45:67:d1:67:75:1f:a3:
4b:e7:35:61:f9:71:ea:ee:48:a4:90:c5:82:95:d6:f4:46:fc:
d8:05:e2:1b:fa:d3:8d:b8:b6:93:ad:4f:4c:c7:50:36:48:b3:
7c:85:4f:63:af:7b:e3:f6:38:ee:4d:f3:3e:05:05:68:1b:a8:
41:0b:e3:86:94:ba:3b:ba:63:30:72:cf:54:48:63:b9:35:bb:
c7:f8:fa:f6:89:82:d4:61:56:52:cd:6d:e7:68:b6:cc:dd:13:
6d:ed:9f:09:90:c9:06:f3:d6:bb:b5:e8:bf:3f:f9:c9:ab:b1:
8f:d5:21:05:49:c9:8c:26:15:8c:c0:a0:25:10:b5:ae:55:f8:
ed:db:f6:b8:18:15:12:1a:e0:c0:b3:e3:fc:69:5c:1d:5f:5e:
9d:62:79:a6:3d:7f:94:4d:6c:ca:90:94:dd:5d:18:d4:c6:33:
1d:1b:43:7c:bc:82:c5:b5:e5:48:9f:be:96:c5:b2:77:b0:80:
e5:68:80:f1:93:7c:11:92:68:0a:f2:80:ec:ae:68:b8:41:c3:
11:c2:06:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:25:19 2025 by rpki-client