Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Ly4wMrYjbkoFQieK4pRS-hQiK1E.roa
File: Ly4wMrYjbkoFQieK4pRS-hQiK1E.roa (raw, json)
Hash identifier: +z1sxDF5Juve57HCbNlmr29cajx8kwIqEMTq7a19Wxg=
Subject key identifier: 2F:2E:30:32:B6:23:6E:4A:05:42:27:8A:E2:94:52:FA:14:22:2B:51
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 20D2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ly4wMrYjbkoFQieK4pRS-hQiK1E.roa
Signing time: Fri 20 Jun 2025 07:13:52 +0000
ROA not before: Fri 20 Jun 2025 07:13:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8402 (0x20d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 07:13:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2F2E3032B6236E4A0542278AE29452FA14222B51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:3e:81:e9:79:98:44:4f:0a:48:c4:db:0d:
00:65:24:8b:66:02:b8:85:30:5c:f8:33:e0:f6:da:
fe:df:ee:eb:3f:23:1c:c2:8d:9f:5f:a5:ad:cc:37:
1d:b6:63:40:e0:54:52:06:72:7b:38:a3:0b:a9:85:
f7:73:f4:95:77:73:b5:ad:80:d9:05:53:15:54:dc:
7d:74:0f:df:82:5b:6d:2f:b0:68:dd:56:96:70:75:
9a:97:78:49:59:a4:f3:76:2a:55:95:37:cd:ce:b9:
7a:2d:8b:67:8a:f2:01:24:3a:62:b0:91:a4:4d:72:
fc:1d:84:38:01:80:5c:a2:ca:38:43:de:bc:d5:a2:
d9:22:89:da:fd:af:2d:0e:7d:7f:f1:fe:0e:51:a0:
8a:4f:84:e4:eb:46:0a:23:16:e6:e8:84:a4:9e:55:
88:d4:0a:97:a0:1d:96:7d:9f:4b:0d:20:47:d9:2b:
74:8d:70:84:df:33:e7:9f:2d:0c:2b:6d:5c:ba:e6:
ec:72:70:79:07:e5:41:61:30:de:75:04:10:8b:84:
58:cd:32:0e:80:12:58:47:93:02:95:ff:f0:f7:e8:
25:05:6b:35:f2:ed:ec:72:c4:e4:94:18:d0:d9:7f:
36:9e:75:c4:a7:d9:b5:07:2a:dd:49:bf:00:fa:1a:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2E:30:32:B6:23:6E:4A:05:42:27:8A:E2:94:52:FA:14:22:2B:51
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Ly4wMrYjbkoFQieK4pRS-hQiK1E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:dc:ff:6d:38:5b:4f:99:18:77:b9:27:b6:2f:f1:6a:77:e7:
40:a5:2d:26:f3:1f:7c:c3:e7:d4:12:c6:2e:5d:64:89:2a:ac:
46:5c:19:5a:ba:77:45:ea:8d:45:c3:27:03:c8:29:18:ec:18:
a8:6a:b0:c1:85:40:6d:d3:a5:e4:1d:46:ef:23:8e:4d:48:4c:
87:7f:5e:79:d9:06:a9:e4:62:0f:a4:65:c1:0a:14:c7:34:e1:
b2:b2:f0:dc:61:66:10:20:0e:65:d9:94:c5:54:55:2b:ef:67:
ab:b3:fc:a9:32:3e:ff:39:94:ce:8b:1c:df:23:46:45:76:58:
05:22:25:ab:69:d9:e4:fd:aa:98:88:a3:d5:bf:74:e7:f4:24:
27:a5:d6:49:dc:b4:b8:47:6d:d9:3c:be:8e:d5:5f:bc:b8:03:
b3:c8:7e:3f:bf:3d:15:52:ae:1a:a8:4c:3e:f5:e1:08:79:7f:
a5:2b:2d:90:f5:94:3c:30:81:62:8b:af:3c:0c:16:03:1c:79:
f3:6e:b9:d1:e3:1a:a2:45:d6:9f:49:fb:02:b9:e5:67:1e:71:
4b:e3:c8:04:91:09:dd:95:3c:d2:cf:c6:64:46:0a:a6:bd:4a:
42:a4:93:2c:aa:f9:18:33:9d:4f:c9:51:cf:82:a0:42:23:77:
9b:51:fb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:08:01 2025 by rpki-client