Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/M7muyLX7rXbhrcBOQA6c3-fijyg.roa
File: M7muyLX7rXbhrcBOQA6c3-fijyg.roa (raw, json)
Hash identifier: x8st8BiT3yeD8OjOW5ABmyidSu8SiDRMWSelK61dLF8=
Subject key identifier: 33:B9:AE:C8:B5:FB:AD:76:E1:AD:C0:4E:40:0E:9C:DF:E7:E2:8F:28
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2092
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/M7muyLX7rXbhrcBOQA6c3-fijyg.roa
Signing time: Thu 19 Jun 2025 20:44:50 +0000
ROA not before: Thu 19 Jun 2025 20:44:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8338 (0x2092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 20:44:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=33B9AEC8B5FBAD76E1ADC04E400E9CDFE7E28F28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:a2:1a:fc:ea:b8:d0:73:ca:5c:c9:9d:1d:
c3:44:c8:49:6e:8f:c9:28:a8:66:5b:b7:66:55:5a:
5e:88:f6:da:b6:eb:4c:c6:0b:ae:b4:63:ce:80:c5:
15:6f:7e:30:01:38:d0:36:4b:3d:a3:44:14:31:cf:
51:87:68:ba:94:21:c8:e1:40:40:0b:02:da:08:fa:
e7:3b:44:cb:f1:8a:92:c8:87:47:23:c3:45:9c:63:
77:96:b0:78:5d:5d:a1:5e:39:a9:3c:f2:00:44:c2:
ff:67:e3:e9:0d:f9:7e:c7:e0:74:e5:b1:89:45:c3:
aa:26:d1:66:38:55:cd:20:8e:6a:d2:dd:45:8d:17:
67:09:e2:5f:06:f2:f3:d8:31:dc:23:37:33:72:f1:
1f:61:c1:98:d6:f3:3f:98:57:db:9f:fb:33:4f:2b:
52:6a:69:40:fd:1b:f9:6f:34:25:43:24:0b:1c:55:
05:6e:be:85:35:01:e4:52:a2:57:c0:0f:84:b5:a3:
24:4a:97:b4:7a:a3:f4:b8:f6:42:0b:01:e4:df:fd:
9f:4f:8f:85:8b:26:64:8c:f6:8f:e3:82:35:2b:cc:
cf:f8:a6:e9:55:14:7b:fc:3b:e6:64:d7:b6:96:61:
af:59:9b:6c:b5:73:5d:bf:3a:31:49:e6:6f:0b:39:
38:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B9:AE:C8:B5:FB:AD:76:E1:AD:C0:4E:40:0E:9C:DF:E7:E2:8F:28
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/M7muyLX7rXbhrcBOQA6c3-fijyg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:0f:ef:09:69:a5:ab:87:c7:6b:e4:ac:47:96:38:a0:3f:88:
46:ef:70:79:d7:8d:3a:7e:74:2a:ff:e6:bf:6b:4d:26:18:c1:
fa:34:fa:44:b6:94:0a:2b:93:95:ce:3a:c3:0b:be:39:7e:28:
c9:12:5e:4b:d1:54:8a:27:d0:ea:56:d7:b3:ec:96:b7:54:ab:
07:14:93:d7:42:a5:f0:ca:06:7d:cd:49:74:f0:a6:a4:68:a0:
d3:9a:d6:5a:68:ce:b1:8f:a9:f8:af:8c:10:44:55:f8:f6:c2:
8e:b4:b6:23:f5:3c:41:f4:18:04:a6:33:15:70:70:48:10:dd:
46:a9:82:38:4d:70:0f:f9:e9:02:af:f4:0a:b0:60:72:bf:8a:
05:6a:20:c5:ad:0e:f4:f9:77:d1:1a:ad:7c:4a:e3:ed:0d:72:
d0:9b:e2:b5:1c:c1:43:87:31:08:1a:af:51:ce:40:ee:83:76:
06:fe:3d:5d:30:6f:e2:63:70:aa:26:d0:e9:02:20:34:08:d9:
ab:94:bc:94:2a:87:da:80:30:a7:84:50:a5:bf:9a:1c:6b:45:
94:75:7f:ed:26:7f:de:9d:5d:e0:79:94:5d:eb:9f:96:66:3a:
40:66:8e:9f:89:d2:d6:73:f1:8a:7d:6a:0e:1d:d4:82:03:0f:
92:e8:cf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:08:52 2025 by rpki-client