Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PeCFm6bnRMdDwzNDf6A3TqqkTxs.roa
File: PeCFm6bnRMdDwzNDf6A3TqqkTxs.roa (raw, json)
Hash identifier: tNAh7hSJeSNelzJdGFIKTYfSsMLnJzXETP+DD66a/wk=
Subject key identifier: 3D:E0:85:9B:A6:E7:44:C7:43:C3:33:43:7F:A0:37:4E:AA:A4:4F:1B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1CFE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PeCFm6bnRMdDwzNDf6A3TqqkTxs.roa
Signing time: Sat 14 Jun 2025 17:39:55 +0000
ROA not before: Sat 14 Jun 2025 17:39:55 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7422 (0x1cfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 17:39:55 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3DE0859BA6E744C743C333437FA0374EAAA44F1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:1d:07:19:49:59:50:b1:6d:33:c5:50:92:
83:07:37:9a:47:17:3c:6a:1b:bc:ac:0b:25:03:72:
35:f5:94:df:cb:f0:6b:48:5f:83:bf:0c:a8:ee:94:
27:09:87:e1:1b:58:2e:3e:f7:94:7e:a0:f0:c2:f5:
4c:5b:a7:9d:cb:cd:0c:e6:df:6a:69:dc:d0:e7:42:
82:d8:9e:09:14:b3:ec:4b:b3:96:eb:52:3a:8e:a8:
b9:8f:fb:d8:dc:fa:4b:f7:ce:e8:96:76:d6:a3:ab:
91:d6:7f:67:3f:15:f9:a0:81:9c:a4:86:db:2a:e9:
21:e0:eb:bf:16:e4:b9:2b:2d:b4:61:78:56:b1:74:
82:ca:eb:74:a2:34:33:04:e6:a7:c3:d7:a6:4c:47:
81:d0:c6:5c:b5:27:ff:04:83:7a:55:35:35:20:94:
9f:0c:e6:3f:eb:1b:23:12:cc:52:ed:cc:94:4e:f3:
c9:6b:c5:86:fc:5a:96:b5:5d:bd:e4:a7:94:00:66:
ee:f4:05:68:21:de:90:14:84:b8:de:90:74:6d:e4:
65:e4:2f:73:52:aa:db:48:eb:6c:de:67:01:94:44:
27:12:4d:64:22:9a:aa:72:4a:10:47:80:33:be:3e:
e0:34:51:1b:49:dc:2f:62:3f:e5:31:95:ae:66:21:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E0:85:9B:A6:E7:44:C7:43:C3:33:43:7F:A0:37:4E:AA:A4:4F:1B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PeCFm6bnRMdDwzNDf6A3TqqkTxs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:59:ec:ab:a0:ae:46:a5:2b:57:97:f3:52:f3:71:96:5f:95:
ff:b9:64:23:85:d4:51:39:89:db:3d:fd:ea:d8:f5:ff:d9:d1:
25:45:b1:1d:e2:82:e3:e2:93:e8:b0:89:12:23:82:f4:3e:7c:
9b:d4:8b:8a:fb:03:2b:c7:8f:02:7b:fd:b2:27:5e:1f:bb:c8:
c5:e2:1d:ad:2f:4f:d5:62:42:96:d6:e3:90:0d:81:83:4c:d5:
95:2b:83:ae:f6:73:86:99:e3:1a:73:8c:48:6e:1d:3b:95:68:
71:11:18:66:19:aa:6f:59:2d:a5:a6:8f:6d:df:41:b5:6b:b0:
ab:52:d8:98:50:74:a5:72:e8:3b:6f:44:c8:c7:5f:a6:7a:d5:
5d:c7:fd:9d:a9:09:19:55:18:de:6a:99:3e:4f:d2:31:7e:68:
fb:2e:2a:d0:ec:ff:b0:69:da:6e:61:9d:da:ff:65:c0:9a:50:
b4:cf:75:57:63:a4:ed:f2:75:98:a2:5a:47:92:25:be:96:ab:
a7:4d:0f:30:a6:86:80:86:8c:17:28:68:6a:6e:5c:68:71:fe:
1f:f1:40:5b:1e:91:de:b9:e1:7d:c4:9c:50:3b:a5:b5:0c:78:
ad:c3:55:aa:b8:a1:06:84:8a:cb:d9:c6:60:40:57:2e:ea:60:
63:68:53:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:23:59 2025 by rpki-client