Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/QDCxRmQqaJhGy-gK1tvHNKBQ-yc.roa
File: QDCxRmQqaJhGy-gK1tvHNKBQ-yc.roa (raw, json)
Hash identifier: KWsuEQkJaov8JpUBp1D7gtp3tpUplagMrAwmytAreYw=
Subject key identifier: 40:30:B1:46:64:2A:68:98:46:CB:E8:0A:D6:DB:C7:34:A0:50:FB:27
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 093E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QDCxRmQqaJhGy-gK1tvHNKBQ-yc.roa
Signing time: Mon 19 May 2025 09:38:10 +0000
ROA not before: Mon 19 May 2025 09:38:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2366 (0x93e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 09:38:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4030B146642A689846CBE80AD6DBC734A050FB27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:61:4c:b4:e3:ac:a4:8f:13:9b:dd:e0:c4:
eb:f7:81:68:3d:49:13:aa:40:97:a9:0e:d1:05:75:
cd:7e:f6:e5:9b:38:a8:b2:b2:55:e0:de:c0:b9:55:
f1:35:80:9c:0d:43:38:e7:0b:63:3a:36:bd:ad:f4:
9a:97:25:61:67:3c:25:ce:72:2e:45:77:7a:b5:e8:
3f:d3:55:ff:7c:c0:d3:83:82:f6:ca:ad:e9:ae:9c:
64:11:3d:2f:5b:db:57:82:9d:a6:50:8b:2f:33:0c:
88:50:08:1b:7a:79:b5:d0:7a:45:3f:69:e6:24:9d:
6d:60:95:82:a4:b2:5d:94:d0:ef:46:74:96:e2:8a:
5d:51:7f:d2:e6:0c:dc:a6:ca:80:f1:0f:07:1c:ee:
d6:6a:3a:5a:a0:0b:ea:1a:f6:8e:cc:3d:1d:d0:d6:
6a:43:f6:2c:8b:68:85:b7:c2:bf:0d:f8:14:3f:e2:
7c:6f:2c:e7:25:17:84:51:b7:58:85:59:f2:65:e3:
98:e7:8b:32:6b:e0:e8:20:b2:2a:b4:41:6c:ad:09:
03:b4:e3:f6:b4:78:4e:5a:e1:aa:89:50:33:58:0c:
40:a3:2b:1a:d8:f8:c3:83:7d:62:ca:40:51:e7:b9:
90:80:c8:8c:89:78:1e:56:b1:bf:80:39:8c:f6:fd:
22:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:30:B1:46:64:2A:68:98:46:CB:E8:0A:D6:DB:C7:34:A0:50:FB:27
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QDCxRmQqaJhGy-gK1tvHNKBQ-yc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:7b:60:4c:14:87:be:42:11:f1:44:b6:91:95:13:b7:8d:c4:
4c:09:67:d8:ab:d8:b6:d5:5e:51:d7:16:75:97:05:bd:0f:c8:
bd:70:bc:72:b5:b3:83:de:42:e7:fd:55:e6:c7:a8:44:93:b8:
e0:f8:9a:c7:c0:70:dc:3d:83:26:ed:66:33:3f:5b:f7:e2:86:
4f:2a:99:98:7a:2f:46:65:f8:96:7e:c1:7b:c5:82:6d:64:b1:
ff:51:c6:e6:0d:05:48:05:ad:1b:68:c1:38:3a:eb:8c:29:eb:
b9:a7:de:8c:9e:09:e8:89:cc:17:43:5a:09:9c:d2:88:52:dd:
19:6b:da:81:8e:25:ae:0f:bc:f9:7c:c3:fc:f3:f1:16:ff:5e:
6e:8f:d9:78:70:8e:c8:39:8e:d7:e3:be:8a:d9:39:d8:b8:a3:
e9:10:36:a0:88:48:7b:ca:77:f6:59:3d:42:fe:b1:ab:b6:c7:
cc:70:a8:a4:14:f9:f3:aa:25:89:46:ad:78:9f:b4:17:a0:16:
45:3a:e2:b1:d4:06:d3:8b:b4:ec:c2:d3:d2:7a:7b:40:0e:ad:
e2:a4:7d:fd:60:99:e4:a3:bc:ea:99:6e:03:6f:b8:f0:99:2f:
7b:49:18:2e:e1:57:a2:4a:c5:50:dc:9e:89:7b:64:e1:72:7e:
fc:5a:50:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:15:56 2025 by rpki-client