Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/QbLN_NvsiAjSxeOUh99QolNvjaA.roa
File: QbLN_NvsiAjSxeOUh99QolNvjaA.roa (raw, json)
Hash identifier: 9tjnp1/6/bcfPCCnWyZtRmtSTsp7M9gIpzjMxDBwhnA=
Subject key identifier: 41:B2:CD:FC:DB:EC:88:08:D2:C5:E3:94:87:DF:50:A2:53:6F:8D:A0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 12AA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QbLN_NvsiAjSxeOUh99QolNvjaA.roa
Signing time: Sat 31 May 2025 23:09:08 +0000
ROA not before: Sat 31 May 2025 23:09:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4778 (0x12aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 31 23:09:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=41B2CDFCDBEC8808D2C5E39487DF50A2536F8DA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:a5:66:bf:21:8c:a0:5c:7b:7d:14:1c:10:
10:63:7f:86:f9:d0:0b:00:5d:3f:26:6f:53:a2:fc:
6c:0c:03:8e:df:06:df:dc:97:2a:3f:17:fa:17:a2:
fa:24:80:db:cf:ed:54:f4:bb:2d:e8:c1:f3:60:c2:
9c:3e:2d:00:11:a9:04:d1:01:5c:69:8b:01:92:61:
94:de:3e:96:7a:2d:e7:dd:19:f2:c8:6c:e1:d3:04:
e5:f8:7f:d3:3d:0f:b1:69:ba:92:90:4c:0c:d5:1f:
db:08:4a:0a:25:0b:eb:f6:ce:17:bf:a0:5f:47:1d:
01:f7:de:26:0e:ae:77:b6:a0:76:6e:2d:f6:78:b5:
b5:fe:4c:bb:14:65:6f:a4:95:93:db:55:47:85:b4:
bf:f1:0f:aa:46:26:73:3f:be:0a:86:36:10:dd:38:
b8:88:3f:bf:fa:4f:5e:60:d3:83:37:cb:b6:42:03:
52:71:dc:08:32:57:5d:5d:3f:7b:4d:af:ac:3d:9b:
64:2c:a3:7d:21:ea:33:83:7f:8c:13:47:af:69:14:
70:ec:6f:b2:40:8e:cb:35:e2:b3:c8:f2:f4:58:0e:
8b:8c:75:6c:5b:27:ed:df:9e:6b:53:65:d4:66:43:
7b:26:ad:3b:e5:aa:00:78:20:d6:6d:af:2d:d4:ec:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B2:CD:FC:DB:EC:88:08:D2:C5:E3:94:87:DF:50:A2:53:6F:8D:A0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/QbLN_NvsiAjSxeOUh99QolNvjaA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:12:d4:2f:b9:51:15:94:61:e6:b5:d2:95:54:6a:fd:13:0b:
fc:6d:4b:53:76:c9:67:f0:29:9b:fe:a2:58:29:28:66:d0:63:
43:5d:20:00:6d:20:3e:8c:9a:22:a2:0f:65:c0:14:36:80:c5:
77:ad:20:1f:06:5b:06:bc:49:8a:da:92:7b:b5:4b:5a:9c:ef:
92:4e:38:b0:ba:09:7b:79:f7:0e:2a:0d:8a:57:31:c5:f5:0a:
a7:df:43:df:89:1b:2d:1e:78:eb:21:09:01:15:4f:58:51:b7:
03:34:db:76:9b:38:59:cf:b2:9d:45:f7:af:12:c8:71:46:7d:
98:60:2c:91:66:13:21:5f:15:cf:6b:a6:52:c1:a7:7a:09:99:
ae:72:51:76:82:d0:2d:3e:c9:ac:de:71:0f:a1:fc:f6:42:fa:
1b:95:2f:09:c8:3e:41:36:ca:b3:52:13:6a:42:e9:16:fb:fb:
78:c1:19:62:c0:49:ca:cc:42:da:cc:ea:bb:03:86:8b:9d:db:
e6:92:6e:5d:12:c7:be:4a:17:29:bd:4b:df:25:63:30:70:c1:
f0:86:2e:5d:a4:2d:6b:93:f9:6f:aa:cb:b1:d2:7e:09:93:bb:
1c:ab:90:55:25:97:14:e5:7f:4a:0f:7b:12:52:66:91:cf:65:
27:4d:53:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:02:12 2025 by rpki-client