Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/SuUqrjIkFCkOufNUpeTlsKKMtTQ.roa
File: SuUqrjIkFCkOufNUpeTlsKKMtTQ.roa (raw, json)
Hash identifier: Ia3aJJMPlsdwT0AOajIVB+Hmk4Uj0GDZrfJtTrudlYA=
Subject key identifier: 4A:E5:2A:AE:32:24:14:29:0E:B9:F3:54:A5:E4:E5:B0:A2:8C:B5:34
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1C36
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SuUqrjIkFCkOufNUpeTlsKKMtTQ.roa
Signing time: Fri 13 Jun 2025 16:40:40 +0000
ROA not before: Fri 13 Jun 2025 16:40:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7222 (0x1c36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 13 16:40:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4AE52AAE322414290EB9F354A5E4E5B0A28CB534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:13:48:d4:c9:64:91:88:7a:01:c8:04:dc:
32:98:98:67:67:e8:86:67:53:ee:49:a6:e0:61:c1:
df:72:8d:e7:51:90:61:c9:7c:80:08:a8:44:33:9b:
57:43:6d:55:01:a7:28:1d:d6:98:43:f1:41:56:22:
16:ba:85:99:17:50:16:26:19:62:15:f7:6e:1a:fd:
4d:98:0b:a0:fa:f8:db:98:c3:ba:f6:30:dd:51:cf:
2c:2b:50:66:4e:15:d6:e4:9b:19:00:a3:42:eb:ee:
f0:cc:33:b8:06:36:22:15:84:28:93:5a:ef:73:94:
a8:2b:5d:75:ea:46:8a:4f:be:50:b9:96:88:66:a8:
f7:a0:a9:c2:49:2c:47:7c:c7:8d:4f:36:08:6b:9a:
a1:c6:21:7f:8e:83:fd:50:85:49:60:97:70:4e:4a:
4f:53:e8:56:b1:8f:e3:1f:85:1f:ac:ee:d2:e2:3a:
37:d5:29:9b:eb:d3:38:5b:5c:a4:48:05:18:8f:f1:
0d:a1:80:c3:55:4b:33:0e:97:39:45:3e:89:f5:91:
d3:81:5f:58:69:68:c1:67:de:fa:ed:03:91:b2:5d:
a1:46:0d:5d:a4:76:91:04:99:3e:58:46:62:31:7e:
14:e0:4c:3f:59:b1:7c:fe:c3:12:43:c0:05:86:3e:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E5:2A:AE:32:24:14:29:0E:B9:F3:54:A5:E4:E5:B0:A2:8C:B5:34
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/SuUqrjIkFCkOufNUpeTlsKKMtTQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:06:2c:ce:e0:7a:87:4b:5d:4d:34:2d:31:a9:54:c2:74:7e:
96:e7:3e:56:a1:75:11:e4:7a:0a:69:3d:f4:81:11:39:c9:38:
c2:7a:16:6f:c8:05:b0:00:da:d9:de:86:48:9e:c8:83:65:c7:
58:b1:99:d2:9c:3d:b4:26:1c:3a:ea:41:2d:5f:c8:74:d1:5e:
02:e8:81:68:7a:22:22:aa:ad:50:80:a9:c0:95:ad:60:46:f2:
e1:8f:52:cf:66:6d:cd:ef:fd:a0:11:ca:69:45:d2:88:94:b0:
80:4a:a7:ca:e2:97:02:9f:90:90:56:ce:6b:2c:24:ce:d0:64:
28:79:c3:78:c0:70:e5:84:44:4c:a3:11:29:ca:71:ef:3b:7c:
da:97:b7:e5:92:2f:dc:cc:04:3c:c7:6e:2b:55:9f:5f:16:e4:
a6:b2:57:de:b1:ae:b0:23:7b:62:1d:45:a9:45:ef:d2:46:5a:
2c:9a:4a:48:2c:9f:14:21:3c:24:83:75:22:dd:2e:b1:a5:19:
8a:32:d3:f3:6d:d0:07:87:a4:6e:4c:30:7c:94:5c:d6:bb:15:
50:74:76:4a:fe:64:c1:28:70:48:6f:3b:8e:42:de:5b:d4:24:
33:9f:30:b1:b2:a4:f6:eb:79:b4:cc:7f:ef:e1:a9:f0:79:ab:
ef:e0:20:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:38:09 2025 by rpki-client