Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Tc1gSIya2yRIPkWg1Is-S6BnnBE.roa
File: Tc1gSIya2yRIPkWg1Is-S6BnnBE.roa (raw, json)
Hash identifier: Ac7VCv/X44AstMUO97fp0s1l69v+uEkaRRy7Y0/yORM=
Subject key identifier: 4D:CD:60:48:8C:9A:DB:24:48:3E:45:A0:D4:8B:3E:4B:A0:67:9C:11
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0EFA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Tc1gSIya2yRIPkWg1Is-S6BnnBE.roa
Signing time: Tue 27 May 2025 01:08:47 +0000
ROA not before: Tue 27 May 2025 01:08:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3834 (0xefa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 27 01:08:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=4DCD60488C9ADB24483E45A0D48B3E4BA0679C11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b5:dd:b5:da:5e:bf:83:4c:83:eb:df:a4:cb:
cd:ba:dd:fd:58:a0:bf:d4:c0:fb:b3:df:c1:c3:14:
d7:95:15:8c:bf:93:10:2a:52:c2:d5:1c:f3:6a:8e:
e3:47:b6:c7:bb:d0:bc:92:d7:b9:c2:97:77:13:69:
30:0b:fb:38:84:99:f1:33:1b:8d:0d:f7:19:df:de:
ac:68:d8:25:80:75:39:33:db:86:f0:9b:85:69:fd:
96:3f:41:97:c4:c3:5e:27:26:43:90:3c:8f:cf:ca:
70:9a:07:37:c3:9a:06:0b:3d:7d:e3:94:7d:3a:9e:
7b:8c:5a:87:5e:c9:2c:43:2d:4a:19:ba:39:af:bc:
1b:17:87:b0:cb:c2:0a:d3:cd:54:de:63:1b:10:0a:
98:10:4b:c3:9c:15:07:16:57:ae:60:e3:df:82:21:
e6:75:8c:70:b9:2a:a8:7d:d0:00:8e:a7:d1:f5:70:
c3:e0:1a:bd:01:8a:0c:0f:ab:4c:fa:9e:d0:95:a2:
5b:6f:62:7a:85:11:05:5a:8b:65:07:8a:f7:56:f7:
5a:98:60:45:14:75:2a:7d:a2:d4:0c:6d:32:a4:e6:
9f:c3:2d:7d:c4:91:5e:93:ef:43:8a:f2:de:28:11:
71:95:9d:df:70:38:7c:32:17:47:21:8b:20:30:e0:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CD:60:48:8C:9A:DB:24:48:3E:45:A0:D4:8B:3E:4B:A0:67:9C:11
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Tc1gSIya2yRIPkWg1Is-S6BnnBE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:cf:7b:f4:2b:5e:b7:65:60:b3:c8:e1:cf:32:a0:c9:0e:58:
cb:08:f5:e1:89:e2:4f:3c:f0:ff:a4:b9:7d:be:6d:e0:e8:ab:
11:b9:0a:87:20:ac:cf:e7:f5:58:f2:67:a1:78:c8:b4:60:cc:
47:5d:86:1b:ca:52:ca:1e:69:a0:1d:ee:ca:19:ca:a0:0e:56:
e9:7d:5c:3e:b3:79:3c:ef:c2:02:11:5f:c6:30:c6:1c:7c:ff:
d4:bb:40:53:67:7b:3d:38:d3:e1:90:11:94:9f:c8:5d:6a:5e:
34:06:90:d1:42:7e:43:7a:94:27:76:76:ab:2b:2b:df:42:ff:
1d:ca:0d:49:2a:6e:e0:88:9e:ea:fc:1c:21:d2:a3:e5:1b:ca:
6a:28:ea:ea:9a:4b:ec:3b:39:a5:57:c0:ad:4d:97:b8:e7:61:
be:ea:f4:61:0c:3f:2f:da:a4:0b:ee:47:19:c6:1e:27:b2:31:
ff:fd:35:b9:5d:bd:98:31:77:a8:cf:9a:c8:77:29:20:4a:3a:
6f:a7:d3:a8:29:62:26:32:51:36:72:cc:e0:c6:8b:e9:5b:1c:
4e:bc:d1:78:8b:12:a9:82:a6:05:20:c9:91:c1:e2:48:8f:54:
b3:8a:48:03:61:c7:e2:38:0c:85:20:ea:81:ba:94:ba:6a:53:
9c:33:b1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:52:14 2025 by rpki-client