Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/UZf1Q6DG2cb1tIaykfzSz-ZBIe0.roa
File: UZf1Q6DG2cb1tIaykfzSz-ZBIe0.roa (raw, json)
Hash identifier: 6CsCGC+RsHcDxVNGq5+wCaB9SJYyy+4DDmOUU1xPJ3s=
Subject key identifier: 51:97:F5:43:A0:C6:D9:C6:F5:B4:86:B2:91:FC:D2:CF:E6:41:21:ED
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 12DE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UZf1Q6DG2cb1tIaykfzSz-ZBIe0.roa
Signing time: Sun 01 Jun 2025 05:39:10 +0000
ROA not before: Sun 01 Jun 2025 05:39:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4830 (0x12de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 05:39:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5197F543A0C6D9C6F5B486B291FCD2CFE64121ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:f3:3b:56:05:73:4a:5a:a6:c9:17:b6:a5:
9a:ec:6a:e4:b0:2d:87:9b:09:48:14:0e:99:42:6b:
76:ed:1a:fa:dc:8b:6b:ef:de:4f:05:45:4b:f8:33:
c6:27:49:5a:ea:41:3f:43:5c:d3:7c:c0:46:cc:b5:
74:e4:e2:3c:63:ac:f6:92:ca:43:84:db:6e:8d:71:
df:fa:64:1b:f7:60:36:14:94:7d:ab:f3:50:08:82:
4a:8c:95:ed:fc:8e:9a:9b:e7:62:76:49:95:2c:5a:
2b:e6:3b:00:79:0a:d5:b1:9b:c2:db:69:1f:94:f9:
31:f2:dd:f9:db:84:87:83:55:dd:ca:50:60:1c:d9:
ee:31:22:32:d7:99:3e:ad:63:ec:ce:93:a8:c1:80:
27:45:e0:30:f6:05:3c:e5:02:34:8e:a4:46:b2:47:
a9:28:7b:b0:0c:de:08:23:7d:b8:54:e8:ac:b5:67:
8c:55:15:29:fb:d3:b8:04:52:97:7f:b5:8f:18:6c:
0c:27:a2:07:2d:4d:33:c0:d1:f6:88:4d:51:c7:98:
3d:69:91:c0:56:c9:a3:4c:05:06:f3:2c:61:b2:9e:
90:e1:97:35:c6:da:46:30:96:bf:e8:a0:97:2e:00:
36:5f:e5:ca:29:56:9f:5b:2b:c6:7b:6a:7f:a1:74:
ef:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:97:F5:43:A0:C6:D9:C6:F5:B4:86:B2:91:FC:D2:CF:E6:41:21:ED
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UZf1Q6DG2cb1tIaykfzSz-ZBIe0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:8a:ad:0d:ec:49:e4:1d:e7:f4:42:1a:8a:37:30:55:b1:4d:
a5:ad:41:63:5e:31:34:50:83:d4:61:32:35:2e:4a:62:a5:8e:
05:c3:11:29:2a:4e:4e:81:72:db:06:1f:f9:59:06:0f:78:f9:
82:a5:c6:95:2c:b9:5b:96:9d:4a:59:90:ff:ec:99:4d:ad:b1:
ea:cd:d4:83:4b:81:f9:de:d7:43:7a:14:2d:ec:2c:1f:c6:3d:
64:65:64:cd:e7:3d:bd:c6:72:74:1b:86:46:9f:31:46:b2:d5:
4d:16:3f:17:f1:44:fe:39:34:09:66:bf:bc:4e:17:3a:a7:e7:
f5:2c:0f:a1:53:63:5f:0a:6e:e6:51:86:ac:44:cd:db:9b:6a:
bc:64:ba:c4:2f:34:c0:7a:df:2e:c0:de:a8:77:e8:06:d3:1b:
4a:c4:86:b4:d0:00:3f:ee:7e:26:b0:63:b6:26:c6:ca:5e:28:
06:1d:f0:b8:21:1a:e2:4a:7d:d0:49:8b:2c:1b:68:9a:99:2b:
fd:89:a9:5b:2d:00:23:61:e1:f1:c5:da:e8:86:ba:c4:36:4d:
c5:a4:a6:bc:9a:77:57:b4:a4:45:d7:5d:b1:d1:9c:5f:cf:2d:
d6:cf:1a:c6:f0:75:85:c2:44:31:93:2b:dc:a5:96:5c:23:0c:
75:72:a9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:06:04 2025 by rpki-client