Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/UqAG_c5-14fnoeQnBDNlmwu7ETQ.roa
File: UqAG_c5-14fnoeQnBDNlmwu7ETQ.roa (raw, json)
Hash identifier: YZBUNwa7TUcZ71x1rKLEOtC7GV6xgXmkUSHgcTSyOYg=
Subject key identifier: 52:A0:06:FD:CE:7E:D7:87:E7:A1:E4:27:04:33:65:9B:0B:BB:11:34
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1D36
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UqAG_c5-14fnoeQnBDNlmwu7ETQ.roa
Signing time: Sun 15 Jun 2025 00:39:58 +0000
ROA not before: Sun 15 Jun 2025 00:39:58 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7478 (0x1d36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 15 00:39:58 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=52A006FDCE7ED787E7A1E4270433659B0BBB1134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:52:88:f5:3c:e5:99:65:e4:23:6b:a8:e5:
03:04:35:42:96:9b:af:7b:9c:48:5e:36:81:9c:de:
26:91:7f:2e:91:d1:28:0a:0b:d1:37:4d:25:24:39:
c9:a1:74:a9:62:35:fb:34:6a:ba:01:62:db:2b:03:
e6:43:02:68:fd:d0:de:06:1c:49:28:a4:51:ca:56:
bb:c4:c5:9f:a5:9d:30:9d:5a:93:8f:1b:f2:20:ab:
11:c6:4d:11:fa:ea:53:7f:72:fb:91:e9:97:43:54:
6a:30:ff:7a:69:f0:17:a3:b7:d6:57:12:5e:ba:e8:
e6:9a:d1:1f:6f:05:fa:0d:3b:b1:d0:c5:0a:3c:5d:
da:da:f9:88:07:74:94:2e:7a:33:d7:16:66:8c:53:
7e:da:b3:f9:c7:0a:40:27:46:85:d8:8c:9a:e8:bb:
8f:33:76:da:d0:2c:28:f6:d9:cf:fb:33:7d:10:fb:
cf:86:89:1a:2e:08:ea:0f:fe:67:2b:63:f9:74:81:
76:6e:bc:d4:5d:6a:5a:ee:59:d9:34:82:c6:03:f1:
1b:04:3c:aa:b5:c3:44:4e:25:6b:95:f3:a8:13:f7:
ae:ed:cd:bc:fe:54:8b:4b:b4:e3:74:28:61:93:8b:
80:7f:ed:b4:89:47:f3:ea:34:ef:26:b9:27:92:cf:
3d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A0:06:FD:CE:7E:D7:87:E7:A1:E4:27:04:33:65:9B:0B:BB:11:34
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UqAG_c5-14fnoeQnBDNlmwu7ETQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:24:39:54:29:27:8e:98:9b:06:7f:0b:2d:78:16:73:7c:a0:
17:e4:fa:0d:90:65:e3:7c:f2:9d:f5:a2:ed:d9:a9:f9:9b:a8:
49:82:39:94:0b:c1:00:39:42:52:27:59:7b:45:70:4e:9e:c6:
67:49:8e:29:87:1f:ae:48:e6:c8:5c:17:67:39:7a:5b:d1:05:
5b:90:a0:8d:eb:27:b7:ab:68:aa:6d:ce:f5:48:59:96:cf:9b:
ea:d9:5a:aa:cc:41:68:8e:6d:28:cc:82:15:33:3b:89:0f:50:
33:c2:b0:2e:90:e5:a5:ec:c9:92:97:82:1a:49:53:87:67:96:
dd:15:18:f0:c9:98:74:9e:f3:ae:83:a4:3e:cd:17:87:19:aa:
0e:00:32:51:b7:34:7f:4f:c2:32:7a:97:6e:fb:0a:3f:bc:4c:
fc:86:4b:e0:7b:40:7b:95:e9:fc:2e:02:93:5b:f4:09:59:0a:
01:67:19:53:0a:5b:6a:0b:e4:5f:fa:57:18:80:b4:e2:c3:ab:
5d:6d:48:06:ed:dc:a4:d8:07:20:e4:52:40:db:67:1d:15:f6:
b4:d2:33:a0:9e:4d:da:d0:d5:50:95:12:90:f2:c1:7d:df:79:
d6:70:98:81:1c:ba:67:fb:a5:46:48:db:fe:f9:f1:58:7b:2d:
f2:04:bf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:03:42 2025 by rpki-client