Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/UyjnNb5_SZ-S0bEb-BPx_kO6IKY.roa
File: UyjnNb5_SZ-S0bEb-BPx_kO6IKY.roa (raw, json)
Hash identifier: Zf/dQ/8L+wmMPM3XxOqMNAtbWQI6spnFqEUTXvDfPms=
Subject key identifier: 53:28:E7:35:BE:7F:49:9F:92:D1:B1:1B:F8:13:F1:FE:43:BA:20:A6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1356
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UyjnNb5_SZ-S0bEb-BPx_kO6IKY.roa
Signing time: Sun 01 Jun 2025 20:39:12 +0000
ROA not before: Sun 01 Jun 2025 20:39:12 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4950 (0x1356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 20:39:12 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5328E735BE7F499F92D1B11BF813F1FE43BA20A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:cf:87:0e:c4:3d:14:44:85:6b:11:b0:59:
4a:43:62:a9:1e:71:62:bf:36:45:7f:c7:e6:1f:31:
fb:b8:59:b8:6c:96:e8:a0:ed:51:1c:fd:bb:1b:9c:
0f:76:0d:60:80:07:fa:d7:9a:77:f6:4b:43:11:59:
3f:2f:88:66:e7:da:17:1f:84:94:7b:ba:c4:9d:0a:
fa:15:92:92:af:56:b2:86:49:a6:53:b2:c4:3e:28:
fd:76:e7:26:3a:86:47:7e:fc:ce:ca:51:be:a2:11:
37:85:c7:6b:84:f2:ec:78:99:ef:0a:0a:b0:28:5b:
29:78:4a:11:2d:a7:56:dd:9d:ca:9d:f1:bf:35:8c:
34:2f:3f:c2:30:39:14:b6:5c:a4:01:a2:06:17:c9:
29:69:b0:85:5f:2b:ad:48:cf:b9:1f:67:2a:5b:9c:
69:d0:8c:f6:ab:ba:27:e2:a6:92:8a:39:44:36:82:
d9:1e:99:d0:6d:0a:d1:21:86:df:51:4b:23:a2:29:
3a:ee:d5:fc:c2:61:4c:69:f8:dc:da:0d:bb:bc:83:
5f:31:a8:dc:6e:48:c8:64:f3:72:5d:fa:54:4a:e1:
48:a2:a4:70:83:75:60:2d:cb:3b:72:fe:24:ff:14:
2c:cf:bb:67:33:fa:c0:31:09:f9:22:4a:69:80:49:
2b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:28:E7:35:BE:7F:49:9F:92:D1:B1:1B:F8:13:F1:FE:43:BA:20:A6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/UyjnNb5_SZ-S0bEb-BPx_kO6IKY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:88:2a:d9:39:e9:da:23:81:59:ca:38:30:75:45:55:f5:bc:
91:e4:7d:4f:58:cd:0b:32:01:3a:98:07:3d:92:d8:78:49:d1:
1b:1f:2f:42:47:81:6a:3b:f2:da:23:43:dc:0c:40:02:c5:e9:
1e:ed:fb:cc:db:6b:ac:91:8a:59:e2:36:36:08:78:05:02:6f:
01:d5:5c:f5:30:47:56:ba:30:b5:70:af:8c:20:74:45:7d:b0:
46:29:b1:65:4a:ae:d6:87:99:c5:13:34:49:a9:36:fc:43:1d:
f7:de:3b:53:41:61:c2:d1:b8:1d:5e:8f:10:15:1e:59:48:66:
a9:3b:27:d2:c6:21:cf:1e:1d:8e:ef:b9:89:7d:f7:78:ea:cc:
30:bc:4a:89:91:51:c3:b9:14:78:99:0f:6b:9d:b6:97:bc:37:
f6:21:bc:c6:75:ec:37:c3:92:b7:a3:13:d1:46:66:32:cd:ed:
7a:96:09:c0:bb:a0:50:d6:d7:df:4a:9a:55:bf:1e:67:43:ad:
7f:dc:ee:c4:b7:d5:0f:46:fd:c6:92:96:7c:b0:2b:97:f5:a2:
50:0f:12:51:07:44:d0:ad:9e:d9:05:71:a1:26:a0:9b:b8:b0:
e7:60:2a:94:cd:eb:8c:ef:c5:49:34:3a:a7:ce:ea:42:31:9d:
b2:3c:b8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:22:59 2025 by rpki-client