Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/VkZ4WGr70mj1syfDzm7t8_HLKUI.roa
File: VkZ4WGr70mj1syfDzm7t8_HLKUI.roa (raw, json)
Hash identifier: vdUUFt3sdcgnvR4lavWs3TbVJiu8VgVSAEFTokGE/jc=
Subject key identifier: 56:46:78:58:6A:FB:D2:68:F5:B3:27:C3:CE:6E:ED:F3:F1:CB:29:42
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 05DE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VkZ4WGr70mj1syfDzm7t8_HLKUI.roa
Signing time: Wed 14 May 2025 21:38:02 +0000
ROA not before: Wed 14 May 2025 21:38:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1502 (0x5de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 21:38:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=564678586AFBD268F5B327C3CE6EEDF3F1CB2942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:da:f0:b4:35:61:73:2a:3f:bc:06:2d:36:63:
12:4e:b4:55:66:6c:12:0b:c9:9a:08:8a:4b:ea:30:
62:3d:c3:57:e7:28:57:32:0b:92:a6:77:58:d3:42:
ed:b1:db:a0:76:60:b1:d2:18:c8:f6:cc:ea:f8:84:
c8:6d:c2:ff:fe:1a:c6:5b:93:78:2b:e0:40:f7:e8:
76:ab:3a:63:9a:5c:be:d2:68:42:48:98:c8:ea:f8:
cb:30:01:0d:e2:46:dc:e0:89:74:12:02:2e:08:41:
36:19:5e:4f:cd:57:53:b4:39:3b:43:7f:d4:b1:6e:
97:8a:57:5f:45:50:93:29:1f:7a:96:cb:4d:21:34:
f6:68:1c:85:10:80:a8:e1:b3:ba:04:13:87:2e:1e:
51:52:e1:67:b4:f6:e2:f0:ba:0f:17:7d:67:bd:d1:
cd:f4:6a:37:da:88:51:d1:d8:07:14:a9:28:ee:7a:
37:e9:b9:0b:11:46:45:82:01:bd:dc:81:72:7d:4f:
5b:39:9d:ae:e3:58:42:36:a4:b8:b4:78:fa:0c:13:
5c:b7:8b:89:d7:fe:ca:4e:54:b9:e3:ee:47:ae:06:
55:19:bf:b1:da:e1:a1:62:9f:0c:84:a9:fb:14:a0:
52:9b:e3:e6:28:08:7d:65:d3:fd:8c:84:f3:e5:7d:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:46:78:58:6A:FB:D2:68:F5:B3:27:C3:CE:6E:ED:F3:F1:CB:29:42
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VkZ4WGr70mj1syfDzm7t8_HLKUI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:04:6f:16:da:49:de:f6:45:9c:d5:7d:86:06:ef:e1:ef:f6:
79:60:5f:c5:24:a3:2d:c4:84:8d:96:99:94:72:61:97:e8:2d:
8d:8b:33:ac:ed:3a:8b:4b:15:60:bb:91:84:dd:d2:b0:49:89:
c8:df:df:2b:4c:3e:3c:c7:09:87:c4:6b:75:03:f8:5e:0f:91:
89:9c:78:3d:ad:5e:8c:4d:89:df:c1:90:72:b9:d9:02:44:11:
4d:20:24:1e:47:b9:87:44:99:fb:a5:3c:76:24:a7:0b:2a:83:
be:74:4f:b2:99:97:b1:e4:8c:37:68:71:24:fe:e0:ad:e5:09:
85:fa:c0:b6:84:a5:0b:18:07:18:a1:9d:23:7f:fa:c3:e3:88:
7c:72:00:99:bb:70:2e:da:48:a5:9e:d7:e4:6d:75:f7:26:a2:
98:54:f7:ce:53:d2:70:e1:d6:c5:3f:5c:93:3d:83:ab:26:ad:
bb:c3:46:88:a0:be:99:52:1b:4b:3f:b7:37:31:9c:07:af:b3:
51:97:14:b4:f7:ca:c5:95:60:d4:d1:7c:af:45:46:c5:0a:07:
6b:ba:c2:76:5d:fc:a0:d2:bf:9c:f9:ef:1b:92:35:7d:90:b5:
1d:cf:19:ea:29:da:ae:9b:20:fb:d1:07:53:16:79:c2:81:ec:
83:49:56:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:23:25 2025 by rpki-client