Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/YtwpGrN0oNUPPkB_VYP8_Ky4T7o.roa
File: YtwpGrN0oNUPPkB_VYP8_Ky4T7o.roa (raw, json)
Hash identifier: fODpLI1BsK/B8XFV9Ma43DiuGfTArkiYlGumBqsiaSM=
Subject key identifier: 62:DC:29:1A:B3:74:A0:D5:0F:3E:40:7F:55:83:FC:FC:AC:B8:4F:BA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0CD6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YtwpGrN0oNUPPkB_VYP8_Ky4T7o.roa
Signing time: Sat 24 May 2025 04:38:32 +0000
ROA not before: Sat 24 May 2025 04:38:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3286 (0xcd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 04:38:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=62DC291AB374A0D50F3E407F5583FCFCACB84FBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:a4:c4:5b:d0:00:4e:92:fd:48:ec:3e:ff:
0c:87:7e:05:90:0f:69:f4:b6:61:40:cf:97:b0:be:
ce:13:d3:7f:49:22:f4:0c:34:01:0b:1b:15:48:c6:
89:5e:2e:ba:5c:e7:ba:02:3c:ac:16:24:ad:3c:17:
90:37:4e:97:42:8a:5c:f1:92:a4:bc:07:f9:83:4f:
6c:ee:a5:be:99:5f:46:70:10:db:41:37:71:77:b0:
c5:4f:30:87:0f:c3:5c:94:56:44:cf:41:82:42:a4:
e6:68:33:45:14:2e:4e:c5:69:39:0d:8e:50:b3:8a:
da:1b:07:94:fe:00:63:64:18:02:f5:a4:0b:1b:11:
45:94:e6:f3:a4:36:6e:42:6f:a3:3b:22:ae:83:4e:
02:cd:87:f3:d9:24:9f:7e:73:a7:23:1b:08:e3:f9:
7f:06:03:e4:fa:f4:7c:c1:a7:e7:65:47:b9:0a:f6:
d8:31:52:48:40:24:00:72:f3:41:67:f9:94:22:b7:
a4:3c:ec:15:bc:11:34:eb:bd:91:40:c5:6a:66:7d:
cf:64:40:c5:4e:e9:d1:70:3f:24:02:1a:4f:6d:a6:
61:c2:25:0b:56:eb:9a:de:bc:61:16:72:87:aa:e8:
37:99:06:fb:93:76:ab:40:46:84:ac:0f:8e:b5:11:
7c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DC:29:1A:B3:74:A0:D5:0F:3E:40:7F:55:83:FC:FC:AC:B8:4F:BA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YtwpGrN0oNUPPkB_VYP8_Ky4T7o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:89:cd:e6:b8:00:4f:4d:ed:2f:43:3f:8b:25:d4:ff:26:f8:
71:99:ef:ba:f0:ea:55:82:29:79:6d:59:41:8d:16:60:1e:78:
6f:1f:30:59:fb:04:32:35:c2:29:42:3a:fb:31:25:34:40:f5:
80:97:56:1d:db:b9:b4:5f:05:ee:32:ae:2a:df:67:39:b3:80:
27:9c:11:27:11:a1:2b:62:2b:1c:ae:7b:1c:4c:d8:c1:f7:57:
43:98:5e:44:3a:cf:6c:b5:e1:0f:77:79:fd:0a:51:9b:16:8b:
02:fa:56:17:e2:d5:7b:bd:0d:76:cd:ec:8b:e7:c8:ee:1e:ea:
81:a2:4c:45:7c:34:77:83:1d:d2:43:4d:5a:0a:2d:5c:dd:47:
94:54:3b:74:80:00:6b:55:ae:68:8b:2c:19:e9:18:9a:6f:39:
4f:f8:42:cf:61:ec:e1:37:05:31:ff:f4:88:a8:f3:2b:4b:7a:
c1:bc:d8:15:62:24:b2:98:0c:81:2d:a7:ed:ff:ed:71:a4:f0:
10:1e:98:25:e4:3f:b3:a1:8f:b2:3b:9a:9c:7f:4f:f2:cb:74:
b5:67:5c:ee:02:3a:0e:9a:b9:2d:10:12:42:e9:bf:a0:a5:fa:
28:0f:50:a1:68:f8:77:5b:c4:8f:61:c2:fe:54:e6:43:76:d4:
31:d5:84:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:09:44 2025 by rpki-client