Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Zp1As8E3GyXQcNwqTAwUXYYwCeA.roa
File: Zp1As8E3GyXQcNwqTAwUXYYwCeA.roa (raw, json)
Hash identifier: McvsWMYswsQhAeGQ+nvRzlOtTMddykMuzQ6mIogOtQA=
Subject key identifier: 66:9D:40:B3:C1:37:1B:25:D0:70:DC:2A:4C:0C:14:5D:86:30:09:E0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 018E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Zp1As8E3GyXQcNwqTAwUXYYwCeA.roa
Signing time: Fri 09 May 2025 03:37:46 +0000
ROA not before: Fri 09 May 2025 03:37:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 03:37:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=669D40B3C1371B25D070DC2A4C0C145D863009E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8c:d5:13:fe:7e:89:80:00:9c:59:6f:ae:be:
d6:d0:2d:83:88:1e:88:b9:bd:a3:c5:31:bd:2b:62:
bc:b1:ea:92:e2:c5:03:ec:44:fc:1f:13:7b:d8:df:
57:d5:a3:f0:fb:92:d0:df:bd:8d:39:05:88:88:fc:
7d:9c:a6:be:8d:4b:51:30:dc:01:93:45:dd:44:32:
ee:b9:22:51:5a:bf:fa:81:a0:f7:26:2f:96:c4:7e:
78:1c:30:ac:7d:ba:9b:ba:8f:2c:2a:91:1a:f0:39:
97:a7:73:ea:bc:f1:d0:df:9a:97:99:ed:24:95:56:
e4:b3:66:32:b4:41:ae:f7:08:70:f0:ea:37:43:f6:
aa:61:f1:b8:13:a3:ad:8c:82:1c:cb:8d:fd:32:77:
12:05:a5:ee:da:c3:d3:e5:e6:4a:c0:77:36:e9:16:
63:a8:6e:e1:a9:99:97:b3:83:88:02:ba:f0:b2:86:
15:54:1c:d5:ac:cb:6e:f2:36:78:48:bf:de:92:32:
82:df:72:bb:aa:e3:49:f2:8a:cc:02:b2:f6:43:28:
5b:57:5c:f6:77:26:e1:76:6f:5d:d8:4f:cd:64:fc:
b8:e6:f1:00:84:ad:41:fa:fb:0f:0b:81:f0:3b:e4:
68:5b:15:d3:3e:37:58:3d:6b:19:7f:99:1f:a0:9e:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9D:40:B3:C1:37:1B:25:D0:70:DC:2A:4C:0C:14:5D:86:30:09:E0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Zp1As8E3GyXQcNwqTAwUXYYwCeA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:4b:1f:e1:d1:59:bc:e2:19:b0:53:7f:d1:cb:11:22:e8:af:
86:de:54:5b:83:2b:a7:35:f7:bf:22:77:d8:11:9d:d6:25:75:
54:1f:51:f1:8c:f0:6a:3f:16:cf:8a:9e:9f:92:64:53:ff:96:
bf:2c:24:17:42:00:68:e2:08:1e:c9:7c:62:18:ca:21:6a:e9:
9f:2a:b0:f3:db:de:e4:a7:1e:35:45:78:7b:8f:59:26:61:f2:
73:7a:92:b9:f2:81:35:ce:87:16:3e:e1:15:c7:48:8f:82:23:
47:fc:c9:36:fb:b8:3c:c2:1e:93:54:45:b8:6a:2a:10:7f:06:
58:0e:eb:37:cd:6c:1a:13:f1:f7:25:9f:c2:09:eb:af:0e:c9:
fa:31:c2:a9:7f:69:6d:28:91:fd:ea:86:58:c4:b2:ac:13:c9:
df:cb:5a:b5:0e:90:1b:33:9e:e2:9a:e3:15:f6:24:f1:cd:3d:
bf:1a:f2:61:e2:8b:9e:57:c3:de:81:8e:90:48:cd:02:f6:ba:
b5:76:ee:c4:b7:ce:54:3d:e6:64:e7:a1:3c:49:57:1c:d2:b6:
05:08:06:e9:e4:63:94:4e:7e:d5:94:1b:f3:fb:b9:a2:96:26:
fb:6e:74:ea:fc:90:56:89:01:80:7c:9f:cc:72:de:9c:10:b5:
6d:b8:7c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:01:23 2025 by rpki-client