Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Zw-CpXswOUCgyDXIF19pV0EWhB0.roa
File: Zw-CpXswOUCgyDXIF19pV0EWhB0.roa (raw, json)
Hash identifier: 7xvi0fgve+PpIVaszzgxQ6u33KlpPRzBXo1khl2jU5k=
Subject key identifier: 67:0F:82:A5:7B:30:39:40:A0:C8:35:C8:17:5F:69:57:41:16:84:1D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1D26
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Zw-CpXswOUCgyDXIF19pV0EWhB0.roa
Signing time: Sat 14 Jun 2025 22:39:57 +0000
ROA not before: Sat 14 Jun 2025 22:39:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7462 (0x1d26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 14 22:39:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=670F82A57B303940A0C835C8175F69574116841D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:63:ee:bb:7f:2b:b6:34:79:be:5a:36:5b:
cc:02:68:2f:ee:8c:64:82:50:57:3c:f2:6d:53:c6:
89:18:b1:e8:2e:af:2b:b1:e0:a4:90:d1:b3:a3:fb:
2d:66:da:82:17:9c:2f:e8:13:6f:7a:d8:13:5f:5f:
18:ed:01:10:7b:66:06:a9:ab:06:ae:0e:35:af:a9:
a8:56:84:81:5b:b1:6a:27:8b:cd:62:bd:e4:7f:92:
69:69:87:a4:19:2d:de:01:4f:f5:0b:a1:ff:dd:46:
46:ac:1a:af:be:3b:e5:30:02:a4:d0:fd:c3:92:2d:
6f:47:bb:1c:92:f5:db:6e:1f:d5:84:3e:0b:4f:d1:
b4:af:e7:9f:5e:d2:7f:d2:f1:92:56:7c:5e:bf:eb:
00:bb:8f:25:ff:dc:82:b4:94:51:f1:36:15:76:e5:
82:00:91:bd:4f:80:1d:92:5c:ae:61:7f:72:4b:8f:
b1:99:93:d4:c3:7a:1f:fd:36:db:c1:6a:19:f0:6e:
f6:b7:56:4b:37:4b:2c:49:29:76:8d:d5:5f:24:b7:
cd:c3:e8:41:72:89:8c:7b:f9:e0:33:f4:4e:de:38:
d8:e1:5e:f3:c9:57:bc:65:79:11:c4:2a:75:a3:34:
3f:18:78:8c:06:4d:c6:cc:61:20:3d:b8:a6:05:c7:
ff:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0F:82:A5:7B:30:39:40:A0:C8:35:C8:17:5F:69:57:41:16:84:1D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Zw-CpXswOUCgyDXIF19pV0EWhB0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:62:7d:96:0f:e4:25:17:51:4b:24:d7:0b:18:69:a2:a4:a2:
bd:04:bd:ab:a5:d1:60:1d:ad:1c:55:13:2a:d7:24:ac:87:bd:
63:b0:7d:5f:4b:dd:cb:c8:92:6a:68:d6:4e:ba:17:10:b5:e6:
47:77:2e:7a:d2:7a:f3:0a:43:58:71:c3:aa:58:a9:d0:dc:77:
ae:34:7c:7d:7f:69:21:4b:1f:55:1c:31:b8:92:8e:09:c6:a7:
4a:33:24:07:76:19:50:b1:8f:19:e7:e5:57:a7:39:5f:4d:aa:
c5:c7:07:1b:7c:68:f6:d5:90:e9:8c:a4:93:9a:80:d5:8a:06:
a3:2e:61:64:0c:02:e4:83:6c:b8:29:18:a6:d9:d4:a3:0c:45:
d1:d6:61:92:6b:67:91:39:81:80:7e:2f:fc:20:37:73:4a:c3:
52:3e:f1:b7:a7:f8:51:bb:18:ba:b3:b1:11:d3:8a:23:3a:91:
25:22:d6:9b:7b:fd:44:00:ec:97:57:ff:1f:5a:e8:10:2c:b9:
b8:e7:4b:6c:07:30:73:ff:25:01:d6:4d:55:9d:23:9e:67:cb:
4b:99:ab:7f:e3:ea:63:3c:0f:0f:93:e5:e3:67:ce:40:13:06:
81:a6:28:7a:50:1a:8b:db:82:7a:e2:bb:7c:33:8d:b6:a4:b5:
da:2d:5f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:47:54 2025 by rpki-client