Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/_OnwociNhEptxKvJE-mkwz0XV5s.roa
File: _OnwociNhEptxKvJE-mkwz0XV5s.roa (raw, json)
Hash identifier: 5TjZ0KwNvehd9jNPialHksYbv9iH1OU+XFumm9T2sX0=
Subject key identifier: FC:E9:F0:A1:C8:8D:84:4A:6D:C4:AB:C9:13:E9:A4:C3:3D:17:57:9B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2162
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_OnwociNhEptxKvJE-mkwz0XV5s.roa
Signing time: Sat 21 Jun 2025 01:42:40 +0000
ROA not before: Sat 21 Jun 2025 01:42:40 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8546 (0x2162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 21 01:42:40 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FCE9F0A1C88D844A6DC4ABC913E9A4C33D17579B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:9f:1f:40:c3:8a:07:07:36:6b:01:69:a3:
2c:4d:82:f8:fd:b7:30:a2:0a:3d:22:b8:bb:dc:be:
a7:d3:c9:f2:b7:a8:29:44:fa:bf:1d:a6:50:f3:2d:
ea:b5:5d:85:de:74:bd:6f:50:19:0e:5e:79:e3:18:
f7:1d:3f:8e:ca:b1:4b:30:d7:06:09:59:b2:30:77:
5f:ac:b2:4b:8e:83:4e:69:8f:68:81:b6:e1:da:70:
6f:dd:70:39:7a:94:85:48:e1:45:87:d3:81:3d:e1:
14:1e:10:dc:b9:3a:76:73:3c:53:ff:ea:89:91:41:
7c:62:39:82:cf:0a:3e:93:59:dd:0f:7c:53:4f:45:
03:77:f7:1f:d2:73:95:15:19:2f:28:1a:76:1f:67:
a8:52:4c:02:ca:e5:fa:46:d5:e4:4a:2e:d8:47:a9:
6a:2a:a8:0e:bb:88:d1:15:6a:48:b8:2f:db:62:34:
bc:7d:ca:4a:45:b9:57:28:fc:d4:39:16:d5:41:8c:
a3:8b:1d:35:52:78:e3:3e:7d:67:08:b1:02:d2:99:
ce:09:44:40:a4:cf:e0:13:3c:ca:31:00:4c:9c:6c:
72:fb:d7:ba:a2:4d:8f:b4:c0:c4:72:dd:80:56:18:
f1:a6:48:a7:e1:b1:87:fc:8e:7a:ac:92:bc:2c:57:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E9:F0:A1:C8:8D:84:4A:6D:C4:AB:C9:13:E9:A4:C3:3D:17:57:9B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_OnwociNhEptxKvJE-mkwz0XV5s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:83:5e:37:21:50:4e:e2:da:c8:b9:70:4d:27:71:4e:19:ad:
01:e1:2c:49:8c:28:92:db:f5:5e:68:17:4e:95:c5:a7:26:58:
fb:eb:c4:38:86:86:b0:76:f6:d0:fe:ad:ad:b5:a0:31:18:14:
28:95:ce:45:1e:7e:fd:0c:a0:b8:58:75:ab:58:aa:33:90:f2:
e6:10:82:91:1b:8a:8d:21:b7:23:c9:c4:ec:fe:ec:08:0b:13:
d3:fd:84:ea:c8:13:87:a0:99:4a:db:43:32:9f:22:05:ec:0f:
0b:51:4e:39:80:81:94:40:b7:20:a3:e4:ca:1e:d8:c1:8c:3a:
42:50:2e:8f:92:db:91:9f:26:6e:92:a5:b2:34:3d:bb:64:09:
db:ae:67:53:62:25:ca:65:ba:66:15:d9:bc:f6:d5:0d:93:d9:
01:4d:bd:05:79:66:a3:78:ac:b8:bb:93:e1:a5:b5:2e:7f:00:
7c:56:aa:62:bb:5d:2a:7d:45:b5:d0:56:0d:f0:a0:6e:7c:f9:
b1:83:62:13:af:60:1a:c4:71:ad:57:9b:fa:5d:6c:65:4d:8a:
0a:d7:1a:d8:2c:79:91:32:6f:62:ae:4e:8c:1f:c3:6a:4b:6a:
31:2a:fa:e4:86:a0:5c:2c:34:97:5a:2f:a5:f1:82:02:10:55:
5c:f8:aa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:44:22 2025 by rpki-client