Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/_WyjuC3LL22pTb58jYYxJNzBr9U.roa
File: _WyjuC3LL22pTb58jYYxJNzBr9U.roa (raw, json)
Hash identifier: HnWu++YKz8MaJx8UuXbqAiyMz5M/Fx89B6LtW82haVA=
Subject key identifier: FD:6C:A3:B8:2D:CB:2F:6D:A9:4D:BE:7C:8D:86:31:24:DC:C1:AF:D5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1F66
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_WyjuC3LL22pTb58jYYxJNzBr9U.roa
Signing time: Tue 17 Jun 2025 22:40:05 +0000
ROA not before: Tue 17 Jun 2025 22:40:05 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8038 (0x1f66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 22:40:05 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FD6CA3B82DCB2F6DA94DBE7C8D863124DCC1AFD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:46:95:1a:96:ea:7b:ed:68:61:64:ed:c2:9b:
c7:42:20:67:ef:30:fc:51:66:2f:c1:07:3b:6c:b6:
a1:03:ae:a6:90:70:7e:d3:02:13:81:5f:2a:35:a4:
0e:ff:ab:9b:64:f6:03:5e:64:ce:64:f6:5d:c6:36:
08:c0:79:c2:f6:88:f1:e7:92:39:d1:da:36:73:05:
04:81:81:fe:4e:08:2c:78:43:92:5c:3f:b3:9f:85:
91:23:26:23:7c:02:7d:a4:94:b1:3d:35:e0:3f:a4:
e0:eb:96:1f:83:98:96:6d:b8:33:90:84:38:56:f7:
9a:ec:56:0f:69:3f:6f:31:97:69:42:0c:6a:7b:4a:
a9:55:24:b0:06:c6:a9:c9:99:aa:15:c9:6a:74:d8:
78:b4:e1:47:9b:f3:c4:81:51:35:90:a6:08:42:a3:
a6:1c:52:19:a7:24:8f:e5:b7:b0:31:86:26:5b:07:
81:c0:30:1a:d6:ee:d6:e2:85:e3:00:df:1b:84:dd:
d8:8d:a8:86:a9:66:3f:46:46:0b:a9:78:f0:e1:ec:
34:22:64:bc:5d:2c:65:c1:a4:70:64:db:ed:12:e6:
5a:d2:db:70:a0:59:6a:0f:1b:76:ec:88:19:60:fd:
19:fa:a2:3f:f1:61:f1:25:0d:9b:47:51:76:a2:42:
9e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6C:A3:B8:2D:CB:2F:6D:A9:4D:BE:7C:8D:86:31:24:DC:C1:AF:D5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_WyjuC3LL22pTb58jYYxJNzBr9U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:73:88:4c:3b:8f:a6:3c:c7:44:d2:26:32:c1:c0:32:72:fa:
9b:f0:1e:43:f9:38:50:43:20:2c:3b:70:f8:71:db:2a:84:c5:
1e:fb:fd:11:83:f8:60:20:7a:de:15:3a:b6:83:57:37:50:f7:
48:bc:72:9a:cf:7d:8b:1c:b0:3b:e1:9e:eb:00:73:12:c5:f2:
1f:00:a5:d5:4c:f8:9e:05:1e:0a:46:be:25:79:8e:c3:a6:ac:
6e:77:95:57:d3:df:b1:57:49:7e:3c:e4:1a:c9:a9:25:13:86:
7f:90:98:95:3d:41:4e:9d:c8:62:84:de:68:a7:c1:ad:3c:eb:
1b:0e:77:b5:d9:91:6b:f0:00:82:7d:df:84:82:74:c0:45:40:
a7:7a:fc:dd:73:51:2f:59:0a:25:8c:5f:24:e1:98:e0:e3:cd:
2b:6f:0d:10:11:53:09:1d:b9:4c:a8:76:43:5a:2f:92:61:6f:
96:f7:66:2d:34:70:a3:61:39:6d:73:a9:79:32:e9:72:8c:20:
49:8c:bf:91:50:f5:81:00:0f:54:5f:03:6b:f3:a2:5a:50:a7:
43:e3:2c:6e:d2:1d:53:eb:63:9b:41:48:cb:9d:39:18:88:c1:
b4:ee:6b:c0:46:d0:00:82:f9:34:e5:f9:c9:f3:dc:ac:ab:93:
c3:45:26:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:28 2025 by rpki-client