Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/_l3Z5nwi1TgH_hKZnMZ4rhP3K-U.roa
File: _l3Z5nwi1TgH_hKZnMZ4rhP3K-U.roa (raw, json)
Hash identifier: FlI02o3eCqro6Yk7iQgUL3PDZPfiPO0DHMzF1Ru/2dE=
Subject key identifier: FE:5D:D9:E6:7C:22:D5:38:07:FE:12:99:9C:C6:78:AE:13:F7:2B:E5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0382
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_l3Z5nwi1TgH_hKZnMZ4rhP3K-U.roa
Signing time: Sun 11 May 2025 18:07:53 +0000
ROA not before: Sun 11 May 2025 18:07:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898 (0x382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 18:07:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FE5DD9E67C22D53807FE12999CC678AE13F72BE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:ad:d2:e1:6d:2f:52:02:48:e7:09:a9:ee:
68:be:c6:22:f5:6d:9c:b5:c8:e9:69:5d:b0:99:87:
2f:2d:d3:45:21:dd:44:40:8c:a6:ab:9e:26:41:c6:
15:be:8a:79:cd:b4:9f:81:2c:08:87:d8:7a:a1:28:
09:e0:30:97:f6:09:1b:23:6a:ef:40:32:3c:58:89:
2d:19:0b:bc:74:f2:8a:b0:1b:aa:ef:5b:9e:63:ac:
f5:39:92:21:0f:49:87:85:45:33:53:d0:f9:5d:64:
2a:7b:bb:c6:09:92:af:2b:97:e0:97:2b:2b:fb:18:
90:55:8b:2b:6a:76:43:41:94:66:e8:85:52:f4:12:
cf:44:48:eb:3b:45:d6:3e:ce:43:3f:a6:86:ec:dd:
ce:98:c0:31:ff:38:37:a9:9c:24:b1:3e:7b:e1:51:
78:4c:be:76:e5:aa:07:e5:95:68:6f:a0:06:d3:e3:
29:5c:0d:49:a1:d4:0b:72:b9:c3:fd:4b:3a:1e:aa:
a7:fe:00:54:3c:aa:93:af:7d:93:bf:e0:e1:42:69:
97:30:de:ba:e3:ed:53:38:3e:d5:16:6c:f4:2e:aa:
f7:19:0e:00:1e:67:a3:cf:fa:29:f7:74:4b:99:fb:
ab:11:1e:64:fb:4d:a8:94:d5:8c:c1:6a:a0:1c:fe:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5D:D9:E6:7C:22:D5:38:07:FE:12:99:9C:C6:78:AE:13:F7:2B:E5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_l3Z5nwi1TgH_hKZnMZ4rhP3K-U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:5e:92:e6:d8:d8:98:0e:49:d1:b0:77:00:7b:f4:69:8f:80:
0c:33:eb:4b:1b:86:e9:b7:bf:13:93:20:a5:64:26:76:25:26:
46:72:97:89:07:7a:d1:d1:ff:bd:b5:3a:3f:7d:5a:26:23:3f:
2c:cb:4a:38:6d:d5:eb:7b:d3:27:f5:20:b3:61:af:db:d8:59:
68:b7:3a:2d:b1:51:69:f9:6d:56:35:89:37:be:ef:00:a5:a3:
29:2d:ae:5c:a3:6d:b6:20:08:a9:50:70:74:e2:0b:75:7c:ca:
b8:f4:91:04:fb:cd:48:99:cc:5d:0a:4b:ad:78:43:7f:b7:e3:
14:9e:b2:a6:9b:95:d5:48:b4:23:3b:d5:23:57:4b:ce:93:65:
0b:41:93:3c:da:ac:21:f3:51:79:38:a5:a3:6e:4e:b0:3e:20:
25:ca:ca:d0:0f:a5:2a:eb:e3:5c:ef:f9:c3:d2:f7:ca:2e:15:
94:85:c8:dc:95:e1:27:38:dd:fd:63:04:22:6f:67:43:ea:1d:
0f:9d:80:fc:a2:8d:bc:a4:28:a5:dd:7a:61:ac:78:aa:4d:51:
bf:9f:8f:d4:84:1c:4d:35:53:4c:d3:37:83:b0:7e:c7:83:b7:
b1:2a:05:76:c9:c5:c8:37:b0:33:57:06:4f:32:b8:4e:6a:55:
1a:04:dc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:04:02 2025 by rpki-client