Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/_qVZPR0CFsyxyh-yMTg7WYOgQBw.roa
File: _qVZPR0CFsyxyh-yMTg7WYOgQBw.roa (raw, json)
Hash identifier: bE9vhlJ5Cbl4+MSELdJAPMCPO4MSVA4g6o9XxIWVpPY=
Subject key identifier: FE:A5:59:3D:1D:02:16:CC:B1:CA:1F:B2:31:38:3B:59:83:A0:40:1C
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 096A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_qVZPR0CFsyxyh-yMTg7WYOgQBw.roa
Signing time: Mon 19 May 2025 15:08:10 +0000
ROA not before: Mon 19 May 2025 15:08:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2410 (0x96a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 15:08:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FEA5593D1D0216CCB1CA1FB231383B5983A0401C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:39:7d:b2:df:a6:87:f9:ef:91:ea:e8:fb:
c8:3b:fd:e0:da:4c:6b:6d:11:15:c1:1e:22:9c:b7:
31:e4:62:20:09:c1:57:89:35:bc:c8:bb:da:14:13:
c0:73:52:0c:e2:c1:a4:68:99:49:af:0b:9d:29:85:
94:ca:5f:7f:f3:58:12:ee:f1:cf:a7:f1:5c:2f:3c:
5b:e9:ce:25:c2:3c:4e:ca:d3:a6:b6:d9:54:4b:23:
3b:8f:20:7f:c0:60:40:4b:e3:c1:38:6e:bc:eb:bf:
90:8c:74:17:a8:26:cc:33:fb:28:92:8e:91:b1:8d:
b2:4c:c4:64:bf:f1:03:66:07:ab:6c:e7:ac:53:e8:
22:83:59:cd:5b:63:56:82:55:ea:63:e7:26:da:9f:
a5:06:2b:c0:ec:e0:bc:84:ac:f2:be:73:5d:b9:3a:
a4:42:80:3f:c3:5f:f1:07:6d:44:f4:20:ce:35:8f:
47:88:6c:a9:91:01:18:70:7e:8b:7c:30:b6:f2:34:
8c:d9:74:33:b6:5e:e0:82:51:b1:d2:23:78:21:92:
8d:e6:41:45:76:2d:e1:46:22:1b:18:f3:e4:8a:fd:
bf:74:97:8c:ea:c5:bf:71:f5:b8:54:5f:72:f1:70:
8a:d5:6b:41:39:8d:32:64:55:eb:e3:9c:33:04:84:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A5:59:3D:1D:02:16:CC:B1:CA:1F:B2:31:38:3B:59:83:A0:40:1C
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/_qVZPR0CFsyxyh-yMTg7WYOgQBw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:8d:52:ee:1c:b5:59:7c:8b:a1:2c:87:c9:70:f0:f7:95:e7:
4e:92:be:18:ad:1b:0d:50:40:01:c9:97:83:32:c4:96:20:3c:
cd:e8:73:d2:a2:d7:01:b9:22:d8:4b:5c:48:20:b9:45:30:58:
c6:b2:1d:15:2d:ae:6f:b3:f6:d2:7f:e5:f4:6f:b4:a0:50:27:
a5:b0:27:d8:0d:a9:c8:75:64:58:4c:22:b8:cd:81:31:42:15:
de:1a:f6:0e:ff:69:92:d4:74:16:c9:41:59:65:98:63:24:6d:
24:14:70:ce:01:9c:07:e0:cd:30:4a:94:cd:08:66:42:7b:2f:
c3:5f:c9:ad:9b:ee:aa:b6:42:20:19:b1:30:b3:54:d7:ba:35:
23:bb:e3:b1:3a:70:8e:cc:fa:6c:09:f0:c3:cd:5a:d8:88:f9:
25:e5:b4:8e:a2:54:c0:41:2a:ab:84:c7:a3:ee:7b:5c:f8:4d:
42:a8:b4:55:65:25:87:78:50:34:c7:4b:52:1d:ad:d3:9c:c6:
72:d9:b2:44:82:cb:eb:8d:fe:6f:e7:cd:9a:b9:9c:a2:08:fb:
60:9a:83:50:36:31:82:75:82:ac:9f:70:8c:58:b9:a5:0e:1d:
7b:62:cf:81:c5:61:5d:47:4d:28:f6:e9:d1:f1:2a:7b:fe:71:
57:64:27:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:29:53 2025 by rpki-client