Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/aqzoBc2fTycz1FKaOychBlW_ESY.roa
File: aqzoBc2fTycz1FKaOychBlW_ESY.roa (raw, json)
Hash identifier: JPheRyPrOYT94qydK9s+MfIW3xEkeZaOygLGq200FZQ=
Subject key identifier: 6A:AC:E8:05:CD:9F:4F:27:33:D4:52:9A:3B:27:21:06:55:BF:11:26
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1E86
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aqzoBc2fTycz1FKaOychBlW_ESY.roa
Signing time: Mon 16 Jun 2025 18:40:02 +0000
ROA not before: Mon 16 Jun 2025 18:40:02 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7814 (0x1e86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 18:40:02 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6AACE805CD9F4F2733D4529A3B27210655BF1126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:68:b8:55:32:f0:11:61:74:fb:32:2e:a6:4b:
00:88:22:50:c8:c2:9b:75:6a:de:42:11:b1:88:77:
e6:d3:9d:dc:8b:d6:1f:a6:36:3b:2f:de:f2:f6:df:
01:79:04:76:47:83:24:b6:16:74:1a:ad:66:9f:a0:
c0:1a:d3:67:59:62:5d:f6:ef:d5:1a:e8:28:b3:42:
ea:20:5c:2d:e3:5b:8e:34:ab:fa:c5:fa:ed:7a:cf:
02:c5:8d:31:7c:33:1f:78:8c:fa:ea:e8:ed:de:66:
cf:4b:86:d3:a0:b4:0b:7b:db:a6:3d:44:db:2a:8c:
be:48:3c:66:d0:5d:09:70:3e:4c:5e:76:73:00:c4:
9c:b2:9d:aa:f2:75:97:cd:cd:d8:17:ce:df:c8:25:
66:66:7a:44:42:76:70:b7:8b:6e:c9:21:46:63:68:
cb:42:da:21:73:f3:2d:94:ba:89:87:47:49:06:25:
55:09:7e:d7:0e:38:4b:46:db:59:6f:d4:5a:df:d8:
d1:69:be:cb:c7:26:25:d9:ec:82:fe:61:d4:e5:5f:
d1:00:d2:59:30:45:7b:ef:25:bc:98:db:9f:4f:50:
c2:e5:9f:85:37:61:e5:4f:46:d5:10:0c:7d:8f:1f:
26:e3:1e:66:3c:5e:6e:7b:c3:81:5e:29:52:95:47:
d2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AC:E8:05:CD:9F:4F:27:33:D4:52:9A:3B:27:21:06:55:BF:11:26
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aqzoBc2fTycz1FKaOychBlW_ESY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:68:78:b5:66:4c:98:5b:59:fe:9a:e2:f1:56:ba:ee:4a:58:
a9:66:de:bf:5e:5d:17:af:98:b6:05:29:1e:fb:57:66:4b:ad:
86:45:3b:f3:73:a9:cf:30:c8:04:67:96:f0:f9:5e:09:39:b3:
aa:c7:38:7a:e0:81:a2:f2:07:03:60:da:89:bd:b0:8d:14:f9:
7f:45:8b:43:40:05:1d:24:fe:5c:76:56:8f:1c:53:30:2c:0c:
d9:00:a5:b4:e0:60:d5:68:0d:71:c6:21:e6:80:0a:e5:87:3a:
9f:68:f3:8e:23:ef:06:b5:a3:82:73:53:40:d0:9a:8c:93:ee:
91:9d:dd:d4:00:5a:5b:76:a3:9d:1e:a5:68:9c:14:99:09:2e:
72:6d:93:d5:8d:b7:0f:37:c1:20:ad:b3:71:fa:b1:93:02:9b:
9d:3c:e3:c7:a2:2f:6d:35:80:f4:1a:4f:e7:37:aa:13:d1:40:
3f:73:6a:b2:17:70:d3:ec:54:66:d8:ce:65:89:8e:66:27:07:
d3:59:7c:fa:b0:ab:af:70:a9:f7:d0:a2:0b:5b:8a:5d:2d:19:
9b:46:29:8d:51:c8:49:aa:2a:49:65:53:bc:5e:e1:68:78:f2:
a7:c8:fb:ee:8c:b6:28:23:45:d6:f2:17:7f:06:54:e4:3f:34:
78:43:44:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:52:22 2025 by rpki-client