Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/bBgWPvJfZDeZc6ZXrfZbJX5k6_M.roa
File: bBgWPvJfZDeZc6ZXrfZbJX5k6_M.roa (raw, json)
Hash identifier: AvfhjoxhwfT5e4Dxhjxl42ad28/rShXO3ZoKeZSgQGw=
Subject key identifier: 6C:18:16:3E:F2:5F:64:37:99:73:A6:57:AD:F6:5B:25:7E:64:EB:F3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1E92
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bBgWPvJfZDeZc6ZXrfZbJX5k6_M.roa
Signing time: Mon 16 Jun 2025 20:46:19 +0000
ROA not before: Mon 16 Jun 2025 20:46:19 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7826 (0x1e92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 20:46:19 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6C18163EF25F64379973A657ADF65B257E64EBF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f8:2b:ae:f3:ca:3c:97:22:79:73:70:cd:95:
25:f5:5c:e5:8c:54:f1:0f:94:95:f7:69:66:b4:f4:
3e:e9:53:ca:24:c2:6d:aa:b4:f3:29:c7:8e:16:03:
6c:97:6f:a6:4c:9d:4f:b4:18:ef:13:07:e8:0c:76:
dc:7a:f5:e7:66:20:9a:0b:b0:34:c7:e6:f5:09:58:
f4:f7:16:20:06:b4:5d:75:df:0a:d4:cf:ec:e0:74:
6a:6a:ff:04:28:1d:49:2a:76:bb:23:9e:4b:58:ef:
8d:05:82:56:6a:40:ee:11:05:91:19:4d:8d:a4:1b:
11:a0:6f:69:03:c8:32:d7:68:e0:e2:4b:5c:45:62:
7a:d0:96:2c:03:dd:dd:1a:7e:7f:01:9a:4e:c5:20:
c2:a8:82:11:d1:76:62:0b:42:27:67:d6:4b:f4:c9:
12:df:c9:79:a2:7e:21:43:77:f4:76:c1:42:04:f6:
32:1a:ca:fe:c7:89:d6:dc:06:30:27:9a:66:a6:32:
eb:37:a1:92:a5:49:95:9f:8b:83:57:24:40:15:e1:
01:e9:4a:84:01:2a:2f:d1:b3:7e:5e:ec:6a:b2:b1:
24:ea:fb:97:9a:be:3c:24:98:e9:79:0e:c1:ec:86:
1d:6b:69:38:98:1c:b8:c1:b6:bd:bb:8d:98:98:8a:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:18:16:3E:F2:5F:64:37:99:73:A6:57:AD:F6:5B:25:7E:64:EB:F3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bBgWPvJfZDeZc6ZXrfZbJX5k6_M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:62:c7:d7:6a:3b:56:19:ba:a1:56:50:09:82:d4:c0:5c:4f:
8b:84:97:42:34:0f:1c:e7:d5:ee:7f:23:66:fe:e2:8b:de:92:
19:0d:d6:34:e3:9b:9e:68:21:75:cd:09:5c:84:89:c3:3d:0e:
6b:be:34:2b:71:fa:5d:e3:26:4b:9a:b3:f1:e9:49:4b:77:d5:
2a:1e:ab:a0:77:ca:de:a1:0d:ef:53:f3:5f:7f:f1:36:50:3d:
a8:f0:45:b0:cb:d1:cc:c8:94:df:d0:4e:b9:71:62:a3:4c:f8:
8d:99:4b:3e:95:d0:d2:81:d7:2e:55:2c:8d:f3:30:cf:e5:f4:
e0:0e:c2:1a:88:3f:90:8e:42:d1:dc:09:af:18:50:4d:a4:f2:
1e:f8:c0:31:08:ed:09:a6:a8:75:19:0e:e2:62:51:74:f5:99:
57:04:39:fa:6b:17:42:7d:3a:34:7c:d9:64:3b:45:67:1a:6a:
7d:0d:4d:bb:b0:14:40:6e:8f:4a:15:65:cc:c1:14:9d:d3:27:
7c:17:87:25:0d:78:3e:24:5d:69:28:a3:fd:84:5c:68:ab:87:
33:a7:3f:53:34:36:4c:cc:3a:28:55:eb:4d:f3:de:bc:be:a7:
6c:dc:96:99:03:9a:89:a0:21:f9:3e:6f:47:7f:d3:28:96:6e:
51:8e:3d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:44:28 2025 by rpki-client