Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/bXbMXvZEUugvzH8d-GAAdSnXCcw.roa
File: bXbMXvZEUugvzH8d-GAAdSnXCcw.roa (raw, json)
Hash identifier: L41oKn19XUBn8OslzELkvMIR/0W1U1ZTpjY/9Q08JCs=
Subject key identifier: 6D:76:CC:5E:F6:44:52:E8:2F:CC:7F:1D:F8:60:00:75:29:D7:09:CC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1E1E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bXbMXvZEUugvzH8d-GAAdSnXCcw.roa
Signing time: Mon 16 Jun 2025 05:40:01 +0000
ROA not before: Mon 16 Jun 2025 05:40:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7710 (0x1e1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 05:40:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6D76CC5EF64452E82FCC7F1DF860007529D709CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:9f:86:df:78:18:ea:38:49:6c:40:0f:4f:
80:b8:d7:ce:7e:6e:03:f6:17:66:9d:64:36:f3:b2:
2b:f5:90:40:11:ae:b6:21:f8:44:f0:f5:ea:6d:23:
ca:c7:67:37:ce:3b:97:29:13:84:ec:30:51:f0:f2:
59:16:5e:a0:f3:55:0f:37:9f:28:ea:b2:d2:71:de:
78:41:a5:ef:d2:dd:9e:a9:16:85:55:3c:fe:e2:00:
58:50:65:3f:ed:b3:b0:b8:6b:27:bb:73:eb:d7:ed:
77:79:d0:16:e9:44:67:20:34:c2:9b:6f:e3:11:f1:
06:59:b1:8b:3b:13:02:09:d2:29:97:42:40:f2:16:
c9:34:dd:9a:de:3b:69:45:ba:c2:17:5d:27:46:d9:
21:6e:5f:a4:a2:e3:a5:49:b9:19:2e:97:17:6e:3a:
6b:34:04:03:6f:61:9c:c2:69:ba:a1:6c:21:ed:95:
6a:13:6e:b8:6d:cb:f0:ce:04:e6:b8:d9:0f:96:bb:
11:a3:73:6e:f0:70:96:93:7f:8f:13:be:9a:e0:9b:
f2:e3:0e:4f:f6:68:f8:3d:0d:51:29:5b:76:69:7e:
1b:38:ae:72:6b:f5:d7:e1:25:e9:0b:3d:30:e0:f4:
e6:ea:e6:a2:fe:9a:76:81:7b:2e:cd:85:a0:4c:94:
f4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:76:CC:5E:F6:44:52:E8:2F:CC:7F:1D:F8:60:00:75:29:D7:09:CC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bXbMXvZEUugvzH8d-GAAdSnXCcw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:71:fd:c5:ec:c8:e2:45:5a:3a:03:81:0a:46:b1:4e:0e:b8:
21:24:e3:94:34:f4:5d:e7:e3:bc:b4:ae:6e:fb:56:a5:c0:55:
c4:5a:84:8e:d7:8a:31:46:55:b9:2a:46:99:5e:51:62:58:29:
9a:ad:d1:42:34:a1:e6:c2:02:cd:42:a5:e5:6c:a0:38:a8:3c:
9c:56:49:34:bf:ff:35:c1:3b:fc:7b:13:95:d4:d1:03:db:90:
fa:09:83:c0:0e:10:1b:bd:47:a8:f4:9c:9a:7a:33:13:f3:a3:
95:fe:52:82:54:f1:d4:ca:6b:58:fc:a8:92:66:0a:48:a5:6a:
07:18:3e:c7:05:e5:99:5d:79:15:e0:c2:1d:60:20:06:28:b4:
c1:8d:53:c8:6c:a6:e6:bb:ae:84:a8:3b:e9:bb:37:1d:f3:9a:
f5:d4:24:71:3c:93:e5:da:6b:35:be:8a:29:b9:f4:83:f0:c0:
a0:64:fe:44:09:4a:2c:21:d1:d9:14:50:4f:72:0d:6d:21:aa:
32:60:95:ad:9c:04:7a:f3:c9:b0:eb:ea:e1:a4:b0:1e:69:94:
0e:ab:2e:43:31:79:57:cb:3f:31:37:b8:14:b0:b6:d9:52:be:
56:8f:52:94:5d:a8:25:95:10:70:ea:1b:82:ab:f9:d2:38:de:
0d:f3:38:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:37:05 2025 by rpki-client