Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/bY7wXmbf4NuZxffdyNk6Bjl-Ruo.roa
File: bY7wXmbf4NuZxffdyNk6Bjl-Ruo.roa (raw, json)
Hash identifier: Z44CKIZ8FVn3q2qovDdCivEwd3g6oy/jJcKP3Lpd5oY=
Subject key identifier: 6D:8E:F0:5E:66:DF:E0:DB:99:C5:F7:DD:C8:D9:3A:06:39:7E:46:EA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0EF2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bY7wXmbf4NuZxffdyNk6Bjl-Ruo.roa
Signing time: Tue 27 May 2025 00:09:32 +0000
ROA not before: Tue 27 May 2025 00:09:32 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3826 (0xef2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 27 00:09:32 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6D8EF05E66DFE0DB99C5F7DDC8D93A06397E46EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:82:d6:13:32:66:e6:31:9e:80:50:98:a3:
82:84:04:0a:2e:f8:42:ab:b0:94:73:64:2d:d3:07:
5c:72:e6:92:8d:7f:79:ab:05:05:55:c8:c9:d9:2c:
7c:1d:f7:2e:a9:55:7d:59:1f:6d:60:88:98:4b:0d:
5f:93:3a:5a:d1:e6:6f:1d:a2:0f:72:fd:20:9a:f7:
03:a7:0a:cf:29:19:12:e4:83:69:4c:a5:0a:11:3a:
ef:59:cb:03:5c:4c:27:9e:69:53:cd:9b:e7:39:4f:
fa:d9:00:1a:33:68:22:82:88:32:17:e0:bb:4f:d4:
b9:20:d8:0e:e8:fc:d9:b9:4d:b8:c5:07:e0:a2:38:
f4:8f:4d:40:34:84:dd:3c:da:54:fb:f2:28:7c:64:
44:a3:7f:ab:b7:1e:b1:65:fc:92:13:20:10:8e:53:
11:fa:38:00:6f:6b:0c:4f:c2:b9:5c:f7:ef:0b:a7:
cb:8a:d8:0e:92:43:6a:34:af:d5:bb:3f:72:bc:d4:
6d:0c:ca:1e:08:3b:a7:92:d8:d2:1a:fe:3b:b2:9c:
71:a4:1c:c2:c3:44:4d:8d:79:73:c7:54:a3:28:86:
2b:98:6f:53:a1:9e:7f:26:47:b0:c6:02:26:72:97:
28:30:16:4a:19:7f:9c:1c:b2:4a:65:83:de:00:34:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8E:F0:5E:66:DF:E0:DB:99:C5:F7:DD:C8:D9:3A:06:39:7E:46:EA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bY7wXmbf4NuZxffdyNk6Bjl-Ruo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:0c:1e:d7:aa:e5:7c:f1:33:0d:18:43:09:07:a2:59:dd:7a:
93:d8:e9:90:cf:04:5f:7f:99:a1:f5:f3:64:16:72:6e:47:b1:
03:ed:84:b5:06:2d:f6:97:d4:00:f8:bc:c9:c9:13:d0:ed:c2:
05:a5:e6:c0:ae:20:a8:24:26:bc:bf:78:1d:41:61:7d:07:e1:
f1:03:46:d2:c8:fe:54:d8:bd:87:17:07:e2:28:43:ca:01:8e:
fc:4f:92:88:d6:96:26:c9:2b:9a:6b:6f:4e:bc:5e:ee:81:91:
6c:0f:43:ca:9f:c4:56:cd:85:dc:59:76:e3:e7:7b:b8:2d:04:
a1:f3:f5:9a:70:52:0a:30:a1:79:6e:2e:7d:79:46:59:89:94:
dd:06:ef:33:25:74:85:2c:b5:f4:56:5a:39:f2:ba:1a:32:61:
85:6b:5e:ad:26:31:47:a6:a2:eb:2f:f2:15:f1:ce:6a:8c:ca:
9c:12:d1:a6:eb:2e:48:27:76:15:0f:fb:df:b4:c7:48:00:e9:
dd:dd:8d:31:8b:3f:ae:56:53:9b:02:db:45:d3:45:e9:d0:ac:
fb:92:eb:06:63:ce:82:ac:a4:a4:93:4e:03:70:b4:37:5f:30:
c8:46:01:f6:6e:db:ff:a1:3f:b6:9e:6d:d8:b4:80:a1:f9:57:
80:75:a3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:03:00 2025 by rpki-client