Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/cTBjFVeIQ9ZGg6g88mzG1fSEAko.roa
File: cTBjFVeIQ9ZGg6g88mzG1fSEAko.roa (raw, json)
Hash identifier: a5TwYU7o+Pa0o6T9rxw3vtOicEmlK7UfMON38CCu+tg=
Subject key identifier: 71:30:63:15:57:88:43:D6:46:83:A8:3C:F2:6C:C6:D5:F4:84:02:4A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1D9E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cTBjFVeIQ9ZGg6g88mzG1fSEAko.roa
Signing time: Sun 15 Jun 2025 13:40:01 +0000
ROA not before: Sun 15 Jun 2025 13:40:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7582 (0x1d9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 15 13:40:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=71306315578843D64683A83CF26CC6D5F484024A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:89:91:a1:15:3f:79:05:14:a9:6a:c9:21:
de:a3:30:47:a3:8a:28:96:ba:75:37:08:f4:b3:68:
8b:0e:ad:2e:3d:7b:8d:52:a1:85:0e:a5:d6:82:f7:
23:b0:16:43:69:d7:99:19:b3:4f:fc:30:21:29:01:
1a:68:08:4e:2e:5c:2c:03:d9:10:3c:76:a1:af:e4:
a3:72:92:80:3a:25:35:7d:11:ea:3e:f9:ee:96:04:
cf:2e:f2:b3:a3:ed:a1:eb:0c:ff:89:8c:ba:77:27:
f2:0b:2e:75:56:b3:7d:77:7c:3f:a1:39:86:12:8c:
47:05:1a:c7:53:60:26:66:af:04:59:14:25:4f:76:
26:c3:3f:8c:25:95:05:6a:76:a5:f0:bf:d8:57:32:
be:6d:e3:99:16:3c:d5:eb:66:14:af:33:b4:0c:73:
db:3f:0b:77:3e:cb:2f:43:d6:01:a8:ac:79:b7:3f:
0e:ae:33:b3:bc:49:b1:dc:3a:61:a9:5e:a6:59:ff:
d5:5c:70:15:63:18:62:74:14:49:99:f9:a7:2b:ec:
8f:ef:8b:94:0f:95:6a:75:d0:3c:41:9e:35:de:4d:
12:77:90:76:fb:60:a7:db:e5:06:e2:ec:65:96:3a:
ab:7b:0d:a4:1f:b1:4a:52:70:71:75:ec:ff:fe:ca:
88:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:30:63:15:57:88:43:D6:46:83:A8:3C:F2:6C:C6:D5:F4:84:02:4A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cTBjFVeIQ9ZGg6g88mzG1fSEAko.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:3d:a0:2b:28:bc:d6:d0:3c:d2:26:8d:4c:bd:23:df:da:c5:
d2:0f:3b:b8:fe:0f:3e:ac:cc:e9:5b:1d:ba:a4:3a:7f:32:44:
01:b8:25:ab:05:5c:a9:72:6f:ad:41:47:94:ba:38:27:12:ab:
4c:69:92:68:05:ca:27:1e:bc:e5:47:57:28:2e:fc:b6:5d:ed:
c3:be:39:d3:a0:6b:24:58:63:00:ec:99:13:af:e9:a2:bf:0e:
8d:9c:da:b5:50:e1:ad:87:29:85:a4:6d:03:99:d5:72:a3:da:
a8:d7:49:d2:a1:df:1c:17:8d:c5:6f:96:ac:02:78:d7:06:d9:
46:43:8d:48:2d:eb:f3:58:ce:1f:58:d1:ed:57:23:38:f6:99:
05:8b:04:b6:93:86:9e:b3:6a:4a:75:fb:c1:26:f9:52:ac:c7:
fb:d3:1f:1f:2b:f6:2b:12:0b:30:fc:59:f1:b5:8b:f2:0d:2b:
68:8c:26:78:5f:92:f2:e5:37:cf:34:fb:d7:30:e8:83:36:01:
89:3d:e1:d0:5d:27:90:79:cc:e7:1b:b5:6f:aa:1e:62:66:a9:
0b:b2:78:60:1d:3e:01:66:20:b3:dc:bb:26:28:05:43:15:88:
77:6a:37:92:f5:69:43:44:b6:15:a1:35:7b:9b:c8:5a:99:05:
84:68:54:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:41:14 2025 by rpki-client