Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/cWFY0AkVx9_Lc4OoswoUzoqhzL0.roa
File: cWFY0AkVx9_Lc4OoswoUzoqhzL0.roa (raw, json)
Hash identifier: vzxAvQpP+7gKpMrFwTbIHQ0mRAi7RUtHgLoOduJN8NY=
Subject key identifier: 71:61:58:D0:09:15:C7:DF:CB:73:83:A8:B3:0A:14:CE:8A:A1:CC:BD
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 133E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cWFY0AkVx9_Lc4OoswoUzoqhzL0.roa
Signing time: Sun 01 Jun 2025 17:39:10 +0000
ROA not before: Sun 01 Jun 2025 17:39:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4926 (0x133e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 17:39:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=716158D00915C7DFCB7383A8B30A14CE8AA1CCBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:0b:01:aa:15:e1:86:33:b7:29:88:16:d6:
79:a8:5a:b5:f0:3a:fb:ba:3d:ba:96:e9:14:b5:a3:
34:a2:c1:7a:0b:a3:2e:fb:ff:ac:85:c4:e0:30:61:
f3:3d:46:65:30:49:e8:96:a1:80:e3:f7:6d:19:3e:
0e:4d:b3:34:c0:02:54:fb:8c:75:32:65:4d:90:48:
66:01:c1:3f:c3:b3:4e:ef:99:d0:a8:50:43:59:40:
a5:c2:81:e6:ac:81:4e:76:53:8c:4f:6b:ae:30:49:
01:bf:32:d6:74:1d:d5:0b:49:3c:10:a2:43:79:8d:
bf:e1:3a:b8:a8:16:3f:bd:3b:cd:1e:17:2a:87:1d:
7b:b4:af:c6:b3:5c:9a:49:02:06:f8:2c:9c:d8:19:
6b:d0:3a:2f:f8:a8:f1:18:9d:11:0a:45:6e:64:58:
60:ca:26:d1:7e:b8:a8:b6:9e:1d:2f:61:a5:00:13:
9d:d6:47:26:d4:e6:49:53:6c:51:1f:be:35:e9:ca:
63:f5:e4:06:f1:40:41:32:16:ef:c7:b4:0c:de:15:
dd:f4:e2:28:dd:01:4f:36:0c:4b:71:4b:cd:b9:ab:
1b:e4:a7:63:a7:52:c0:59:0e:16:10:76:3d:e3:b1:
b4:28:a2:fc:1f:25:e2:5a:b8:2a:f1:30:d7:2c:04:
c7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:61:58:D0:09:15:C7:DF:CB:73:83:A8:B3:0A:14:CE:8A:A1:CC:BD
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cWFY0AkVx9_Lc4OoswoUzoqhzL0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:9e:24:33:3f:e6:7c:3f:47:e0:78:dc:5b:c5:db:7b:cd:2c:
a3:54:e4:c8:ff:a8:85:ba:5d:10:11:ec:79:70:e5:c0:45:20:
7b:50:f9:25:67:b2:83:f7:38:35:65:4a:34:78:7e:27:e3:46:
62:55:f5:ab:af:b9:40:24:8c:3d:a0:7f:b3:61:ee:2f:5a:d2:
f4:d7:25:14:57:ee:19:b1:2e:b9:e7:84:72:5c:0e:56:15:a8:
41:7e:50:a5:fc:ea:31:9f:48:13:83:1a:ae:21:a7:b2:94:d7:
4e:9c:7b:f5:ec:a7:1b:ba:a9:b7:d1:46:6b:ac:ca:aa:9e:5e:
3d:06:af:54:0f:39:fe:1a:c2:46:49:62:50:88:87:83:1d:37:
bb:92:62:a2:b7:69:fc:8a:86:a6:fb:ba:4b:a5:35:cb:98:f3:
a5:ad:4d:73:e4:0c:d8:64:64:01:62:60:68:93:e7:99:23:a8:
3f:87:c1:36:2c:c8:03:e5:57:c4:29:2c:ae:48:75:74:99:94:
99:f2:c5:e5:10:53:ea:4c:82:eb:56:9a:5c:a6:23:28:f5:e9:
37:af:40:16:14:20:12:7c:41:57:4d:8c:38:58:ce:be:ab:0d:
a0:44:2d:e4:f3:91:54:f6:a6:3b:b4:9e:85:cb:12:7d:9d:ae:
cf:d2:59:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:34:15 2025 by rpki-client