Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/cvz7kWsA2QpXFHadKuv_qOze7WA.roa
File: cvz7kWsA2QpXFHadKuv_qOze7WA.roa (raw, json)
Hash identifier: 5X5dUiLZjidc2MquA5C3MGlcAswNlGebfVW977bhZjY=
Subject key identifier: 72:FC:FB:91:6B:00:D9:0A:57:14:76:9D:2A:EB:FF:A8:EC:DE:ED:60
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1F0A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cvz7kWsA2QpXFHadKuv_qOze7WA.roa
Signing time: Tue 17 Jun 2025 11:10:17 +0000
ROA not before: Tue 17 Jun 2025 11:10:17 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7946 (0x1f0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 11:10:17 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=72FCFB916B00D90A5714769D2AEBFFA8ECDEED60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:74:7e:51:49:38:9b:9e:ea:b1:aa:9e:17:
3b:69:98:b9:a2:10:9f:b4:26:87:5a:0b:35:35:77:
85:56:be:ba:d3:d3:b3:22:be:bf:1e:f0:bc:44:1a:
60:23:16:62:49:72:8a:05:8b:fb:a7:c1:02:99:3c:
f2:dc:b1:a9:98:46:3f:0a:c6:48:34:29:18:7f:61:
c0:7f:d0:29:4e:f7:27:09:66:52:cb:eb:a7:cd:73:
4c:48:4a:44:25:d3:3e:c9:89:49:ee:bd:da:74:04:
23:3f:a0:b8:e7:5c:7b:98:f7:d4:77:aa:5b:ca:24:
99:bd:c3:3d:04:9f:e8:db:89:43:fa:7d:6b:d9:45:
56:d2:c2:ea:84:75:ca:5f:6e:11:e5:5d:02:4a:9c:
de:90:3a:be:57:2e:df:e2:73:9c:59:0e:ba:c8:b2:
a5:e9:f4:d8:6c:f9:b9:13:6c:fb:37:bb:45:79:89:
94:27:17:49:bd:de:11:78:46:fb:34:88:64:4f:de:
b4:ee:0a:5c:0a:6b:a4:ae:7e:63:3e:3f:76:7e:e1:
8c:39:88:5e:f3:fe:54:eb:5b:ea:97:0e:0d:76:39:
c9:e7:6d:4e:82:89:e7:80:6d:08:7c:84:5f:c3:b2:
bb:16:72:ed:7e:08:64:a0:1c:47:15:ae:5e:65:2e:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FC:FB:91:6B:00:D9:0A:57:14:76:9D:2A:EB:FF:A8:EC:DE:ED:60
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cvz7kWsA2QpXFHadKuv_qOze7WA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:06:10:b8:57:cd:38:74:19:4b:f1:bc:7d:3b:fd:0b:96:ce:
33:e5:35:0f:33:c6:19:a9:40:2f:93:1a:a5:99:a5:fb:0c:04:
dc:50:81:57:e8:8a:01:c1:4a:0e:7c:18:4b:e3:b4:af:42:5a:
84:3a:7b:5a:34:8e:e7:40:1d:24:fb:59:02:7e:f7:8e:41:6d:
6c:7b:2b:07:ed:e7:c7:08:d1:28:f6:43:7e:76:88:6b:bd:71:
ab:8c:f8:ce:a6:45:9d:f2:69:ba:ae:18:1d:89:f4:48:c4:48:
46:d3:8c:f1:7c:c5:3f:32:9d:dc:aa:63:ee:13:28:ce:23:b3:
d5:e8:15:d3:af:22:d6:10:ec:32:fc:c7:d4:fe:04:2c:89:a8:
16:81:19:8a:97:de:73:3f:d1:30:b1:f9:8f:dd:8e:60:b9:4b:
dc:f0:24:8f:31:a2:83:dd:3f:7a:3b:1e:b5:c8:9e:a4:e5:41:
41:55:4f:e4:d9:2e:23:b2:13:b8:45:c4:6c:77:37:68:63:c8:
90:a9:5d:1f:18:45:06:f0:c6:6f:70:bc:dc:e7:e6:ff:9d:be:
5d:ab:3a:3a:c0:0c:10:5f:14:b1:d0:6e:d5:44:82:16:72:d4:
02:7f:6d:85:17:b0:5e:67:4b:f8:74:17:4a:4a:49:3e:15:d4:
aa:66:df:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:37:41 2025 by rpki-client