Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/d4YOpP8mns3HO-q14lJ6xYmg7lo.roa
File: d4YOpP8mns3HO-q14lJ6xYmg7lo.roa (raw, json)
Hash identifier: Lgo17CMUJxQOUQf0Wm95j52Vg6JBnqNu3VyaxV/P+sU=
Subject key identifier: 77:86:0E:A4:FF:26:9E:CD:C7:3B:EA:B5:E2:52:7A:C5:89:A0:EE:5A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1E82
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/d4YOpP8mns3HO-q14lJ6xYmg7lo.roa
Signing time: Mon 16 Jun 2025 18:11:00 +0000
ROA not before: Mon 16 Jun 2025 18:11:00 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7810 (0x1e82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 18:11:00 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=77860EA4FF269ECDC73BEAB5E2527AC589A0EE5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:c3:5a:99:24:09:e4:77:1d:4a:1c:65:68:
a6:27:02:f7:be:73:8e:a4:96:ea:21:e2:61:bb:a3:
ac:b2:16:41:c2:4f:17:a8:e1:d7:42:a1:c7:0f:c4:
3a:86:a6:81:bf:7c:57:a0:89:8a:83:7f:d8:9a:7c:
95:fe:7c:6c:bd:75:33:a7:14:5f:03:b6:6a:88:d0:
21:88:3b:e0:cd:fb:6d:8d:2c:f7:49:2a:5e:02:6e:
e1:4c:99:e9:6b:60:65:46:49:06:97:fc:6a:a0:1c:
f1:59:2a:24:f0:8a:3f:bc:59:67:a4:80:9a:b7:49:
c6:eb:9a:48:21:d4:2c:57:3b:db:c6:e6:c2:4f:d7:
8c:91:33:43:01:a0:be:18:cf:42:b3:d6:0c:15:f2:
0a:be:3d:7a:9f:c2:b8:11:98:1b:63:78:1a:0e:fe:
50:24:f5:eb:6e:84:61:dc:6f:dd:ab:fa:a5:9e:b2:
ad:16:cf:0b:d4:43:37:ca:65:dc:ac:52:1f:ed:d5:
88:f2:27:a3:88:fb:b0:c2:bc:96:d3:aa:a8:49:fa:
17:f6:fc:63:a0:95:ff:c2:fb:5f:62:2d:48:3f:99:
99:d8:32:05:ce:e1:d1:15:88:9b:29:5e:b5:f6:66:
33:a7:07:cc:aa:c4:93:e7:35:d7:d6:19:a5:f8:c5:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:86:0E:A4:FF:26:9E:CD:C7:3B:EA:B5:E2:52:7A:C5:89:A0:EE:5A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/d4YOpP8mns3HO-q14lJ6xYmg7lo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:ea:91:9f:b8:64:d5:cc:2e:ea:5a:36:c3:aa:b3:4b:aa:2d:
f7:12:49:a3:2a:0f:04:e8:d6:4d:54:28:58:3a:dd:75:f4:ee:
ec:55:61:07:52:69:b9:a6:04:fb:5b:41:2f:c4:10:67:71:dc:
e8:9d:ee:56:dd:80:71:aa:7e:4f:e9:9f:89:31:94:5d:cc:41:
a3:f0:8b:f0:40:fb:8b:84:dd:10:2a:cf:e3:af:1b:37:26:c2:
2c:d2:4c:be:7e:e6:44:9d:27:fc:c3:92:d7:09:63:4f:4b:32:
bf:1f:c8:87:11:b6:b3:90:e4:57:b0:c7:0d:c1:aa:76:ed:10:
28:a0:90:9b:d6:ad:f9:62:ee:b1:4b:d3:33:5d:95:c3:dc:9a:
3a:76:07:78:9c:49:95:e3:5f:a4:e4:26:e9:06:13:f4:13:4c:
20:40:00:5d:4e:d2:a9:3f:f6:b6:d0:95:68:1c:e8:47:99:b9:
9f:73:e0:5c:d1:55:e8:5f:91:65:a2:e8:74:05:24:75:0c:06:
1f:6d:74:27:fb:7e:45:fb:8d:83:5c:4d:fa:37:a6:25:82:64:
b1:8f:4c:fc:f2:e4:21:90:6b:0a:58:3e:b7:b1:71:77:c8:0f:
db:15:4a:f9:5c:70:e8:22:93:12:bf:25:42:38:7e:1f:b7:de:
79:a6:38:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:57:57 2025 by rpki-client