Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/d9kXhlEpAwc76tGyjzvRr4a6K9g.roa
File: d9kXhlEpAwc76tGyjzvRr4a6K9g.roa (raw, json)
Hash identifier: Kc8gWEV9V0yDHsICpoSHFAqOB4xDLh3A2UUUJvBwbVc=
Subject key identifier: 77:D9:17:86:51:29:03:07:3B:EA:D1:B2:8F:3B:D1:AF:86:BA:2B:D8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0EB2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/d9kXhlEpAwc76tGyjzvRr4a6K9g.roa
Signing time: Mon 26 May 2025 16:09:03 +0000
ROA not before: Mon 26 May 2025 16:09:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3762 (0xeb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 16:09:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=77D91786512903073BEAD1B28F3BD1AF86BA2BD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:a6:c0:aa:1c:7c:92:25:fe:a4:43:27:9b:
74:b4:eb:7a:92:9b:ed:d4:58:3f:8e:9b:ab:8d:ca:
64:be:24:47:2a:65:56:d6:35:3a:58:e0:b2:49:7a:
da:5c:84:13:c1:72:a3:ed:b7:ca:71:1a:d5:0f:d1:
20:4d:08:ed:c2:1a:3b:8d:a9:ba:ac:e0:7e:b6:ef:
6d:33:10:2b:3a:8b:ed:7f:79:b4:a5:37:89:6e:18:
33:1f:91:15:2d:a3:f4:03:6d:5c:fb:e1:37:30:8b:
84:3a:28:aa:98:ca:09:09:31:e7:f2:ce:f4:62:70:
e2:a3:88:ec:3b:d7:5f:4d:ea:21:cc:c2:13:12:2c:
c2:73:48:9a:92:5f:c5:98:1a:70:33:2a:f4:15:6a:
ee:e2:26:71:2d:e0:34:54:d6:29:29:d4:9e:76:77:
89:2b:bd:68:b8:3d:48:d8:9c:5f:b0:a6:98:96:d2:
8d:db:47:93:35:fc:3b:63:4c:a2:be:9d:1a:4f:9c:
25:3c:ca:2a:7c:94:62:0f:73:64:4f:bc:14:b6:06:
cf:18:79:bd:78:9d:73:a3:76:48:a0:86:32:f9:86:
43:74:ca:60:24:16:45:16:46:f2:8a:96:de:f5:49:
7a:f0:d0:fd:bd:0c:38:8f:a2:83:51:93:09:9a:25:
c6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D9:17:86:51:29:03:07:3B:EA:D1:B2:8F:3B:D1:AF:86:BA:2B:D8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/d9kXhlEpAwc76tGyjzvRr4a6K9g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:e6:98:2a:0d:f7:c8:59:03:d7:31:c0:4e:66:2a:0d:c3:bd:
f8:b8:75:e3:2a:31:da:f6:54:bd:4c:e6:a0:b3:b9:3a:17:57:
87:e9:97:4d:86:6f:bc:04:c8:b1:49:53:fd:f1:09:b1:40:36:
fa:f2:69:91:9c:a1:e3:64:76:b1:06:cb:57:71:3a:eb:93:51:
70:f2:3a:36:dd:b3:c3:a7:e1:8f:9d:82:59:61:ff:99:e8:94:
eb:ff:7d:ed:b8:df:d2:77:f3:fd:e9:51:3a:db:42:da:d8:5d:
93:06:62:24:08:6a:6a:19:38:cd:aa:05:69:a4:38:e5:8c:63:
79:63:c3:a0:3d:f0:26:1a:33:a9:dc:cc:45:8c:bc:f1:bd:8c:
85:ed:80:3a:2f:27:13:06:2c:7b:80:9b:0a:39:17:53:0c:f4:
4f:be:c6:99:b3:30:54:b9:86:9b:0d:a1:da:77:74:f2:57:d8:
ed:1c:68:07:d2:2a:d6:f6:6a:e1:e1:56:fa:bc:7e:15:a4:73:
18:d0:65:76:cd:58:84:ae:4d:5f:96:0a:aa:ad:f0:5a:f3:38:
04:1a:94:29:0a:70:e1:92:1c:41:e6:6e:ea:92:61:33:5f:06:
f0:64:74:24:23:77:ad:95:cf:05:db:44:0f:4b:98:8a:74:84:
71:c9:79:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:49:24 2025 by rpki-client