Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/dJr13VlVHK93E62mXxmSE17akkg.roa
File: dJr13VlVHK93E62mXxmSE17akkg.roa (raw, json)
Hash identifier: Ok1/7jRPmisYSbk3uutc24botNb4oa6mG3qHjc2l+jU=
Subject key identifier: 74:9A:F5:DD:59:55:1C:AF:77:13:AD:A6:5F:19:92:13:5E:DA:92:48
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1D4A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dJr13VlVHK93E62mXxmSE17akkg.roa
Signing time: Sun 15 Jun 2025 03:30:20 +0000
ROA not before: Sun 15 Jun 2025 03:30:20 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7498 (0x1d4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 15 03:30:20 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=749AF5DD59551CAF7713ADA65F1992135EDA9248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:08:78:48:94:b9:a1:3a:da:ad:75:a1:09:
53:ac:a2:09:38:6f:1f:e5:f0:df:bf:a5:7a:af:ee:
83:03:56:2c:f3:66:06:cb:cd:09:ae:c3:04:ad:cb:
84:49:99:9c:27:7a:b3:26:70:26:4b:1e:91:ae:96:
4c:78:4e:1c:f3:8d:53:9e:70:67:f9:b2:b3:d7:9b:
f9:aa:31:5a:d3:f5:35:05:68:44:79:9a:a8:51:97:
bb:4a:2a:51:4c:03:5f:94:c2:07:98:71:28:7c:f6:
26:6d:e6:6a:7b:63:97:2d:bc:67:99:41:5e:d2:0b:
76:e9:91:b5:2d:f0:84:0d:c1:39:91:f4:bf:86:ab:
93:8a:bc:32:39:13:a7:97:c4:7d:61:cc:7b:d1:1a:
84:34:4e:4f:6b:31:94:9f:dc:44:6e:8a:e4:36:b2:
9e:b8:8e:0b:dd:b8:40:ae:b9:29:26:97:6b:55:7f:
ab:52:27:0e:9b:54:a4:12:d2:61:79:d4:fb:b8:de:
1c:1b:44:cb:03:d2:86:d1:6f:d4:7a:b0:73:74:7a:
96:67:01:0b:8c:30:cd:f4:93:94:5d:94:f3:c6:96:
ec:24:73:12:b2:b8:07:cb:0f:97:1e:a2:29:5e:44:
f7:32:5b:a8:7c:9e:8a:c7:72:00:9d:1b:b2:d7:ae:
74:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9A:F5:DD:59:55:1C:AF:77:13:AD:A6:5F:19:92:13:5E:DA:92:48
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dJr13VlVHK93E62mXxmSE17akkg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:ef:09:1c:3f:83:c3:51:02:41:a9:1e:b9:58:3b:3a:91:8a:
09:ae:c1:f4:e5:49:fa:3b:47:36:14:ea:5b:a4:2b:65:d9:44:
f5:58:94:83:b4:7f:ad:b2:6b:ac:fb:44:6d:5a:8b:74:e4:b3:
ae:fc:e2:17:76:4f:5f:ca:79:7e:e5:7e:3c:04:03:52:f7:08:
91:3b:b0:32:ce:96:2c:54:93:78:32:b7:31:2b:b0:f3:00:8c:
73:83:2f:84:3d:ce:17:83:da:43:7b:c2:b8:7f:ca:61:c4:10:
0b:5e:ff:e9:ab:03:ab:ef:31:c7:a0:4c:a8:fd:3e:51:e9:8f:
15:75:07:42:b0:ba:8e:d6:fc:81:07:7e:2f:f8:b3:f4:3f:0c:
8f:c1:ce:f0:af:05:8a:f6:48:ea:e4:91:06:a5:e6:ec:84:d6:
f5:e2:b1:c2:d0:09:07:4b:04:a8:94:61:d0:6c:6d:78:7e:15:
f7:57:24:e5:70:f0:70:66:ae:4f:05:a0:28:a4:a7:94:7c:1d:
e2:d6:d1:93:3e:6d:67:5a:55:66:38:ca:95:2e:b0:14:28:22:
ba:48:8f:1e:18:60:42:a1:e8:cd:38:4f:98:ce:49:c9:15:2a:
06:7c:4b:95:cb:5a:f5:bc:4e:43:d5:d4:19:85:cd:3a:8a:e2:
77:9f:ff:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:53:23 2025 by rpki-client