Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/dKomnuK9FA0cQ5ShdsDJGoARPco.roa
File: dKomnuK9FA0cQ5ShdsDJGoARPco.roa (raw, json)
Hash identifier: TTYHovjc/NYzt16hJmHiGkQ5tTFgIGUtUc23dLUUQyw=
Subject key identifier: 74:AA:26:9E:E2:BD:14:0D:1C:43:94:A1:76:C0:C9:1A:80:11:3D:CA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1E6E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dKomnuK9FA0cQ5ShdsDJGoARPco.roa
Signing time: Mon 16 Jun 2025 15:40:14 +0000
ROA not before: Mon 16 Jun 2025 15:40:14 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7790 (0x1e6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 15:40:14 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=74AA269EE2BD140D1C4394A176C0C91A80113DCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:eb:c2:c6:d7:80:64:d8:9a:a9:f7:cc:65:
7b:0d:09:6b:c1:81:d1:d0:79:9c:51:bc:e6:d0:a7:
dd:0e:ce:e0:5d:29:4b:c1:d1:38:bb:4d:48:b8:67:
0f:a7:05:57:ce:57:68:0d:88:ac:41:c9:2b:ba:ec:
00:3f:87:1b:51:13:a4:e0:87:8d:45:af:a0:7d:de:
df:40:19:27:9f:eb:f4:40:7e:d1:20:98:c3:56:55:
c9:14:58:8b:dc:89:bf:4b:dc:d7:c4:7b:81:0e:ad:
1c:61:10:de:b7:a4:e5:22:ca:a8:d7:8c:e5:17:6e:
a9:7b:67:0e:f9:1c:e2:a0:20:2a:91:38:2e:8d:9a:
7a:ec:38:24:22:27:57:26:b0:71:94:e2:76:7e:fb:
71:d1:0d:3e:35:c5:d5:57:bf:7a:a7:bf:56:35:6f:
75:c2:a6:4c:cc:36:e7:89:d7:d8:dc:37:44:99:df:
b1:7b:b8:4c:be:fd:53:2f:21:bd:b7:eb:6d:23:3a:
9b:37:7a:dd:71:fb:0c:43:47:97:56:e1:bb:1a:8f:
83:30:86:5c:f4:1c:37:f6:b6:26:04:4a:2d:88:a5:
6f:1d:ad:81:16:05:f4:ec:cf:11:5f:38:6a:03:5a:
41:ae:4f:12:fc:e3:c5:68:16:5e:3c:62:af:02:57:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AA:26:9E:E2:BD:14:0D:1C:43:94:A1:76:C0:C9:1A:80:11:3D:CA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dKomnuK9FA0cQ5ShdsDJGoARPco.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:9b:1e:14:9b:95:38:a9:39:18:19:78:76:f5:19:b1:5f:e5:
ca:a7:7b:d5:05:c9:ae:fe:ee:d7:6b:26:6d:b6:5a:0c:d6:31:
ff:f5:10:44:24:28:75:c9:d2:a2:6e:9c:e0:41:dd:50:1b:f7:
f3:4b:1d:15:3f:ef:4d:c7:12:4d:e2:54:8f:9b:82:35:9f:c3:
35:ad:89:55:4f:7d:92:b6:76:d8:13:eb:61:76:e1:72:92:20:
78:5c:9c:64:1d:40:9d:39:bd:35:8d:a9:3f:c5:4a:49:64:05:
bf:4f:ef:6b:59:83:0f:e3:e5:55:27:1d:0d:63:e5:f1:04:2f:
4f:f4:f6:c5:ec:7d:08:4c:56:e7:5e:fd:98:b9:9c:bd:53:61:
04:c4:d3:8b:dc:00:c3:c0:d6:53:b4:e3:a4:5d:c6:2f:0f:70:
25:e4:22:2c:01:80:b7:2b:d4:4d:01:86:52:e8:c5:e7:ec:4c:
06:f6:23:76:e3:4f:05:0f:e2:5f:75:f3:31:6d:31:f9:0e:d5:
09:db:e3:4a:a7:29:9a:87:77:c3:21:09:83:96:08:cd:b4:f5:
46:72:d9:67:5a:1f:68:af:63:ba:86:04:a0:d1:14:b3:f6:96:
80:91:5c:de:94:13:82:fc:96:65:ae:e6:2b:3c:06:ed:50:3a:
3c:76:ed:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:36:11 2025 by rpki-client