Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/dTg-fUrqnkgbKyJYlx-fbYiiQfw.roa
File: dTg-fUrqnkgbKyJYlx-fbYiiQfw.roa (raw, json)
Hash identifier: cO3BmOnewpR6CxOe+MgEjG9AR3/Brc/tu1M3ld85qZI=
Subject key identifier: 75:38:3E:7D:4A:EA:9E:48:1B:2B:22:58:97:1F:9F:6D:88:A2:41:FC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 094A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dTg-fUrqnkgbKyJYlx-fbYiiQfw.roa
Signing time: Mon 19 May 2025 11:08:13 +0000
ROA not before: Mon 19 May 2025 11:08:13 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2378 (0x94a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 11:08:13 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=75383E7D4AEA9E481B2B2258971F9F6D88A241FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:6e:70:02:a0:e6:bb:e5:29:41:3e:58:6f:
35:13:30:5f:66:a0:73:c5:7d:8a:ff:5b:24:f4:52:
aa:e4:0f:9a:15:9b:b7:86:c5:29:39:01:c2:34:2b:
92:36:0f:43:db:97:e1:6f:03:3a:fc:42:3f:fb:4e:
3c:48:27:d9:69:09:89:19:c6:fc:97:0b:67:08:5c:
94:ca:bc:55:d6:ea:f9:ec:d9:ad:c2:48:60:02:af:
b3:4d:44:2f:cf:7c:1e:a0:63:7b:12:be:a6:47:58:
9b:b2:d8:a6:ec:37:92:dd:a2:51:59:9c:f5:67:c8:
42:77:09:52:4a:42:49:22:76:e4:8f:23:81:d3:ff:
c0:c8:e6:55:22:12:ea:1d:c9:52:86:b6:e2:af:dc:
8f:8a:d6:71:a8:2c:b2:23:a7:57:38:ff:f9:a4:cb:
29:03:b6:7e:c3:2e:d6:4f:33:5d:7e:11:b2:7b:f7:
46:13:3d:23:e2:8e:25:29:a1:3a:c2:47:98:9c:24:
25:2c:97:51:2f:bb:43:26:f8:a2:12:e6:de:13:1d:
ee:0a:c4:66:07:38:76:40:49:0e:55:f9:51:70:f9:
33:05:f7:42:3c:46:7c:9c:3c:53:fb:64:81:b3:8e:
c4:67:d9:18:4a:b5:1c:19:ed:2b:87:95:ac:34:8a:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:38:3E:7D:4A:EA:9E:48:1B:2B:22:58:97:1F:9F:6D:88:A2:41:FC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/dTg-fUrqnkgbKyJYlx-fbYiiQfw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:6f:d0:68:46:f8:31:df:3c:84:0a:58:8a:b3:bc:5a:c6:5f:
72:42:34:23:5a:87:6c:63:df:90:c2:81:51:56:d8:d3:19:59:
80:22:f7:09:10:62:1e:cb:c6:a4:89:1f:c5:e7:ee:31:b3:a8:
05:8f:d9:5c:0b:38:89:e3:7f:3e:67:c3:0d:21:a7:50:64:a3:
fd:de:31:dd:2a:20:c9:f6:2c:1a:16:68:b7:bf:be:e2:65:2a:
a8:f8:f5:73:bb:eb:e3:16:da:4a:5e:41:89:ba:6f:f4:7e:b7:
96:7e:c3:19:ce:d9:2b:97:01:7f:63:21:05:61:6e:bc:86:7b:
31:cc:19:49:3f:6a:af:c9:49:6b:26:8f:84:b6:11:41:84:37:
96:42:37:01:6a:b4:dd:ee:12:b1:0f:5c:31:a9:2c:98:89:1e:
4d:fb:12:51:fe:33:f5:60:af:e7:9e:7f:b5:77:f7:ba:45:7b:
6b:b1:63:05:e6:a7:be:76:22:86:9a:47:53:dd:74:50:da:91:
67:40:f5:49:e3:09:43:97:c5:76:e2:11:7a:b0:1f:18:02:52:
dc:27:f9:4b:1f:1c:5f:e9:a4:6d:d4:c6:bf:7a:da:08:7a:24:
b6:0c:80:88:50:56:17:4b:ec:88:a2:01:29:4c:44:6d:7f:42:
0b:6f:6e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:10:51 2025 by rpki-client