Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/gPd1sOYrvgsdpaUIV7zmlIx_CwM.roa
File: gPd1sOYrvgsdpaUIV7zmlIx_CwM.roa (raw, json)
Hash identifier: RNLfRSRMddVtcdMC7lqk4pzoAGMcId2p3XHRDQo5Bos=
Subject key identifier: 80:F7:75:B0:E6:2B:BE:0B:1D:A5:A5:08:57:BC:E6:94:8C:7F:0B:03
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 221E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gPd1sOYrvgsdpaUIV7zmlIx_CwM.roa
Signing time: Sun 22 Jun 2025 01:12:42 +0000
ROA not before: Sun 22 Jun 2025 01:12:42 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8734 (0x221e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 22 01:12:42 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=80F775B0E62BBE0B1DA5A50857BCE6948C7F0B03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:16:0e:f2:b5:b8:dd:d7:0b:0c:20:1b:c5:
c3:93:ce:33:aa:7d:30:4e:07:a2:50:f6:6c:22:f2:
52:33:de:e0:90:e5:00:87:e6:49:03:ad:a2:f8:b5:
17:04:d3:15:e1:48:b6:00:f1:c0:46:1a:e1:48:ec:
03:98:bc:13:fb:9f:66:1c:91:48:7e:4d:1b:bd:4f:
07:27:a5:7d:22:72:1f:2a:ed:95:fb:48:c4:ce:1e:
b5:f8:13:a3:d9:f3:0d:b5:0d:ce:0e:a7:aa:6f:19:
96:aa:c6:49:28:31:95:6a:c2:ae:cd:5a:5d:d2:6e:
57:fc:b8:5c:b5:dc:f1:78:be:ad:8e:4e:9a:61:75:
25:f7:fa:ad:27:51:ab:5a:92:f5:91:e5:a4:89:d0:
ac:7d:aa:68:bf:08:26:88:9b:97:c9:42:93:ba:72:
15:60:70:3e:98:f0:63:fc:5d:63:8c:8f:4c:15:82:
f2:06:86:f9:2e:3a:84:47:8d:b0:9e:b3:5b:da:d2:
0c:57:94:9e:5c:29:eb:64:3e:d3:4f:74:c5:3a:ec:
e5:2b:f8:4f:5d:49:5c:f3:ac:b5:e7:87:3d:62:a5:
bd:c9:81:82:5e:d7:16:f3:2d:f3:1c:2b:9d:6b:87:
35:ba:0a:0f:48:3e:c8:48:d0:33:3d:cd:82:4f:7f:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F7:75:B0:E6:2B:BE:0B:1D:A5:A5:08:57:BC:E6:94:8C:7F:0B:03
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gPd1sOYrvgsdpaUIV7zmlIx_CwM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:45:ca:32:67:89:1c:98:d3:82:5a:c0:ac:80:c8:c8:23:91:
c8:f5:49:80:b9:cb:5d:05:ef:52:ef:e8:bd:96:63:40:c7:d5:
1c:1a:3e:94:ac:46:00:28:7c:69:36:f2:47:f9:b3:1a:9a:46:
d9:1f:82:dd:7a:d3:f9:f2:91:24:f9:74:8d:df:89:41:6f:56:
61:a4:3f:cf:64:cc:aa:42:67:a2:4a:90:22:a1:d7:a0:d5:30:
e1:8d:12:c1:88:53:de:af:6f:7d:67:e8:4d:57:17:62:fb:8d:
c8:9b:84:bd:61:45:c9:72:17:90:0a:69:c8:d4:28:a6:9a:0d:
fe:56:0a:f1:36:af:eb:ed:f8:54:28:ad:63:9a:9e:28:05:cb:
68:ab:4e:82:36:73:47:d1:aa:7a:78:7a:34:e9:a1:ce:4c:ec:
70:22:fb:96:a1:e4:f0:52:f6:d7:41:39:65:ff:99:8a:a7:d3:
af:60:63:46:7f:83:ed:59:57:f8:0d:b3:51:7d:d2:8a:19:43:
f3:a6:a3:53:a8:6d:71:33:ea:ce:f8:58:76:a9:a6:01:2c:9b:
ac:66:9d:f6:62:4f:6a:fe:44:96:cb:d7:63:0d:c5:be:c4:17:
e7:4d:e2:5b:06:26:22:4d:74:03:b0:56:df:a8:54:b7:72:68:
d6:d5:b2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:37:07 2025 by rpki-client