Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/gibqfg07GRTXlA9FK7sisnDMDuY.roa
File: gibqfg07GRTXlA9FK7sisnDMDuY.roa (raw, json)
Hash identifier: h3mM4/yzfk+5oo+sIeON0msvn9z52NOwvuKYpeU0gMQ=
Subject key identifier: 82:26:EA:7E:0D:3B:19:14:D7:94:0F:45:2B:BB:22:B2:70:CC:0E:E6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1DB6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gibqfg07GRTXlA9FK7sisnDMDuY.roa
Signing time: Sun 15 Jun 2025 16:40:00 +0000
ROA not before: Sun 15 Jun 2025 16:40:00 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7606 (0x1db6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 15 16:40:00 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8226EA7E0D3B1914D7940F452BBB22B270CC0EE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:63:d2:da:18:e4:40:76:1b:c8:2e:23:96:
33:31:c0:75:cc:fe:2c:6f:92:46:61:94:60:dd:2e:
67:91:6d:3f:fc:2d:83:58:89:40:92:cf:50:da:7c:
32:82:de:07:c0:75:d1:0b:39:23:13:a2:a6:18:3c:
42:56:a9:68:b6:ac:e7:4f:29:11:c7:f3:56:e3:a9:
83:75:4d:e6:b0:8b:fe:db:92:a3:4d:09:73:0c:66:
c5:8e:f8:90:06:23:00:e1:ab:49:10:cd:36:b3:12:
02:89:ce:a1:6f:dd:45:55:09:79:d3:7c:e3:b4:12:
28:2d:15:08:0f:a5:c3:48:eb:6d:bb:49:db:63:df:
82:f5:d6:73:e1:c6:28:39:61:94:43:d8:29:8d:68:
38:57:f2:9d:fb:51:2a:bd:3a:5a:95:6c:c1:32:48:
7c:6b:32:37:1a:82:cd:08:30:e6:13:6a:6e:09:bb:
73:df:52:43:30:ac:09:23:1e:70:a6:76:c9:00:07:
21:c2:64:09:c9:f2:8b:ab:18:be:2a:77:e0:ea:a8:
c8:da:10:4f:3f:f4:e3:ac:e5:8a:78:d1:37:b7:ea:
44:ca:94:16:ea:41:ae:60:42:9e:82:b0:a8:18:10:
9b:af:47:cc:de:b4:a6:0a:c8:fe:74:d2:81:1b:ac:
bb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:26:EA:7E:0D:3B:19:14:D7:94:0F:45:2B:BB:22:B2:70:CC:0E:E6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/gibqfg07GRTXlA9FK7sisnDMDuY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:88:c8:f4:07:5e:6e:1e:51:83:30:d9:96:46:23:df:ea:4f:
63:aa:57:8c:d5:0e:b8:a7:8c:be:80:a9:87:ea:a5:c0:2f:98:
e4:c9:e2:5d:89:ad:af:77:ae:2b:6e:d6:6c:0b:55:92:68:c5:
cd:a7:6e:0e:e1:c2:e8:c3:54:e7:66:af:4e:65:33:7f:20:f9:
f0:72:a8:c8:e2:09:76:3a:e2:4f:dd:7b:bd:a8:dc:14:76:94:
ab:33:74:da:c3:b3:0e:4e:1d:dd:51:bf:e1:28:7d:e1:f6:ae:
f5:23:2e:ac:0e:37:12:27:54:e6:3c:e5:67:6c:b3:77:ca:50:
dd:d8:52:6a:1f:95:ae:46:10:04:cc:9f:64:8f:d8:ac:8d:d8:
a7:d1:5f:4d:f2:97:53:43:41:51:2f:60:1d:37:71:22:e0:f5:
75:c4:bc:cb:73:26:e2:9b:e1:b6:e5:35:ed:e6:bb:20:96:4b:
a3:22:ce:e1:19:b0:34:b8:42:91:93:e4:8b:e8:64:15:5b:b1:
db:5d:66:52:c5:f8:de:54:52:99:8f:2c:a9:c1:1e:34:d8:2c:
b3:e8:c8:9c:b4:0c:2b:9f:70:ac:66:2b:a3:69:a8:bd:96:53:
93:5f:6a:4e:81:ff:35:13:5e:f0:cc:4b:3a:9d:dd:09:6c:05:
ea:2e:b7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:53:23 2025 by rpki-client