Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/iLfjojrGR5elyo5tn7dMuIYoOhM.roa
File: iLfjojrGR5elyo5tn7dMuIYoOhM.roa (raw, json)
Hash identifier: z0hzfkbwNtIJbhj362SE9ktvNu6n64SbgTKsbPDENpI=
Subject key identifier: 88:B7:E3:A2:3A:C6:47:97:A5:CA:8E:6D:9F:B7:4C:B8:86:28:3A:13
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 12FA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/iLfjojrGR5elyo5tn7dMuIYoOhM.roa
Signing time: Sun 01 Jun 2025 09:09:10 +0000
ROA not before: Sun 01 Jun 2025 09:09:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4858 (0x12fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 09:09:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=88B7E3A23AC64797A5CA8E6D9FB74CB886283A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:ec:7c:25:8c:03:83:1f:01:16:5f:ab:03:
de:eb:16:fa:13:b3:b0:3d:46:59:73:bd:9e:49:b4:
16:f0:54:9f:e8:47:2c:31:ca:7d:65:57:8d:59:3a:
b5:2b:94:78:b9:91:4b:35:03:98:42:82:c0:a8:91:
e0:35:b0:d5:d0:e7:9e:fe:d7:d4:25:b5:ab:e8:53:
1c:4c:61:57:36:b5:5a:68:1b:91:89:77:a2:79:9d:
c9:bc:8d:a3:5c:30:5c:55:e6:94:b6:2f:9d:6f:c6:
42:5c:ab:b1:bf:7c:79:96:e9:39:63:71:8d:83:7c:
52:0d:f4:2c:0d:6d:e6:28:bd:33:72:65:e5:9e:57:
f4:e8:ef:b3:8f:b8:cf:f3:24:e2:50:75:4a:df:fa:
ca:21:f1:bf:16:51:e9:1d:dd:8a:8f:83:23:d1:26:
0e:89:aa:55:1c:21:2d:e0:5e:7b:35:7a:27:d1:2a:
c3:2c:b8:f6:5e:a3:9b:f7:cc:a1:06:98:56:e2:08:
32:37:7f:4b:15:1f:58:4f:5c:6f:45:63:91:74:1b:
0b:94:da:64:54:4b:d9:89:27:24:f5:3c:e7:67:ef:
4f:5c:26:b3:2c:80:7a:3b:78:73:28:2f:79:cb:9f:
9e:e0:72:0f:d7:eb:f3:e7:88:ef:e7:d0:4e:29:2b:
f4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B7:E3:A2:3A:C6:47:97:A5:CA:8E:6D:9F:B7:4C:B8:86:28:3A:13
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/iLfjojrGR5elyo5tn7dMuIYoOhM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:7f:1f:08:5d:e7:fe:08:14:1b:39:a1:91:50:8a:0a:c3:0f:
ea:6e:6c:f5:cf:cd:80:48:41:22:ab:5c:c6:ec:17:42:11:e8:
f9:70:27:64:62:a1:33:d9:1f:98:64:75:69:82:3c:1d:0d:00:
f4:e6:52:e3:ad:38:63:9c:e1:b8:28:9d:64:a4:2e:5f:23:30:
f2:17:ca:72:3f:44:d6:f1:d4:8d:28:cc:8b:2e:2a:50:8d:be:
6d:9e:0d:dd:c6:a2:e9:12:8d:2c:71:80:de:b0:ec:f3:fd:a4:
81:3e:a2:ee:fe:43:af:f8:c5:76:9b:e5:49:30:1e:c6:27:c7:
a3:e1:88:d0:12:4d:c3:16:f6:03:68:d0:4f:bd:eb:e0:84:26:
4b:0c:cb:95:77:cc:7b:15:2d:db:0d:1e:0c:b0:a0:b8:1d:f4:
25:5d:85:0e:5c:37:14:bd:d4:c1:e3:29:b9:08:59:e1:8f:78:
61:18:e4:79:aa:e4:58:72:b1:fc:f9:f6:03:51:f0:69:71:88:
8b:27:47:e4:fa:bd:05:1e:cb:1b:67:07:09:91:69:74:62:4a:
c5:77:d3:8c:bb:cf:81:22:9e:cd:a0:e3:b8:38:11:9f:10:6d:
fa:b0:5a:eb:ff:14:ee:13:e0:92:3e:21:d6:48:76:6b:2d:00:
38:d5:b7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:20:04 2025 by rpki-client