Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ijME8VbS_r4cWqtw5xMhnwr5-9Q.roa
File: ijME8VbS_r4cWqtw5xMhnwr5-9Q.roa (raw, json)
Hash identifier: aeZLbYeKucAUTSahZiaDzebmRwg2gp4lj7Q76M5CHc0=
Subject key identifier: 8A:33:04:F1:56:D2:FE:BE:1C:5A:AB:70:E7:13:21:9F:0A:F9:FB:D4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E8E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ijME8VbS_r4cWqtw5xMhnwr5-9Q.roa
Signing time: Mon 26 May 2025 11:39:03 +0000
ROA not before: Mon 26 May 2025 11:39:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3726 (0xe8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 11:39:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8A3304F156D2FEBE1C5AAB70E713219F0AF9FBD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:94:e4:34:7a:8e:0e:f8:83:5c:01:b8:8b:
bf:f6:71:9e:5a:f4:e0:6a:2d:cc:fe:e4:9d:5c:fa:
bf:d1:c1:5f:e5:0d:7b:25:70:ed:0f:44:b5:5c:6b:
89:c6:5f:03:33:13:3e:2f:3b:34:9c:29:bd:5c:e6:
34:cd:e6:c3:21:17:e5:2e:2b:36:a8:f8:42:dc:ed:
09:e0:dd:d0:6a:75:55:df:2f:fb:da:f4:97:2f:f6:
6f:d7:0e:fd:7f:cc:9a:98:c4:20:ef:61:f2:2e:f1:
56:f0:bf:dd:ea:d7:b6:57:04:cc:35:b5:70:a4:e4:
bd:da:41:51:3c:21:80:dd:64:e9:89:0f:80:1e:1b:
06:04:7f:3a:ea:b2:9b:c4:62:a0:3e:ab:5c:e7:10:
2b:f9:5d:d6:af:35:d1:33:f2:fa:30:03:db:bb:fa:
4c:08:3c:f3:96:d2:36:d3:4d:1c:2d:ce:f0:ef:ec:
e0:dd:af:09:f0:c3:3e:c8:1e:7b:a4:f1:17:56:af:
72:c5:ae:82:31:4c:8e:c5:46:cc:11:cd:41:e6:2b:
33:33:4f:ed:e2:f4:7e:fc:07:4d:d6:fa:7e:8c:8f:
38:53:fb:13:1f:77:2c:33:13:a9:1c:f7:27:07:66:
9a:8b:6b:9f:6d:27:48:0e:e7:f3:df:2b:1e:75:83:
8d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:33:04:F1:56:D2:FE:BE:1C:5A:AB:70:E7:13:21:9F:0A:F9:FB:D4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ijME8VbS_r4cWqtw5xMhnwr5-9Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:af:29:6a:64:76:12:32:0f:65:9d:5b:05:52:28:b5:7e:1f:
35:92:66:7a:8d:10:a0:04:cc:ab:86:eb:a9:e2:f0:0e:87:2d:
59:71:eb:8a:f3:f4:c3:f1:2e:0e:ab:35:99:01:fb:f4:ba:ad:
88:fe:dd:75:54:8d:ec:72:c9:b1:6f:c8:d9:02:2b:d8:fa:ec:
d4:a6:17:fd:e9:12:73:75:f6:34:7e:a9:ca:43:b7:7a:29:e8:
46:2e:f2:5e:8b:65:47:e8:ab:05:44:a7:a6:48:dc:c0:68:d3:
6b:df:68:07:44:63:1d:9e:24:97:e1:da:00:e9:56:7e:bf:43:
76:45:8b:11:3e:93:ac:7d:da:81:61:4b:6f:08:20:f3:0b:59:
d9:b7:1e:96:f6:c8:31:3d:bd:39:6a:a8:04:2e:e4:37:36:03:
d0:3d:06:82:68:f1:0a:fa:b1:3b:b0:21:a1:65:d7:b9:d3:31:
8e:48:d5:75:80:69:2f:92:c9:c1:3f:79:6f:fd:dd:67:15:03:
d7:ce:16:a4:70:e3:0a:de:97:a1:48:18:09:73:36:30:02:52:
60:5c:b4:c3:c0:37:32:93:50:b3:0e:74:f5:ea:43:1c:56:77:
8c:77:5a:eb:bf:be:f6:fb:3d:e5:b4:f9:02:c2:8f:e3:bb:e1:
f7:1d:5b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:15:38 2025 by rpki-client