Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/jFLS6vhWkOC9mJVm8pjQ6MkNGgM.roa
File: jFLS6vhWkOC9mJVm8pjQ6MkNGgM.roa (raw, json)
Hash identifier: wC90j7mhbZdRf3QPdlk7XgPaUomydYKEAbk9d4UG1sw=
Subject key identifier: 8C:52:D2:EA:F8:56:90:E0:BD:98:95:66:F2:98:D0:E8:C9:0D:1A:03
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 204A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jFLS6vhWkOC9mJVm8pjQ6MkNGgM.roa
Signing time: Thu 19 Jun 2025 08:08:29 +0000
ROA not before: Thu 19 Jun 2025 08:08:29 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8266 (0x204a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 08:08:29 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8C52D2EAF85690E0BD989566F298D0E8C90D1A03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:a2:3a:65:d3:45:2b:51:a6:f7:e3:f3:22:
e2:dd:9e:63:13:df:b0:c5:00:ad:81:48:39:2f:c9:
6c:84:c9:13:88:d6:2b:b6:db:77:dc:16:0b:81:ec:
94:4f:18:fd:d1:26:7e:2a:91:e8:0b:e5:e9:7a:f2:
3f:3d:35:65:cc:21:0e:3d:c5:21:8b:92:e6:53:9c:
4f:83:0f:40:d3:3d:f5:33:4e:68:b3:95:2c:5b:ec:
4f:35:31:25:9d:23:a3:0a:f6:75:c6:dd:a7:09:39:
95:44:5d:17:8d:b4:16:da:ba:03:32:ff:14:08:d5:
9d:7d:5f:23:1d:3d:24:b6:f3:aa:78:cb:36:ad:54:
02:4c:60:82:19:ab:50:a8:35:33:10:42:18:4b:2e:
bc:36:3c:3a:b0:4c:8d:29:46:39:d4:ca:6f:58:6a:
c0:35:3e:7e:1b:bd:7e:ec:9b:12:02:ee:0b:7c:b6:
aa:bb:90:30:8e:cf:d6:ad:1f:07:4b:e1:c9:96:73:
7a:89:27:3c:62:59:2d:45:41:7e:f9:47:fc:3d:02:
be:41:f7:b3:8b:20:61:80:7c:19:53:8b:e1:56:4b:
fa:08:5e:47:13:5a:85:e3:9e:4a:13:1e:a6:f4:71:
9f:4f:0c:c3:e6:b6:cc:73:c0:ec:bb:fb:66:2d:a3:
eb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:52:D2:EA:F8:56:90:E0:BD:98:95:66:F2:98:D0:E8:C9:0D:1A:03
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jFLS6vhWkOC9mJVm8pjQ6MkNGgM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:cc:a9:73:77:d4:28:4a:46:b9:bf:af:af:d3:50:b1:c6:03:
54:81:25:7c:fb:de:7b:ee:b6:86:6a:50:a6:de:4b:b3:ce:34:
c3:7e:f1:fd:a6:ad:65:74:1f:13:ee:37:15:25:1a:97:50:36:
37:5b:73:51:89:46:3a:3d:b4:1a:db:d4:e0:45:b7:ee:21:5a:
d8:2a:2a:da:9c:cd:4b:b7:40:f9:21:93:5c:e7:49:25:47:87:
80:bd:47:82:71:af:99:29:f1:5e:6c:9b:5c:ab:32:f8:31:87:
c2:9c:7c:63:7e:b7:8c:9b:ee:7d:e8:e0:41:c2:df:2d:9e:28:
6c:43:74:ce:b9:1a:65:37:00:a1:72:6f:c6:12:66:d0:fa:0a:
a7:4d:1e:75:5b:eb:5e:ef:56:38:58:7c:a6:ef:f7:6d:18:41:
ac:e0:d9:fa:af:bc:95:06:ac:e9:0c:6c:08:a0:cd:4c:0a:79:
16:e7:16:2a:5f:4d:8b:64:49:c6:31:d3:01:5a:fa:51:00:9d:
fc:dc:ef:e9:fe:9b:51:72:2c:f7:f7:17:25:22:cb:71:5f:cf:
b4:39:4a:58:99:6e:ca:1f:ca:30:59:d5:56:12:8c:94:b7:f3:
40:02:0c:a6:8c:e4:90:9c:55:ad:c4:0a:12:8b:26:ee:68:6e:
23:76:e8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:50:30 2025 by rpki-client