Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/jbSj1zfYFoJ9AlhN3_llzwWi5jc.roa
File: jbSj1zfYFoJ9AlhN3_llzwWi5jc.roa (raw, json)
Hash identifier: Jr203o4NrhfDJrDFWD9GNXq9sDA86D3cAO67aTgf2DY=
Subject key identifier: 8D:B4:A3:D7:37:D8:16:82:7D:02:58:4D:DF:F9:65:CF:05:A2:E6:37
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07D6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jbSj1zfYFoJ9AlhN3_llzwWi5jc.roa
Signing time: Sat 17 May 2025 12:38:39 +0000
ROA not before: Sat 17 May 2025 12:38:39 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2006 (0x7d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 12:38:39 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8DB4A3D737D816827D02584DDFF965CF05A2E637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:e8:03:fb:92:b7:aa:32:66:f2:aa:f4:9a:
13:9d:60:51:8a:db:bd:5a:d6:49:0c:2d:bf:12:35:
38:9c:40:99:a3:ee:db:51:cd:75:f4:27:5f:29:3e:
54:46:7e:e3:3d:ad:b1:55:4d:c4:fe:90:51:97:e8:
ad:51:50:02:4c:a6:47:50:92:07:76:18:19:f3:f2:
44:39:7f:44:5a:a4:2d:99:9f:5c:66:b2:49:60:41:
e7:5e:67:bd:81:e5:71:f5:21:42:c5:17:64:97:72:
eb:15:82:de:89:38:96:7f:3f:b5:4d:ce:15:69:94:
cd:c9:3c:2a:55:30:88:7b:23:a9:ba:39:ff:9f:72:
f3:12:e7:f7:f5:39:73:75:bc:92:9a:62:77:ba:d5:
1f:d8:4b:cd:f8:86:cf:c7:39:8c:ea:23:6b:c6:ee:
06:aa:fa:a0:f6:bc:90:79:fb:6a:7d:a1:da:d3:52:
05:df:42:32:3e:b3:e4:cb:12:a0:38:68:3b:71:30:
57:dc:56:80:e4:df:06:45:4a:40:87:36:ee:b9:3f:
34:7c:96:d7:91:c6:72:95:66:d3:28:c9:42:a5:6c:
3a:8e:b8:a1:93:b7:55:93:78:06:a4:ce:ca:a9:44:
31:ad:c9:99:cc:bf:92:2c:6e:d7:0b:01:7d:69:60:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B4:A3:D7:37:D8:16:82:7D:02:58:4D:DF:F9:65:CF:05:A2:E6:37
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jbSj1zfYFoJ9AlhN3_llzwWi5jc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:3e:6a:98:5c:65:d9:73:9b:56:5e:b7:35:f9:0c:62:30:49:
08:be:4b:c2:b4:da:bd:c0:52:53:fc:e5:4c:30:37:fb:f2:32:
7d:fe:ec:aa:c2:d1:28:0e:9f:22:97:aa:33:8b:f5:cd:1b:b5:
10:17:d0:d9:20:73:45:6e:fa:17:af:ea:84:29:b9:12:f1:77:
04:0a:ed:5a:c1:5a:53:6e:95:90:82:7c:5b:2a:b6:92:a7:dd:
aa:76:0f:e1:33:ac:29:04:87:01:71:61:09:1a:4e:56:3e:ed:
87:ea:72:62:0c:e2:7f:50:92:80:e1:5d:64:03:4d:ed:d5:83:
c9:77:00:a2:3b:0a:65:be:99:b3:1a:a7:6e:29:27:bc:47:6c:
63:f7:c3:ee:30:84:dd:7c:e5:c7:91:2e:61:9c:c8:7c:cf:73:
7a:9b:55:52:fe:38:d2:3f:b1:a9:e6:4e:f7:ef:78:04:e9:b6:
a7:53:3c:dc:7c:cb:57:b4:28:2f:38:bf:67:7c:03:d4:43:25:
69:fd:cb:80:55:d5:35:85:d2:a8:cd:93:98:4b:77:ee:f0:1a:
2e:d8:ef:9c:51:9d:fb:db:09:8d:da:3e:11:4e:7d:b4:22:49:
a2:fc:a8:91:44:92:6c:5c:05:3d:a4:b6:da:97:b5:af:3d:2e:
e9:ab:a7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:56:00 2025 by rpki-client