Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/kE4D4kDC9TrhaQLLZ4-F7s493W8.roa
File: kE4D4kDC9TrhaQLLZ4-F7s493W8.roa (raw, json)
Hash identifier: q6bwQqmcZCXxMp+SKulD3NXJTBB7rY5RKSd9KanSjx8=
Subject key identifier: 90:4E:03:E2:40:C2:F5:3A:E1:69:02:CB:67:8F:85:EE:CE:3D:DD:6F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 20DA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kE4D4kDC9TrhaQLLZ4-F7s493W8.roa
Signing time: Fri 20 Jun 2025 08:41:39 +0000
ROA not before: Fri 20 Jun 2025 08:41:39 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8410 (0x20da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 08:41:39 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=904E03E240C2F53AE16902CB678F85EECE3DDD6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:72:e9:94:9d:d8:a9:a3:ae:42:f4:6d:ee:f1:
d6:a4:88:59:30:75:46:a5:5a:60:1b:03:14:fe:40:
8e:ec:41:48:e8:bb:ee:95:f6:86:a6:8c:55:ba:9c:
5c:b1:da:50:ee:2f:44:ef:3d:b2:92:7e:9d:0f:cf:
e7:cf:03:02:16:23:07:ac:fc:1b:c2:bf:c0:59:67:
79:18:0f:4f:5d:d0:84:9e:37:c7:c9:9f:2c:92:d1:
88:4c:54:ff:26:69:75:8e:9e:94:c7:51:e8:cb:9e:
fd:ee:2b:61:dc:51:41:94:ba:e7:c8:36:b7:a6:55:
f2:3a:1e:81:c7:e1:d1:be:39:11:38:eb:fd:de:c7:
aa:e9:d4:1c:f7:0e:62:32:ad:c7:27:26:a6:fe:49:
36:f5:2e:4a:27:96:96:d4:de:35:2e:be:e4:53:3f:
ad:16:46:3b:0e:7a:5f:aa:ec:54:ca:66:46:04:1e:
83:bb:2b:15:c5:71:29:24:f1:76:df:d8:9f:d3:44:
6a:92:1c:0a:c5:2a:88:e8:99:da:7f:8f:c5:5d:a6:
3b:ef:50:a3:5c:0a:d9:37:0f:43:ea:f7:2b:d1:78:
2c:bb:bc:f8:3a:c9:4c:6d:ba:c6:74:e3:27:e6:42:
08:2d:ed:99:97:d9:67:c1:8f:c7:94:9f:51:09:2b:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4E:03:E2:40:C2:F5:3A:E1:69:02:CB:67:8F:85:EE:CE:3D:DD:6F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kE4D4kDC9TrhaQLLZ4-F7s493W8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:15:dc:10:04:37:32:44:76:05:19:48:77:fb:22:dc:96:5d:
b7:b0:64:37:81:83:10:54:57:50:25:74:72:64:3a:d8:18:69:
14:81:19:d6:63:be:a3:ec:2d:2b:c4:e2:76:86:43:5a:8a:4b:
c5:8a:97:dd:28:fc:e7:d2:c1:77:86:8e:2d:07:96:a7:a9:be:
97:b1:99:aa:56:46:59:a7:1b:0b:1a:a2:ef:56:f3:75:6f:6d:
0c:fe:16:75:f3:ad:be:98:ea:99:2f:80:6e:9b:a8:da:a2:8c:
64:b3:67:97:bd:ac:0d:b3:62:78:28:52:1b:0f:bb:97:b0:34:
60:24:39:9d:da:ad:f4:af:91:6e:6c:e6:71:44:de:95:09:8f:
a3:c7:4c:46:1d:6a:3b:49:0d:11:8c:9f:63:f6:ab:44:10:cc:
6b:03:f5:2b:64:78:8d:aa:87:64:02:ab:be:f4:68:bb:41:1f:
49:ee:85:98:96:3b:fa:6a:98:91:92:22:a1:99:d8:40:97:1d:
2b:f1:38:e7:0b:12:77:3e:01:30:bb:a5:8c:83:b1:90:dc:8a:
22:de:2b:29:bd:5e:0c:67:11:1f:f9:67:3d:e5:3e:2d:de:15:
32:c9:f9:69:e5:03:31:93:83:52:a9:67:a9:c6:8a:13:6c:70:
26:57:26:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:44:57 2025 by rpki-client