Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/lXPxBQtYrdf6xLTDuhDrTU0Y-Qg.roa
File: lXPxBQtYrdf6xLTDuhDrTU0Y-Qg.roa (raw, json)
Hash identifier: YjXje75nwzvyHMI3PSAhN976+nnVXzrgosgPJSNCFPM=
Subject key identifier: 95:73:F1:05:0B:58:AD:D7:FA:C4:B4:C3:BA:10:EB:4D:4D:18:F9:08
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 248A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lXPxBQtYrdf6xLTDuhDrTU0Y-Qg.roa
Signing time: Wed 25 Jun 2025 06:42:08 +0000
ROA not before: Wed 25 Jun 2025 06:42:08 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9354 (0x248a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 25 06:42:08 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9573F1050B58ADD7FAC4B4C3BA10EB4D4D18F908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:16:3e:39:b6:c4:6c:a5:3d:53:03:d2:cc:
0d:34:4b:da:4e:f2:0f:7b:db:e4:49:45:1b:83:5a:
77:75:67:bc:85:ae:66:e1:ec:57:93:53:c1:88:50:
ca:54:40:4d:f9:77:2e:26:44:c8:a6:de:14:4b:54:
52:f5:59:af:85:3d:df:d1:28:ff:28:d5:83:2e:01:
b4:7f:35:fe:98:63:7e:95:ec:85:91:d2:cf:d5:bf:
f2:eb:35:c2:2b:36:09:e2:c8:26:9d:a1:44:57:cd:
63:17:77:e8:de:07:6c:78:ee:4c:a7:87:45:1e:fb:
a3:fb:42:ea:dc:bc:cb:d4:0e:bf:31:d4:36:90:3c:
44:0b:9c:d4:05:8f:f6:c6:96:4d:7f:fe:e7:55:45:
96:0d:88:29:de:9a:2d:b1:3f:cf:36:ee:fc:4a:4b:
6c:e3:47:b6:e4:c3:3a:90:6f:3f:c6:94:7d:04:e3:
6c:43:b6:47:41:59:77:7b:75:34:db:1b:9c:88:cc:
72:2c:ac:fa:ad:89:da:48:9c:c1:d3:fe:96:67:ae:
04:e7:6f:25:83:61:18:8f:3b:89:7d:14:32:33:f8:
01:74:0f:a2:8f:e4:bf:36:c0:53:59:44:59:22:5b:
b4:95:6e:90:ee:27:62:36:f8:cf:d9:0d:a4:34:03:
dc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:73:F1:05:0B:58:AD:D7:FA:C4:B4:C3:BA:10:EB:4D:4D:18:F9:08
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/lXPxBQtYrdf6xLTDuhDrTU0Y-Qg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:f4:e3:16:4d:47:97:b7:51:0c:5e:97:08:23:7c:56:ba:f4:
9c:88:dd:7d:c4:9b:f3:b9:e3:cb:45:8a:21:4b:4f:a6:ea:bf:
84:44:7c:e2:56:24:9c:2a:70:56:7a:af:13:2d:51:2d:35:12:
86:62:d8:3a:6c:d8:60:66:af:8a:14:b4:12:13:70:cf:23:25:
8a:18:69:fa:39:cf:19:3a:a0:65:b6:00:fa:6c:6f:9e:ab:cf:
d9:7c:b5:26:2a:4b:f0:29:af:38:b5:8a:cc:9a:a1:48:a6:78:
60:e6:eb:be:dd:b4:36:3b:26:1b:f7:67:16:3e:e3:2e:75:95:
3f:33:eb:23:64:84:e1:d8:1f:50:c4:1f:c6:bb:85:12:40:9e:
7a:25:ab:5d:56:32:5e:7b:dc:ed:bb:e2:d6:6c:f4:f0:c5:9a:
e0:b3:b0:73:24:f4:98:54:d4:34:72:60:67:e6:ce:2f:90:2b:
9c:33:ea:ca:86:1e:fe:b6:08:a4:63:31:24:ac:6a:70:75:5f:
5c:f7:13:1e:88:5f:99:de:4d:ca:8a:b3:c2:5b:98:64:33:3e:
e7:01:3a:16:a2:d0:27:d4:34:4e:b2:e1:1b:44:b8:4b:cf:b3:
6d:63:b8:96:62:5f:24:d9:ed:10:2e:82:22:a5:ef:3c:88:91:
65:c3:68:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:46:11 2025 by rpki-client