Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/l_lFCPHBZ2bTldqAswFPouogH6o.roa
File: l_lFCPHBZ2bTldqAswFPouogH6o.roa (raw, json)
Hash identifier: RajuCYbP9Z5tXXjit2BlVwrJvM4ijaxP9qpcqztEER8=
Subject key identifier: 97:F9:45:08:F1:C1:67:66:D3:95:DA:80:B3:01:4F:A2:EA:20:1F:AA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 23A2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/l_lFCPHBZ2bTldqAswFPouogH6o.roa
Signing time: Tue 24 Jun 2025 01:41:56 +0000
ROA not before: Tue 24 Jun 2025 01:41:56 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9122 (0x23a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 01:41:56 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=97F94508F1C16766D395DA80B3014FA2EA201FAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:a3:53:e0:36:b5:a9:cf:b7:1b:37:fc:78:
f0:d5:f7:88:5a:6b:02:eb:c2:52:28:b8:82:74:89:
d4:e1:8c:88:d0:a6:36:c9:af:cc:71:f6:71:a6:5f:
46:41:ea:29:6b:8f:a4:17:d1:d8:04:70:eb:15:4b:
25:72:7b:a4:82:13:e7:d3:49:96:1e:ef:27:bd:34:
11:47:6c:2e:91:92:36:91:61:29:73:b4:7b:65:39:
55:56:d9:07:d4:fb:b3:88:cb:41:b5:38:6f:0f:c8:
34:8a:85:14:10:c2:c6:28:cd:73:0d:e5:73:f4:cd:
3c:ed:c9:8a:36:5b:5a:fb:9a:aa:73:8b:0a:af:55:
04:2b:77:b5:e6:16:2f:b5:05:93:90:5e:cc:de:e8:
43:2c:de:98:f2:9e:da:11:93:5b:df:ac:6b:e9:a3:
f3:c3:98:e7:74:0d:f0:2c:7e:55:5a:6d:31:72:9e:
f8:1b:9b:73:67:19:73:d4:36:24:a9:bc:9b:b3:46:
18:5e:30:c8:69:07:dc:3d:98:4a:43:01:54:ff:18:
99:00:c0:f0:6e:39:43:78:82:3f:7c:1b:39:e8:99:
f2:f7:13:27:28:10:5b:88:0d:e0:ea:3f:35:a5:33:
e5:43:61:d3:7d:ca:4d:c2:4f:f6:eb:86:3b:1c:c4:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F9:45:08:F1:C1:67:66:D3:95:DA:80:B3:01:4F:A2:EA:20:1F:AA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/l_lFCPHBZ2bTldqAswFPouogH6o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:73:44:19:b8:2b:1b:f3:f8:15:85:fd:d5:42:46:fe:58:f3:
a5:92:ac:a2:e4:eb:42:84:13:ec:6f:08:42:cb:3a:b1:6d:50:
5d:cb:c5:81:ef:cc:70:fa:d3:40:42:c3:68:87:84:67:47:4f:
f1:04:93:d1:6b:ab:8e:e5:ed:10:d6:1d:43:32:79:58:37:32:
fa:7d:0a:37:f8:43:d8:c2:8b:52:af:52:ac:cd:fe:b5:80:4e:
d9:9e:7c:47:4a:29:9b:df:43:de:c5:68:a5:b9:f3:37:25:7d:
ff:3d:15:70:b7:43:28:15:d0:d6:35:71:5f:8f:79:ff:41:1e:
45:1a:67:bd:54:5b:24:d5:39:09:d8:7f:a5:03:d3:c0:42:78:
ed:e3:4c:d1:ec:ca:b9:b2:34:c9:53:f8:8b:92:1f:e6:ad:d6:
be:f9:7a:31:47:59:d5:0f:81:3f:3a:05:a8:76:a9:c2:42:e0:
09:19:7a:3a:f4:d5:2e:43:c8:06:e7:f8:3d:87:48:54:eb:f5:
44:6e:8f:46:87:29:9a:2e:69:cf:67:15:d2:05:a4:8a:b3:68:
5b:d8:7a:36:e6:f5:02:66:ca:51:6c:83:25:ac:af:9d:06:a0:
62:91:21:07:3c:88:9f:8f:8b:51:5b:4e:19:b4:d3:e0:44:60:
82:c3:95:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:33:49 2025 by rpki-client