Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ldXcuYKnqxRK0qpUERBKFFl4Bc8.roa
File: ldXcuYKnqxRK0qpUERBKFFl4Bc8.roa (raw, json)
Hash identifier: f37+DUqSp23tobQAilogLNuIKL7N8xUhMDrbGhfZvkg=
Subject key identifier: 95:D5:DC:B9:82:A7:AB:14:4A:D2:AA:54:11:10:4A:14:59:78:05:CF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1ECA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ldXcuYKnqxRK0qpUERBKFFl4Bc8.roa
Signing time: Tue 17 Jun 2025 03:10:03 +0000
ROA not before: Tue 17 Jun 2025 03:10:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7882 (0x1eca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 03:10:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=95D5DCB982A7AB144AD2AA5411104A14597805CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:29:69:eb:5b:50:f4:b5:6c:ce:20:cb:02:
7d:9c:3a:ef:1c:fb:c5:44:f8:a6:d6:9c:33:9c:05:
de:1d:5e:9c:6a:76:3d:c7:ac:94:c8:e0:ba:55:22:
5b:d8:37:9e:da:b8:67:48:b9:ca:07:4a:60:16:ec:
4f:04:f7:d4:ef:34:2b:2f:d3:a7:5a:11:01:73:56:
8f:d8:53:41:e0:b0:bb:03:51:f1:ba:d0:62:ac:62:
90:00:52:ea:60:e7:d7:e4:c5:3c:ff:8b:f8:d9:aa:
47:7d:0b:1e:5b:ee:94:0d:92:9d:db:dc:92:0d:e0:
ed:5a:32:ad:de:1b:99:31:6d:d1:d9:95:e5:31:10:
7f:ad:75:3b:32:32:4c:8e:10:c9:02:ba:ca:e1:55:
75:ce:44:d9:68:9b:8b:1c:d3:45:6b:f0:28:21:c1:
db:f1:36:69:dc:56:38:36:61:a5:b1:3a:09:41:69:
bf:df:b0:c7:20:fa:d0:d9:25:2e:08:c4:c6:27:07:
bf:93:e9:6a:ae:68:16:09:23:3e:ac:8c:5b:54:92:
f1:8b:ee:ea:5e:8b:33:61:ee:18:80:8a:c7:ca:f4:
e0:d9:5d:91:38:51:80:0c:c9:91:c5:fc:89:a4:6b:
fd:33:da:35:de:4d:6a:e7:91:e2:c6:85:5d:d5:ed:
42:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D5:DC:B9:82:A7:AB:14:4A:D2:AA:54:11:10:4A:14:59:78:05:CF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ldXcuYKnqxRK0qpUERBKFFl4Bc8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:b0:0a:dc:ef:5e:e7:2d:ad:71:1a:0f:70:0f:98:ab:c8:a1:
ef:e1:98:49:b1:30:11:a1:2b:b6:38:27:13:62:be:f3:30:64:
0a:c5:0a:3f:bc:b0:b7:72:7b:fe:b7:0f:15:34:df:e4:bf:2f:
ae:ac:da:6b:b3:b3:28:27:43:82:d3:33:47:ef:c2:18:0d:a2:
b6:42:46:d5:b9:6b:34:30:66:af:8e:81:2c:fc:51:2a:f4:7b:
b5:6a:86:a9:75:3b:99:d3:7d:42:de:a0:43:8a:24:0e:54:84:
b8:7d:cd:27:a0:2d:5a:a8:18:85:80:ab:3c:c5:40:d2:7d:60:
c8:0e:2d:95:db:04:1d:e2:ef:bb:37:e2:10:fc:c3:56:3b:9d:
c5:e6:55:ab:36:eb:25:bc:38:74:cf:d2:cf:50:b2:5d:d7:6c:
ca:09:8a:d8:3d:1f:15:7c:f1:3c:3e:3f:7a:6b:84:a1:8b:02:
c6:44:74:c1:51:47:45:2c:90:4c:62:63:f6:f7:a1:a1:1f:92:
3a:dd:dc:ce:1d:39:26:6b:89:cf:f9:3d:e1:d2:10:7b:d6:f0:
d1:f5:ff:e9:33:6c:83:8e:27:7a:d3:0e:ff:8a:6c:20:0a:d1:
0e:ee:fb:0a:06:55:d8:4d:0e:3d:23:9a:31:96:06:7a:e2:48:
dd:48:77:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:02:33 2025 by rpki-client