Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ltGYnQShdDWpvyQFDtl-AHEHknc.roa
File: ltGYnQShdDWpvyQFDtl-AHEHknc.roa (raw, json)
Hash identifier: nAtrgkYA5nsoTGz3P8njkD9JVvoWYal1Vnv75GdCJOI=
Subject key identifier: 96:D1:98:9D:04:A1:74:35:A9:BF:24:05:0E:D9:7E:00:71:07:92:77
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0BE2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ltGYnQShdDWpvyQFDtl-AHEHknc.roa
Signing time: Thu 22 May 2025 22:08:25 +0000
ROA not before: Thu 22 May 2025 22:08:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3042 (0xbe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 22:08:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=96D1989D04A17435A9BF24050ED97E0071079277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:37:9d:2b:00:fe:b2:93:5d:2b:8e:1e:dc:
83:67:34:23:cc:40:d5:76:2c:26:e4:ce:c8:4a:56:
08:3c:fc:dd:68:f5:c4:36:f2:4d:a3:bd:42:a2:21:
76:1c:cb:59:d4:0d:a3:a1:eb:e2:8a:a7:c8:f3:c3:
8d:31:cf:01:55:0e:a4:24:32:36:9e:f6:f0:2c:4f:
b1:04:08:9f:b8:da:f7:25:f3:ec:21:76:eb:1f:e8:
97:32:8b:ad:ed:7f:98:c0:60:87:76:4d:26:f7:b0:
06:4a:aa:73:13:32:38:f6:fa:44:9f:54:17:b4:b2:
fa:3d:4c:a1:d1:dc:2f:d2:97:0f:55:0a:73:85:63:
d6:4b:71:c6:12:29:d1:b9:9b:3a:d2:20:63:0a:ca:
57:17:11:ec:60:bd:eb:39:07:b7:cf:3b:e4:ad:1b:
26:51:d6:9a:9d:0e:9e:57:93:6b:5f:c4:8b:c5:70:
e0:e1:0a:f7:c2:a0:c3:86:fb:04:ef:b3:be:15:44:
1e:b1:00:31:27:d4:90:0c:df:60:4f:e2:85:de:ea:
05:b2:5f:0e:12:f1:e0:a2:56:d4:73:15:c9:83:5e:
7c:c1:b8:71:8a:b4:d5:d4:94:40:59:4e:bf:12:1b:
f0:c6:69:26:4f:2b:ea:62:79:ca:46:a6:fa:50:83:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D1:98:9D:04:A1:74:35:A9:BF:24:05:0E:D9:7E:00:71:07:92:77
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ltGYnQShdDWpvyQFDtl-AHEHknc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:76:06:cf:34:b6:6d:bb:5e:33:7b:cc:a9:a9:c2:04:58:cc:
5a:2b:45:a1:1d:31:57:df:2f:21:dd:a7:ad:f6:eb:56:36:b4:
a1:9f:2e:9f:c2:64:a6:05:11:fa:8c:48:d2:59:1f:d6:64:25:
b0:64:31:e0:c2:b4:9e:21:05:0c:e3:02:12:2f:d3:05:0f:d7:
46:85:57:ad:79:51:59:a6:56:7c:9d:a3:09:11:c3:52:58:6b:
85:43:f8:0d:84:90:f5:04:3d:45:58:27:be:9c:cd:c9:7c:e4:
78:8f:b3:96:c9:ec:19:b4:45:3b:9c:cd:b0:b8:cc:12:16:f2:
30:71:b6:2c:28:d2:12:53:be:bb:12:4c:2b:20:07:f0:b6:92:
81:a4:03:91:94:68:0b:8b:3b:33:28:ea:dc:37:d4:3b:ba:56:
35:4c:b4:84:ef:fd:9c:5d:fc:43:c0:14:77:0d:af:a7:ff:7c:
46:21:56:b8:5f:f0:da:09:7e:4b:b0:82:1f:14:78:4c:ab:51:
c5:dd:7f:db:92:c9:df:1b:3d:e4:45:a4:d5:dd:93:81:36:4b:
f0:61:e4:a0:2b:8c:c0:d2:a6:44:0c:32:86:ff:0c:7f:c5:63:
58:33:3c:c3:42:a5:c3:d9:7c:b2:e2:b1:94:36:8b:40:ea:ee:
08:95:13:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:17:51 2025 by rpki-client