Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ni_uNy_0AVNzo7DTA7U0Y94eipI.roa
File: ni_uNy_0AVNzo7DTA7U0Y94eipI.roa (raw, json)
Hash identifier: WOYmvPY/V2fenJRcHzWjrZcPDDqUurKF+yFs1TVqJgc=
Subject key identifier: 9E:2F:EE:37:2F:F4:01:53:73:A3:B0:D3:03:B5:34:63:DE:1E:8A:92
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2026
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ni_uNy_0AVNzo7DTA7U0Y94eipI.roa
Signing time: Thu 19 Jun 2025 02:36:16 +0000
ROA not before: Thu 19 Jun 2025 02:36:16 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8230 (0x2026)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 02:36:16 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9E2FEE372FF4015373A3B0D303B53463DE1E8A92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0a:b3:6d:28:05:a6:7a:ec:50:72:eb:6c:3d:
49:1a:75:61:3e:83:27:4b:d1:47:7f:d2:fa:3f:44:
21:6d:57:a2:88:20:d0:bd:c2:49:aa:32:5d:f6:9d:
22:41:6d:fc:78:68:fb:f9:39:69:b9:97:7e:c4:38:
72:9e:28:28:6e:47:ba:68:7b:bd:f7:22:a4:ca:62:
18:64:60:0d:dd:0c:cb:24:06:06:d1:52:b7:66:e4:
0f:ea:64:b7:c5:55:3b:f3:24:36:a2:52:6c:44:b5:
b8:21:4e:31:d0:a4:7e:b5:fc:f0:d9:68:12:33:14:
87:1a:58:e3:76:05:b6:9f:5f:4a:cd:a0:b8:e9:2b:
cb:a6:ca:a2:86:34:f3:47:2c:6f:88:8a:9d:6a:a3:
19:06:b2:22:a1:3c:58:86:e6:cc:e1:ab:95:02:68:
aa:81:3a:43:93:94:6a:0c:2d:da:36:e3:be:4a:5c:
a5:92:43:d5:eb:ed:86:19:d2:f9:ca:02:1a:96:c9:
40:dc:cd:0f:82:61:aa:0f:9d:a4:df:85:09:8a:ee:
69:87:2f:78:5e:8b:a9:a4:1c:38:44:c5:7e:ec:ee:
aa:c1:bd:94:6e:58:a1:cd:fc:01:7f:90:14:5d:a0:
8c:77:e5:d6:14:81:46:19:79:ce:e7:4c:a9:64:10:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2F:EE:37:2F:F4:01:53:73:A3:B0:D3:03:B5:34:63:DE:1E:8A:92
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ni_uNy_0AVNzo7DTA7U0Y94eipI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:06:e4:b6:ec:91:b1:06:9f:5e:4d:d5:6e:ea:d6:96:1e:59:
fe:35:02:47:f4:47:fc:44:7e:b2:05:67:ad:54:c4:34:38:54:
c8:ec:63:11:e1:a4:d4:55:85:be:e4:47:b8:ca:f5:94:28:ca:
28:19:61:5b:9b:4f:02:ba:5e:3a:57:a1:91:d5:ef:dc:cb:3f:
f5:70:e0:30:95:8c:43:4c:bd:77:e8:f9:b1:6e:7f:80:87:84:
d6:da:76:0e:8e:77:aa:06:c3:fc:c6:d4:8d:51:97:c5:39:e1:
1e:b2:ed:e4:d5:f3:d0:ce:ff:91:5d:6a:61:78:9f:40:21:9c:
6d:e6:5c:a0:84:c8:22:bc:59:8f:43:31:5c:c9:78:e3:f5:15:
c8:1a:39:68:df:1e:8c:d4:2c:71:09:83:ad:ba:41:58:ed:bf:
3e:13:16:11:e8:1f:7d:3c:10:2d:b4:f8:7a:3b:59:42:ff:3a:
50:6e:3e:ef:70:5c:c7:7f:fc:f4:c3:1d:66:ea:64:e8:33:c2:
33:99:7b:27:bd:88:ba:8d:83:db:8e:7e:3f:5b:a0:28:13:d7:
15:ba:e6:92:9b:3b:16:bf:9c:e3:05:ff:9d:55:75:f5:fc:1f:
69:1e:0b:49:f3:8d:f5:60:42:f9:48:65:29:7b:56:63:70:39:
bb:1f:1c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:32:49 2025 by rpki-client