Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/nzCcRZq2REv5Ws5vvxTkNa2tmyA.roa
File: nzCcRZq2REv5Ws5vvxTkNa2tmyA.roa (raw, json)
Hash identifier: 4sJDhIiO31j0AxriBDwZtdLPiYarBs03rheTQbf6RXs=
Subject key identifier: 9F:30:9C:45:9A:B6:44:4B:F9:5A:CE:6F:BF:14:E4:35:AD:AD:9B:20
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0BDA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nzCcRZq2REv5Ws5vvxTkNa2tmyA.roa
Signing time: Thu 22 May 2025 21:08:29 +0000
ROA not before: Thu 22 May 2025 21:08:29 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3034 (0xbda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 21:08:29 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9F309C459AB6444BF95ACE6FBF14E435ADAD9B20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:b8:34:46:cb:16:d4:da:76:31:93:47:f8:
51:2f:ef:8e:54:c3:db:03:8b:da:e7:33:20:35:82:
f7:88:02:b7:ed:45:81:a8:6e:11:a5:98:6e:d3:fa:
24:69:00:0f:5f:0e:3f:ad:84:e2:7d:d0:30:03:c4:
f9:bc:02:e4:da:3b:b8:76:3f:a4:ad:3f:21:f0:e1:
db:18:f0:2a:90:eb:2a:1e:3c:ff:20:ca:7e:08:82:
86:c1:cd:26:22:80:81:ff:d3:ea:3f:16:61:a0:13:
ba:d8:dc:07:00:b8:36:df:31:24:f9:7c:d3:0f:57:
60:2f:d4:ac:48:38:e8:3f:e7:d3:bb:a3:45:1c:6d:
a8:89:94:37:ad:24:e0:e7:49:28:3c:4b:40:f7:d7:
35:df:4f:84:39:e3:50:ca:bd:60:97:ea:2c:33:02:
d1:83:86:48:f7:25:9b:99:36:88:57:a3:af:d7:6b:
9c:b1:a3:f9:8a:ef:82:24:1c:37:be:0a:3a:91:76:
f2:13:f7:a0:ea:2d:11:e2:c4:8c:16:19:3a:b6:6c:
cf:1f:c9:84:59:28:e2:83:e0:56:e1:5c:54:ac:b7:
d6:bd:2c:b1:e6:71:60:a8:fe:19:ee:8c:35:ee:fb:
1f:ea:fb:66:67:b7:70:a4:1e:72:e5:2d:14:ca:5a:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:30:9C:45:9A:B6:44:4B:F9:5A:CE:6F:BF:14:E4:35:AD:AD:9B:20
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/nzCcRZq2REv5Ws5vvxTkNa2tmyA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:ec:47:a9:e8:94:32:61:56:9d:cc:b0:a4:5b:a5:29:e9:66:
c2:59:ec:27:d3:61:a1:3b:b0:1e:fc:36:ec:fe:cf:28:3a:4d:
c1:9a:b4:c2:15:ff:8b:68:62:97:05:87:1f:a8:84:d9:ea:f8:
35:42:4b:57:36:22:ee:d3:a7:9c:b1:8b:fd:b4:94:95:98:71:
86:df:0f:4a:3d:72:3f:22:49:54:f7:c7:65:35:47:8f:91:82:
5a:bd:1b:25:3c:ae:da:2b:4e:47:a2:cd:02:a5:78:60:86:1a:
e6:bc:8c:09:1d:b7:2c:14:ba:1e:4f:ec:92:24:ec:ae:2f:23:
d7:c6:7d:c8:c9:69:b8:8d:cf:37:da:c0:31:ee:f5:31:08:ce:
3a:ad:73:4f:0b:54:ff:c3:10:02:b0:5d:79:e1:4f:11:d9:4d:
ad:ed:dd:7f:0e:43:04:59:70:58:5a:95:19:69:46:27:9d:57:
e4:45:8e:75:af:a4:21:a2:46:25:72:6e:dd:c9:ee:8b:f7:a1:
75:42:1a:34:9d:0c:fc:5e:fc:e2:75:50:6c:e2:e1:86:b1:e8:
b9:e8:9e:37:47:98:be:3e:4e:4d:8b:ff:fd:48:04:14:f3:f7:
16:d0:01:56:2d:6d:37:07:58:31:53:8d:47:19:2f:01:68:86:
3d:1f:66:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:31:15 2025 by rpki-client