Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/o6pau8HNJMLGmMrMrRZOXcLv8Xk.roa
File: o6pau8HNJMLGmMrMrRZOXcLv8Xk.roa (raw, json)
Hash identifier: dxf9OLbKr8yrl/v+fG4JJ1ii2C76Wgrn2wnaKmX6cu4=
Subject key identifier: A3:AA:5A:BB:C1:CD:24:C2:C6:98:CA:CC:AD:16:4E:5D:C2:EF:F1:79
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 15DA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/o6pau8HNJMLGmMrMrRZOXcLv8Xk.roa
Signing time: Thu 05 Jun 2025 05:09:24 +0000
ROA not before: Thu 05 Jun 2025 05:09:24 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5594 (0x15da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 05:09:24 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A3AA5ABBC1CD24C2C698CACCAD164E5DC2EFF179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d4:64:7e:7c:90:d9:1f:85:a9:92:36:31:d2:
21:42:84:82:3d:9b:ce:e0:89:81:37:ef:ff:e9:50:
f4:66:15:b0:47:5a:ad:50:8a:45:ce:65:42:75:ce:
39:5b:f8:7d:1f:87:2c:c0:18:02:76:86:14:5d:5b:
9f:26:51:75:e4:89:f3:b2:4b:5e:8a:0b:98:eb:9f:
12:92:72:80:ae:f0:22:a0:ee:5f:f6:a2:bc:31:db:
cb:d5:3f:dc:5e:10:d1:c7:f1:4a:5e:7e:74:8f:80:
66:70:70:6b:32:a8:53:ff:b1:25:a7:8d:2f:71:50:
e6:63:4f:9f:47:a1:a3:4c:0c:3e:a1:51:3c:0a:ce:
22:4a:0a:3e:cd:8a:78:a8:b5:d6:b0:61:1e:82:b4:
69:62:69:bc:54:9e:97:41:4a:97:4c:bf:23:6c:f2:
24:c7:dc:e9:1a:df:25:cb:48:aa:1e:9a:30:1a:d7:
06:48:84:f0:33:38:2e:b5:1f:e6:d7:e0:c1:a6:4b:
a9:09:7f:7a:f7:39:7f:f1:47:a9:06:cb:f0:e1:cf:
29:70:0c:b9:66:b6:c0:50:30:4f:e5:00:aa:2e:44:
39:c5:56:88:6d:b5:13:a2:9a:2b:0c:e2:4c:09:5a:
a2:1f:28:a6:f2:dc:3a:44:88:f3:40:cc:e5:0c:e2:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AA:5A:BB:C1:CD:24:C2:C6:98:CA:CC:AD:16:4E:5D:C2:EF:F1:79
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/o6pau8HNJMLGmMrMrRZOXcLv8Xk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:6d:07:ff:40:7e:bd:39:ce:5b:99:f2:b5:1d:09:7c:a9:1f:
ae:39:6c:b5:22:6f:3e:3e:ef:fe:fb:22:0d:c4:e1:84:c2:53:
bb:63:d6:06:52:fd:0f:96:71:33:79:d5:7e:af:c3:97:b1:d9:
ab:98:7c:65:db:6f:87:2e:01:07:0d:59:4e:c1:43:f7:6d:00:
00:65:c2:75:61:ec:f8:37:1e:b3:1f:9e:1f:1c:c2:4b:3b:18:
ce:c2:16:88:e4:16:71:f6:77:56:06:c4:a3:5f:4a:37:e8:31:
4a:04:8b:78:56:81:9d:5b:2c:a2:a5:03:e9:75:f8:65:0d:f6:
6a:b8:b1:11:42:a9:53:65:65:4c:a7:57:e6:87:24:11:0d:e2:
3f:67:d1:23:4d:78:84:0b:21:1f:d7:51:c7:78:68:e0:a1:1d:
63:a9:43:ff:eb:a4:7b:21:26:b8:99:c6:53:87:b5:b8:8a:77:
dc:40:c1:ba:d0:83:46:c6:e5:bc:c6:aa:c5:d9:e1:67:52:da:
8e:da:d8:d5:42:d9:3a:c4:90:26:34:e0:05:80:d4:e1:12:e2:
4a:7e:20:ac:04:4e:76:87:5e:49:64:e7:0c:f7:e3:02:a2:1d:
54:11:6f:54:74:e7:1b:7e:5c:3b:31:4d:5e:44:32:6f:06:aa:
ea:b0:5c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:46:31 2025 by rpki-client