Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/oKV-w9Lh8xwpOehS_gu0JR2GIl4.roa
File: oKV-w9Lh8xwpOehS_gu0JR2GIl4.roa (raw, json)
Hash identifier: gI+tT6DF+5fR5m/9hgedJd2UzG9MxaSDQuUeRH4nNnI=
Subject key identifier: A0:A5:7E:C3:D2:E1:F3:1C:29:39:E8:52:FE:0B:B4:25:1D:86:22:5E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 09FE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oKV-w9Lh8xwpOehS_gu0JR2GIl4.roa
Signing time: Tue 20 May 2025 09:38:16 +0000
ROA not before: Tue 20 May 2025 09:38:16 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2558 (0x9fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 20 09:38:16 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A0A57EC3D2E1F31C2939E852FE0BB4251D86225E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:53:15:8b:08:07:9b:ec:ae:e4:8a:3f:4f:
f6:3d:4b:18:47:53:9d:fe:a5:3f:32:dd:58:3c:c3:
46:83:19:64:50:5f:81:2d:02:5d:01:4a:84:fb:b3:
ff:2e:d3:4f:3c:be:6b:6b:6a:29:fe:3f:8f:b0:57:
79:17:77:38:30:70:1b:98:0d:a0:85:af:49:9e:78:
b4:94:46:9e:b5:da:b8:45:6b:e3:ac:f8:6f:8a:90:
36:73:c7:d9:63:da:35:93:75:19:36:36:43:a6:60:
fd:13:b6:a9:a1:aa:7f:1e:10:34:b7:69:e8:7e:24:
6c:8f:21:db:fa:23:e2:19:56:dc:9b:75:84:76:e7:
13:58:31:e9:b0:23:8f:89:c1:da:bb:9e:1e:8f:ab:
56:5c:49:c5:06:67:8b:93:5a:50:b2:97:4f:1a:2b:
ce:a8:b7:5e:02:16:5b:83:bd:0c:c3:11:ff:66:6c:
f1:88:b1:73:84:06:ac:da:c5:e3:0d:c8:dd:7e:69:
05:ce:59:06:19:d0:5a:75:3c:8a:14:1f:c8:39:50:
00:8a:b5:fd:8b:8a:43:8c:9f:c2:8e:3e:70:92:58:
a2:e8:6e:2a:28:8e:62:06:10:f2:3b:b0:e1:fd:cc:
ce:ec:6b:9e:c0:30:bd:60:5d:8b:40:00:34:1c:2a:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A5:7E:C3:D2:E1:F3:1C:29:39:E8:52:FE:0B:B4:25:1D:86:22:5E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/oKV-w9Lh8xwpOehS_gu0JR2GIl4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:ec:44:e4:aa:75:b0:38:f7:39:7d:b7:85:b0:7a:16:ea:4b:
4f:3a:c1:a8:2d:74:c2:35:e0:df:a5:c1:0b:d3:df:b6:64:b1:
4e:00:e0:ae:c6:08:69:1b:96:23:53:a4:17:22:e3:79:11:70:
05:e0:58:f3:84:0f:00:d9:8a:b8:50:31:1d:31:1e:fa:9f:86:
5b:81:f3:68:25:76:6f:2d:20:26:85:c2:bb:f8:04:a1:de:86:
d6:cd:e8:66:55:45:54:de:8b:69:75:30:60:53:aa:c5:96:b3:
49:d5:02:f0:55:b3:18:ec:a1:5c:06:cd:5c:bf:81:f3:ff:8a:
c9:87:f0:2c:d6:3d:0d:d0:f3:49:ae:6f:85:1a:cf:e4:ca:b2:
9e:47:91:ab:0e:a1:0c:f8:25:dd:f8:46:38:63:d9:03:bc:14:
4d:bd:68:62:a5:61:d8:68:95:64:ca:c9:f8:e9:fb:03:6c:05:
2c:d6:c6:ae:71:10:87:06:5c:b4:a2:14:d4:04:fb:e3:9d:48:
f5:74:43:ce:a2:80:d4:8e:95:98:30:e5:f5:c3:b5:a1:6a:11:
c3:b0:fb:be:bf:d5:9b:a3:3c:11:3d:f0:81:82:81:4a:bd:ff:
0d:e7:a9:a5:88:4a:69:ce:7b:f0:03:08:ee:61:fd:12:65:cd:
ed:39:8e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:29:18 2025 by rpki-client