Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/puckEz8iQxvc4QMuSljD-_l3Sxg.roa
File: puckEz8iQxvc4QMuSljD-_l3Sxg.roa (raw, json)
Hash identifier: f3dxbr2QKVbjKMNFGhVNXRsvzFEQ/4cNNx62FVmzTbw=
Subject key identifier: A6:E7:24:13:3F:22:43:1B:DC:E1:03:2E:4A:58:C3:FB:F9:77:4B:18
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0802
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/puckEz8iQxvc4QMuSljD-_l3Sxg.roa
Signing time: Sat 17 May 2025 18:08:13 +0000
ROA not before: Sat 17 May 2025 18:08:13 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2050 (0x802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 18:08:13 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=A6E724133F22431BDCE1032E4A58C3FBF9774B18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:14:0f:7a:41:64:5f:3f:bd:fe:cc:25:56:
89:d0:6c:f3:24:a4:fc:c8:bf:c6:2c:85:15:08:22:
42:ea:d3:6e:66:40:78:d9:04:2c:87:27:4a:74:08:
f3:54:82:94:6b:08:e3:45:c2:53:65:20:df:03:a8:
e3:ea:a0:8b:9a:1b:d0:86:52:98:6f:26:95:2d:fc:
f6:a2:bc:9b:08:79:03:95:10:bf:bb:56:b0:1e:36:
76:e9:5e:53:31:fb:7f:be:49:d3:2d:54:5e:17:1b:
a5:f9:c6:a7:9e:b8:e7:40:8f:d0:b1:f5:2d:20:0f:
11:a8:b1:36:51:7b:92:5d:bd:16:b8:5e:d0:36:87:
ab:2b:a5:62:79:68:8f:2c:6d:83:52:ab:d4:dd:20:
55:ec:bd:51:45:db:ab:19:9c:ae:f0:25:78:a6:5f:
9b:9e:27:7e:0b:f6:92:a2:37:21:3f:28:f5:f2:82:
b6:5e:a1:f3:b9:0a:ac:c3:b9:c7:94:6d:ed:8f:d2:
f4:dd:ae:b7:c7:ee:a4:8c:b2:f1:66:8f:ea:f7:7e:
6e:4a:be:a0:6d:a4:d2:42:cf:06:ce:89:8e:4b:c5:
e1:e4:7b:bc:d6:44:68:a6:45:c8:f4:4d:59:45:3f:
b8:62:f1:1b:a1:9f:8d:1c:10:83:9d:c3:80:58:54:
7c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E7:24:13:3F:22:43:1B:DC:E1:03:2E:4A:58:C3:FB:F9:77:4B:18
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/puckEz8iQxvc4QMuSljD-_l3Sxg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:8c:c2:af:11:e5:d5:81:1b:e7:c2:8c:e1:e9:0b:f0:58:87:
7f:b4:82:b8:e6:f0:b6:d1:36:c9:fa:53:5c:53:62:67:0f:a6:
89:87:03:01:db:9b:89:cc:a0:7e:38:52:f0:96:34:f9:ba:04:
fb:b6:7a:bc:f4:f2:ac:5f:b3:a4:aa:fe:90:21:11:3c:b9:28:
e1:c4:7f:3c:11:06:56:2f:8d:99:9c:03:e2:32:a4:d4:08:8c:
c6:b0:94:22:6f:bd:f5:0b:5a:4e:2c:ca:50:63:e4:3e:23:df:
73:fc:2e:9a:3b:4b:84:e1:a8:c3:bb:32:fc:69:f2:7b:a7:ef:
be:a5:64:ed:d8:7b:a6:79:8c:7a:9c:e1:3d:86:af:eb:2e:66:
15:43:11:8e:84:88:08:5d:99:39:e9:6d:14:a7:07:84:32:98:
41:a1:4d:12:a7:62:8b:99:97:d0:31:5a:08:a4:f3:25:fa:75:
1a:c9:85:d1:f9:cd:54:58:3b:67:33:72:1a:08:59:57:a6:e7:
d1:c6:b9:1d:20:3d:6a:15:cd:a6:27:f8:67:c8:cd:c0:a0:79:
df:09:99:9c:ef:fe:e3:d4:99:04:07:4e:43:0e:66:48:da:9b:
0a:76:68:8f:e7:53:83:18:ee:ce:45:c8:23:13:bb:6a:e3:d5:
fd:83:7e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:06:36 2025 by rpki-client