Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/r4mUuqcA3QikLcnKfJvLzhUQ-DE.roa
File: r4mUuqcA3QikLcnKfJvLzhUQ-DE.roa (raw, json)
Hash identifier: g83tdfJ/dC9ymL1qJg0fDrfmFC03lXPyG1FokDn/REA=
Subject key identifier: AF:89:94:BA:A7:00:DD:08:A4:2D:C9:CA:7C:9B:CB:CE:15:10:F8:31
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C7A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/r4mUuqcA3QikLcnKfJvLzhUQ-DE.roa
Signing time: Fri 23 May 2025 17:08:27 +0000
ROA not before: Fri 23 May 2025 17:08:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3194 (0xc7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 17:08:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AF8994BAA700DD08A42DC9CA7C9BCBCE1510F831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:27:18:2d:4a:5f:e1:cd:6a:f3:71:70:e5:
0b:1c:8a:f3:cf:b2:e1:95:b5:57:24:5f:b8:92:29:
e2:2f:2d:79:55:d5:7e:b1:1b:db:f9:1d:25:75:0c:
35:fb:cc:88:ab:99:c8:7e:5e:a7:4f:43:00:d9:2b:
e7:01:d6:4a:3d:4c:e7:34:2e:aa:d1:45:e2:a3:1b:
57:e4:df:12:86:d3:50:cf:af:33:b3:eb:c5:f2:17:
ba:58:ea:6a:19:41:4e:5c:d1:84:d5:85:52:0b:b7:
e4:0c:e0:9c:4d:d9:1e:82:78:c0:64:da:68:25:4e:
51:a8:2a:41:be:77:d2:ac:52:9a:a6:7d:00:a2:50:
3b:10:96:d0:9c:fd:54:6c:f4:20:40:53:3a:a8:0a:
f0:e1:73:b6:ca:a8:ea:91:a1:93:40:c9:73:f2:70:
fb:fd:2d:9e:68:ad:60:d8:6e:49:58:9d:82:04:e1:
df:29:cc:a3:0a:7f:95:cd:00:f0:38:b3:6e:38:57:
7e:cd:34:c4:d2:23:d6:a6:b5:9a:5c:fe:c1:a7:f8:
e4:4b:be:ba:75:80:7b:fa:96:fd:ac:d7:f4:90:38:
c5:fe:e7:31:0a:16:e3:fb:e6:29:ab:48:29:52:5a:
7e:00:86:c8:fc:1e:6f:80:56:16:6c:f2:90:c8:35:
78:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:89:94:BA:A7:00:DD:08:A4:2D:C9:CA:7C:9B:CB:CE:15:10:F8:31
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/r4mUuqcA3QikLcnKfJvLzhUQ-DE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
77:fa:d5:f6:29:69:9c:5a:f0:d3:dd:e7:ca:3a:b4:82:44:8b:
56:44:4b:ca:d8:b2:68:76:ea:25:d9:07:1b:a3:46:f5:26:38:
05:06:4c:a7:b1:b7:7d:77:89:08:c0:d7:73:af:b9:bd:db:ed:
a2:ea:9e:77:8f:f8:bc:b2:88:88:16:dc:9f:5c:45:a4:f7:9e:
28:18:c6:17:38:15:05:b4:45:71:b8:93:95:47:00:91:21:a4:
ad:b0:a8:26:42:14:a0:6d:ff:21:c6:ea:8c:52:cd:24:5e:6d:
e4:a0:92:78:8c:9b:b2:c8:f6:cb:0a:51:e1:c4:ea:d7:0a:88:
a4:c0:6e:59:da:47:82:04:7a:ac:4b:b3:e4:9e:e5:c1:c1:e3:
be:5b:51:f5:22:47:cd:8b:71:0f:8d:54:b6:55:01:fc:e2:ff:
65:ba:21:1b:a9:b6:36:e6:0a:f9:47:49:c1:50:c7:df:34:38:
c3:2d:bd:52:20:91:75:a0:7f:8d:01:e9:28:84:d2:92:15:f0:
08:9f:bc:fb:09:59:65:39:7d:c0:76:7d:ed:68:7d:11:dd:37:
61:c2:6d:24:2c:7f:c2:e6:ed:e3:58:c1:b3:2e:39:7f:4f:a1:
43:3f:a0:39:68:7c:f3:9f:6a:a2:c2:73:de:aa:eb:46:4b:07:
3b:12:f3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:51:42 2025 by rpki-client