Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/rD3UfYtyq1nGcmPFf1oyuPWxJAc.roa
File: rD3UfYtyq1nGcmPFf1oyuPWxJAc.roa (raw, json)
Hash identifier: 0LpUi1M4ySnCbzFvNu/ycNoeIohnMDOtFEuyVUF1Qgs=
Subject key identifier: AC:3D:D4:7D:8B:72:AB:59:C6:72:63:C5:7F:5A:32:B8:F5:B1:24:07
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 209A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rD3UfYtyq1nGcmPFf1oyuPWxJAc.roa
Signing time: Thu 19 Jun 2025 22:02:15 +0000
ROA not before: Thu 19 Jun 2025 22:02:15 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8346 (0x209a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 19 22:02:15 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AC3DD47D8B72AB59C67263C57F5A32B8F5B12407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:66:8e:37:dd:26:cb:b7:65:81:22:18:5a:
06:e2:57:6d:c6:ba:5d:50:d4:e3:d3:ec:0e:56:a8:
2b:f5:27:14:2a:5b:17:09:a2:da:59:1d:a9:84:df:
db:00:b5:14:6a:b5:2b:cf:d7:f0:c0:03:c7:f1:18:
1d:69:ff:de:76:4d:ba:20:2d:9e:4b:af:79:a2:fb:
28:97:83:a4:b7:d0:54:4b:42:82:5f:6c:5a:30:04:
2b:77:ab:45:39:05:10:31:ff:3a:cf:a9:b5:2f:c1:
77:12:4d:72:9e:6b:78:4a:a1:62:91:f5:5a:e8:1d:
55:49:ae:32:f4:22:a9:d6:92:60:53:5b:55:c3:c4:
9d:77:7e:7e:5a:64:30:41:b0:3d:d8:0f:0f:20:2e:
88:a7:5c:1f:73:2b:4a:1e:c1:06:8e:f3:a9:b0:48:
ef:d9:48:ec:a0:82:76:18:a7:c4:72:a8:86:bd:78:
4a:29:a3:bc:59:a9:a5:b9:19:fc:19:fe:df:a8:5a:
17:6b:4d:27:41:0d:f8:89:2c:e5:bc:f6:33:de:a2:
2f:1d:38:a7:0b:75:96:a0:e9:5a:d7:a6:ed:e9:4c:
5b:1b:db:84:6e:65:51:f6:cf:cd:0a:ba:45:a9:8c:
01:b7:ec:44:8a:52:ee:5a:cd:d1:03:e8:4f:c0:ce:
ea:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3D:D4:7D:8B:72:AB:59:C6:72:63:C5:7F:5A:32:B8:F5:B1:24:07
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rD3UfYtyq1nGcmPFf1oyuPWxJAc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:5c:6c:30:4d:3c:99:d7:fb:f4:2c:d5:b4:36:62:72:b3:5b:
ce:91:86:73:b0:3c:0e:fe:07:c8:bd:31:5f:f5:d2:eb:c8:0d:
3b:a2:c2:e4:d5:9e:9a:be:9e:c4:04:02:af:83:97:99:6d:ff:
70:3f:be:b6:1d:70:d1:18:a9:31:93:81:c0:e6:b3:9b:20:72:
d3:90:44:c1:52:df:9f:5b:a7:33:42:25:c3:86:3a:50:19:a7:
e4:ce:ef:59:80:bc:34:65:61:8d:da:3d:09:35:d4:ea:42:d3:
a4:21:d6:13:d2:78:c0:c1:83:bb:81:0b:a3:89:89:dd:b9:58:
8d:7e:ec:e4:07:cc:27:87:7b:ab:42:6d:40:2b:e1:17:06:0a:
c1:31:ea:78:ab:c1:cc:2c:ac:c6:8d:49:f6:dc:4f:80:76:79:
1c:4f:03:78:b1:8a:30:7a:fc:f8:e0:26:7e:cd:45:99:2a:a1:
c5:b8:0b:5a:8c:1a:1e:ff:a3:1e:48:39:d6:29:50:c6:63:56:
8d:56:cc:fc:0f:df:ea:04:7f:19:8d:94:8a:33:37:1d:88:d3:
13:47:0a:9b:e7:98:17:ee:20:10:4f:f7:2f:86:f5:bd:ce:df:
a7:75:01:3c:0d:5c:75:b3:87:b4:da:eb:d4:51:2a:0a:ec:a2:
92:e3:1b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:44:08 2025 by rpki-client