Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/rP__sRnT4EnBrbyc6mCzD0ExQ9M.roa
File: rP__sRnT4EnBrbyc6mCzD0ExQ9M.roa (raw, json)
Hash identifier: TPg1l6BFfnYtTcIocUXMFk5mlZl6ckDyZX8CQ64u7uk=
Subject key identifier: AC:FF:FF:B1:19:D3:E0:49:C1:AD:BC:9C:EA:60:B3:0F:41:31:43:D3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 21EA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rP__sRnT4EnBrbyc6mCzD0ExQ9M.roa
Signing time: Sat 21 Jun 2025 18:41:53 +0000
ROA not before: Sat 21 Jun 2025 18:41:53 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8682 (0x21ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 21 18:41:53 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=ACFFFFB119D3E049C1ADBC9CEA60B30F413143D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:39:bf:2b:8f:1c:b3:fe:7c:32:fd:52:94:bd:
bf:f5:1a:7c:a1:64:73:6b:cc:3c:1f:19:e5:f0:d8:
4a:9b:40:e8:1d:ca:e8:5a:91:46:97:18:59:b5:47:
df:ae:f7:45:46:53:26:05:d0:e7:02:c5:19:07:65:
36:48:33:8c:5e:5b:05:7f:3d:5f:c6:c6:b7:4f:05:
93:ea:aa:ae:68:05:2c:52:a6:48:26:e5:b7:3c:b8:
e6:5c:c2:62:38:b3:55:45:4a:1d:9d:81:c1:9a:95:
18:3f:89:32:30:f7:72:ff:a7:b4:8c:61:e9:45:3d:
7e:38:e5:c8:41:de:db:83:97:ce:7d:54:f0:d5:14:
6b:5b:02:c3:cc:9e:ea:e5:30:c4:24:04:43:9e:25:
1d:55:e4:da:60:a4:c2:e3:2b:db:a6:a3:4c:45:b1:
80:22:46:c5:34:61:13:be:89:b8:a7:f3:b3:26:78:
d6:0c:2e:51:1f:f3:ab:f7:9f:5f:36:5a:ac:c3:be:
b6:3e:32:31:ce:df:17:e8:55:02:6b:e6:b5:6e:ef:
af:31:9c:c8:51:51:78:11:2b:62:6d:e9:68:1e:7f:
38:51:4f:6f:eb:22:ed:18:57:a8:bc:bd:58:35:08:
b2:bc:a9:61:ec:4e:e0:f1:31:3b:22:75:0f:23:2b:
a1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FF:FF:B1:19:D3:E0:49:C1:AD:BC:9C:EA:60:B3:0F:41:31:43:D3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rP__sRnT4EnBrbyc6mCzD0ExQ9M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:c8:2c:e0:c3:da:97:6b:d0:14:2c:ff:a3:e8:46:c9:f1:ba:
f9:e9:cc:be:14:67:85:08:b6:da:2f:5a:a3:f7:25:22:89:b0:
5d:61:89:b0:ad:26:46:c8:14:04:8d:ef:90:d6:4c:12:dc:76:
e4:7b:82:bb:ba:bd:b1:73:c2:ba:32:7c:cb:67:2c:06:6e:57:
c3:73:cb:96:81:e0:d0:10:47:61:ba:4e:3c:91:b1:74:4f:03:
36:26:e9:40:d0:f8:eb:1f:5f:44:c8:cd:b6:0e:6c:49:88:88:
f4:30:9f:72:0c:35:2a:73:0b:90:71:ae:94:94:65:2f:e2:7b:
ae:94:aa:6b:16:41:78:44:27:db:e9:58:ea:7a:52:7f:84:8d:
f0:18:1d:59:e3:21:2d:87:2b:fc:08:d3:56:78:ec:f9:d0:c0:
57:ec:da:c7:16:bd:71:68:03:55:f4:34:66:e0:d3:26:eb:b8:
90:8b:6f:42:03:e9:eb:55:81:06:73:c9:12:b7:ea:ea:e0:5e:
45:d8:01:db:b4:26:da:77:81:08:c4:83:7a:0e:c0:d2:66:66:
95:2e:6f:d7:a7:c4:d0:38:ac:44:dd:5a:7a:7f:dc:8c:d0:36:
d7:26:f5:dc:7a:c8:9b:25:84:0b:d7:83:94:c5:16:a3:e8:20:
55:ca:76:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:40:58 2025 by rpki-client