Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/rfGUjQl-X9dW_00OYpS32KEOzoM.roa
File: rfGUjQl-X9dW_00OYpS32KEOzoM.roa (raw, json)
Hash identifier: IT1h5/buYtoZ+feK4zqGZSnVNAtAk6Um+i/+o3pyFqI=
Subject key identifier: AD:F1:94:8D:09:7E:5F:D7:56:FF:4D:0E:62:94:B7:D8:A1:0E:CE:83
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 23FE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rfGUjQl-X9dW_00OYpS32KEOzoM.roa
Signing time: Tue 24 Jun 2025 13:12:10 +0000
ROA not before: Tue 24 Jun 2025 13:12:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9214 (0x23fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 13:12:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=ADF1948D097E5FD756FF4D0E6294B7D8A10ECE83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:0e:1e:74:54:dd:96:b8:36:bf:c6:68:28:
7b:51:4d:8f:ba:a8:92:ef:cb:55:48:e5:5e:aa:f5:
29:49:3b:e0:99:da:97:99:4e:e6:73:9f:c1:0c:d0:
62:dc:ce:37:cb:d7:e4:0b:76:98:78:b3:72:50:cc:
d9:dd:78:63:4e:85:9f:02:df:d6:a0:f6:66:05:0b:
d8:ff:57:8f:69:36:c7:b6:a3:18:8a:8d:66:d1:fd:
00:dc:c9:80:72:8c:53:33:d5:f3:65:06:02:86:ed:
c4:78:5a:7c:cc:cf:df:ee:ab:9c:7a:83:4a:28:bd:
bb:29:02:e3:4c:b5:57:9b:4d:5c:c7:46:60:d5:e2:
f8:17:af:b0:99:65:42:98:d4:ea:b3:2e:98:74:40:
24:ef:ad:2a:f2:d9:66:4c:58:ac:91:72:42:42:b6:
22:55:5d:00:b5:3b:64:ac:9b:18:d3:f0:19:61:63:
8f:81:31:89:c3:1e:83:35:f5:a3:de:bc:2a:52:d7:
44:71:c3:e1:d2:c8:9d:b9:11:01:62:f5:5a:34:ff:
1b:62:a5:bd:cd:d9:bd:c6:81:2b:73:e0:29:b5:86:
0c:db:ad:15:d5:25:b6:0b:36:d4:b0:0f:cc:d5:f0:
1b:f3:01:1c:f9:ac:de:51:fc:0a:86:70:0e:05:a5:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F1:94:8D:09:7E:5F:D7:56:FF:4D:0E:62:94:B7:D8:A1:0E:CE:83
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rfGUjQl-X9dW_00OYpS32KEOzoM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:d5:b1:7d:5a:d1:17:2f:a1:83:df:07:4b:d4:0d:33:34:35:
25:05:a8:2b:4e:5e:6a:d9:5a:e8:fe:79:1d:bc:c9:54:7b:d2:
08:1b:0c:9c:08:07:4f:0f:3e:58:25:35:fd:3b:98:aa:98:6d:
d3:fa:46:2a:82:23:2c:51:e7:13:3c:a5:75:7f:3e:82:b0:35:
13:4e:52:78:23:cf:78:c6:9b:75:f1:c9:54:d3:55:f1:e8:b3:
77:7f:4e:bf:4f:38:f6:19:f0:4a:d9:27:5b:b7:03:16:d8:de:
85:65:e2:c5:55:08:e1:f1:9d:73:75:74:c8:b1:89:43:d5:0c:
ad:62:2d:fc:71:25:74:74:ec:bf:dc:70:f4:68:ec:13:f6:f8:
32:2e:70:77:9f:98:10:54:46:85:f2:e9:92:2f:df:b0:6a:f3:
5c:03:fe:a3:8a:ee:0f:5e:75:68:26:91:d6:a6:aa:b4:9e:04:
1c:09:aa:0e:86:78:ed:96:57:ad:41:cb:6d:c3:f7:d2:13:0f:
da:b6:a5:9e:83:4d:87:3d:dc:1c:3d:12:b5:e4:50:f6:ca:36:
5d:89:9b:bd:fa:43:2c:22:b1:5d:2c:55:13:51:64:20:34:75:
c8:25:f1:ba:e2:59:20:8e:11:8f:80:87:38:db:dc:71:fa:16:
ad:9a:42:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:41:57 2025 by rpki-client