Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vGop-ZnxUgmnNpTRWCuCQgbpEDA.roa
File: vGop-ZnxUgmnNpTRWCuCQgbpEDA.roa (raw, json)
Hash identifier: CSmMd1ky9rTnvtDtYaNgL7kHxMEmGCU6Deejo/tHez0=
Subject key identifier: BC:6A:29:F9:99:F1:52:09:A7:36:94:D1:58:2B:82:42:06:E9:10:30
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0896
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vGop-ZnxUgmnNpTRWCuCQgbpEDA.roa
Signing time: Sun 18 May 2025 12:38:10 +0000
ROA not before: Sun 18 May 2025 12:38:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2198 (0x896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 12:38:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BC6A29F999F15209A73694D1582B824206E91030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:3c:4f:fd:2b:60:92:b6:82:7d:df:b5:ce:
fd:08:48:e5:1f:a5:b8:cb:14:db:07:3b:d9:9e:cb:
5f:b1:5b:1c:24:29:dc:1c:5d:ac:88:c5:69:51:38:
69:14:3e:21:2b:d7:a5:d4:3b:ba:5d:d4:13:37:c4:
8b:8a:f7:95:d2:1d:59:83:4b:6a:a6:4c:9e:5a:f3:
22:40:16:01:c7:d5:2c:e7:b7:b7:65:fe:40:a8:c7:
3d:53:b3:23:98:59:1c:87:52:69:94:40:c9:94:e2:
7b:87:b6:0e:73:a0:05:f7:fd:20:8b:18:17:85:b7:
23:e0:48:56:68:f5:fd:32:f4:63:f2:9d:10:23:6d:
7d:17:2f:81:79:a3:e6:d5:b9:49:f6:d5:c3:bf:bc:
ad:51:72:fb:b2:fc:39:aa:27:df:f2:48:e6:36:8c:
f5:0a:d4:b3:95:df:d8:f8:55:92:8e:ab:6e:92:fe:
4e:76:9f:49:fb:c3:68:75:9e:e7:14:13:6c:e0:6a:
0e:11:ba:70:74:23:6c:7a:83:a9:ab:9a:6e:28:58:
71:6f:c4:3c:34:73:d2:2f:ad:1d:96:23:9e:e8:1a:
74:9c:0c:78:27:49:f3:30:59:57:26:e3:85:e4:b9:
46:f1:ab:b7:f1:a9:27:5a:25:74:58:e8:65:1d:2a:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6A:29:F9:99:F1:52:09:A7:36:94:D1:58:2B:82:42:06:E9:10:30
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vGop-ZnxUgmnNpTRWCuCQgbpEDA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:ee:18:81:63:f4:35:c3:b9:c0:c7:e8:e7:2b:e5:d3:20:f5:
ec:a4:cd:a1:2d:4f:c7:3f:8b:4b:f8:a9:bd:14:5d:cb:be:5a:
ed:e8:b4:74:0d:52:5f:b1:be:e2:63:d9:55:de:79:54:f0:c8:
3a:80:f9:14:27:ae:ee:2b:a8:c5:72:18:9a:f6:81:04:45:87:
23:93:47:2e:bc:79:3f:cc:16:95:da:1d:76:ba:f6:21:93:58:
ca:94:8d:3d:e5:ca:ae:69:69:c7:50:92:6c:c5:61:a7:42:08:
76:7b:ec:b3:4c:9d:eb:03:ac:33:56:0d:6d:7b:f9:6c:d8:a5:
e2:e8:9c:2f:83:7c:8e:f3:44:fa:2a:84:25:cd:31:54:d8:43:
c5:7b:10:e6:68:d9:77:1e:f0:71:50:41:8e:78:3f:b6:48:b8:
39:7c:21:c6:ff:05:ab:ae:e4:70:41:6f:fe:a6:9f:3b:b4:7f:
58:68:e6:1d:0a:69:6b:9f:4b:1d:86:85:db:82:76:b9:86:33:
02:4f:4c:d3:61:ff:42:4f:df:f1:00:47:3a:d7:bf:e8:c1:36:
ea:d2:fd:3e:02:c3:2b:16:e4:69:62:0e:c9:2a:eb:7a:e3:7e:
7c:13:d2:97:30:66:28:25:42:32:e2:3f:7b:60:ba:af:fc:a2:
9c:58:db:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:06:22 2025 by rpki-client