Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vMPYVxfYM86eYLzbDqUCwj95BG8.roa
File: vMPYVxfYM86eYLzbDqUCwj95BG8.roa (raw, json)
Hash identifier: yrpr4JDBbW99iga05kLDnf/wOgHOPS4IMUB49qkxh44=
Subject key identifier: BC:C3:D8:57:17:D8:33:CE:9E:60:BC:DB:0E:A5:02:C2:3F:79:04:6F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1E02
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vMPYVxfYM86eYLzbDqUCwj95BG8.roa
Signing time: Mon 16 Jun 2025 02:25:30 +0000
ROA not before: Mon 16 Jun 2025 02:25:30 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7682 (0x1e02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 02:25:30 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BCC3D85717D833CE9E60BCDB0EA502C23F79046F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:8a:d9:ec:a9:60:94:bf:86:62:b4:a5:a1:
52:a3:5d:d8:ae:dc:64:73:c5:99:76:37:a7:55:8c:
fe:fa:13:32:d6:fd:28:b0:d5:37:f6:6e:77:7b:07:
65:59:b1:48:98:56:ff:cb:65:34:3d:61:a5:c8:b0:
df:02:5b:9e:78:12:35:36:95:80:e7:7f:98:d3:66:
39:41:65:4a:b9:8c:0a:4b:6c:be:3c:13:ac:b8:b9:
2a:9d:02:2e:b0:10:54:96:35:86:c4:1f:cb:45:8d:
75:3b:3f:c0:86:37:86:27:da:43:22:75:a1:bf:ec:
b6:99:3b:58:f9:47:e2:c9:3c:34:ee:21:8c:ab:9b:
4f:3e:e1:da:9c:5e:a1:01:a8:1c:7a:9f:09:66:20:
5b:b6:08:22:ad:cb:13:d8:f5:2f:9c:8a:3b:42:76:
18:10:b5:b4:74:e4:8e:fa:04:f2:d5:4a:4b:bc:53:
d1:5e:fa:f7:dc:84:f6:c9:56:ff:d9:7f:cb:f2:7b:
d0:d1:02:1c:78:82:d7:15:3c:5d:1b:35:80:e5:d9:
80:5b:8c:0f:71:e6:e9:7c:0f:5c:58:26:15:d4:76:
a1:6d:ae:50:c4:91:3f:c3:24:d0:90:f0:6f:65:24:
49:66:ca:ef:3b:b2:69:05:52:4a:9a:e4:b4:c9:ab:
f7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C3:D8:57:17:D8:33:CE:9E:60:BC:DB:0E:A5:02:C2:3F:79:04:6F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vMPYVxfYM86eYLzbDqUCwj95BG8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:88:1f:a2:83:2f:d8:c3:ac:4c:a4:1f:07:85:1f:d7:f0:f0:
fe:14:43:11:4a:06:1b:3a:57:1c:bf:f5:ad:91:78:85:7c:d1:
2d:c6:67:45:0e:c3:37:3c:4f:fc:17:80:18:58:e4:19:04:a4:
8c:00:df:81:3a:53:2f:69:5c:47:d8:e3:36:5c:3a:16:fa:79:
0c:14:b7:2b:88:c0:39:f4:9d:41:56:e5:da:19:94:06:c4:b6:
f4:74:c3:d2:82:3e:56:1c:17:cf:46:d5:c4:54:99:b6:d6:b3:
65:3b:89:b2:8e:0c:3a:f9:da:70:8c:5f:41:b4:6b:cf:97:d4:
71:e7:a3:d6:9d:90:03:e3:b9:2c:9a:38:67:23:c5:aa:d8:99:
67:72:c3:3f:5b:92:7e:c2:ef:6b:c9:51:77:fe:11:43:d3:f0:
48:15:60:ce:f4:ac:00:18:fe:b9:1c:8f:d2:d1:b7:9d:4c:dd:
6c:4e:bd:0f:b9:57:91:90:8d:02:80:9a:70:d2:a3:59:66:d1:
85:cd:23:c1:0a:ad:0b:a9:a5:28:da:5e:28:e6:83:8c:c4:cf:
31:cf:59:33:46:76:64:e4:cc:9b:57:7b:76:19:f4:30:b1:8b:
5d:e7:eb:74:4f:03:0a:87:ce:4e:ed:8f:e1:bb:46:ca:73:3e:
9f:d0:1b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:54:48 2025 by rpki-client