Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vOMuBZMM_XqrEwLJuYa8wExESEE.roa
File: vOMuBZMM_XqrEwLJuYa8wExESEE.roa (raw, json)
Hash identifier: lDUWWybCITxwuqqZxD5SYJnYud/8CilNOnrtQcWDCq8=
Subject key identifier: BC:E3:2E:05:93:0C:FD:7A:AB:13:02:C9:B9:86:BC:C0:4C:44:48:41
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0926
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vOMuBZMM_XqrEwLJuYa8wExESEE.roa
Signing time: Mon 19 May 2025 06:38:12 +0000
ROA not before: Mon 19 May 2025 06:38:12 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2342 (0x926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 06:38:12 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BCE32E05930CFD7AAB1302C9B986BCC04C444841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:c3:e8:d8:1d:1e:4f:c3:89:f3:06:6f:d4:
c3:69:f6:34:7e:87:f5:6c:ba:27:dc:f8:95:f3:15:
62:82:be:57:3b:d2:27:17:f3:9f:27:d2:db:aa:02:
2d:e8:65:d4:56:b3:63:7a:cd:da:7a:eb:80:79:b0:
04:b0:c0:c2:4f:48:a6:38:3f:14:a7:c0:c6:e8:5d:
c3:63:0d:50:6f:a5:67:de:ac:f6:9f:fa:3d:8e:26:
6a:b1:e5:bb:b3:59:1c:9e:b8:4f:16:15:12:07:5e:
c8:bb:da:b8:60:b9:10:b3:96:32:2d:20:c7:f3:c2:
12:39:cd:fb:c3:aa:ed:55:63:77:04:90:4f:73:cc:
8e:a2:29:e6:78:d9:04:f9:48:33:c5:0a:88:38:80:
5f:61:ff:98:f5:69:ce:2a:6b:16:26:0d:0d:69:ad:
67:90:63:01:0c:94:3a:f8:e3:ec:bd:3f:63:41:99:
35:98:83:00:2f:3b:a8:91:29:8b:78:2f:89:92:16:
0c:36:3c:18:26:f4:34:18:94:fd:9f:0a:10:6a:53:
98:aa:c4:a4:a9:e3:64:c6:63:ca:e9:39:8a:7e:6f:
7a:2d:14:d2:65:bf:5f:d2:ba:68:62:dc:3c:be:75:
15:28:79:b3:3f:82:18:b6:8d:2e:30:72:e9:0d:d2:
a5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E3:2E:05:93:0C:FD:7A:AB:13:02:C9:B9:86:BC:C0:4C:44:48:41
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vOMuBZMM_XqrEwLJuYa8wExESEE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:6c:ce:3d:4a:e4:b4:db:f8:77:0d:e4:3f:d7:d8:99:b6:8c:
ca:c6:fd:a1:a5:05:5e:2b:bf:b9:21:83:b9:57:ae:d7:9f:28:
71:0b:90:55:49:ae:ad:f3:ca:7a:68:55:8b:3b:a8:55:d1:f8:
63:d6:60:aa:9f:38:d9:4d:97:48:3e:1e:16:d4:cc:20:d9:6d:
48:7e:a1:c0:b5:1c:fa:5b:14:30:5e:a1:88:e2:78:be:72:62:
9a:48:d5:4f:81:f3:cc:a8:b5:56:00:d6:25:e4:cd:6f:75:61:
de:0f:b8:7f:28:82:af:c2:69:85:6a:95:ee:dd:47:9f:58:98:
cc:4f:1a:fc:cc:a1:0b:4b:ca:92:cb:cc:fe:7a:92:96:ba:59:
ff:c5:3a:17:12:6d:45:5e:26:74:4b:f3:d3:9e:de:12:65:c1:
de:dc:66:b5:d4:e7:5a:78:e5:b9:7b:9a:c4:61:71:4d:a3:36:
64:25:7c:58:e1:88:a4:5d:45:b7:cb:3d:88:67:a5:95:ef:1c:
f7:22:03:92:f9:fb:42:c9:8f:9b:aa:d0:7f:e1:81:43:11:b0:
f0:8c:45:40:68:b6:47:d9:fe:e0:fa:c0:f4:0f:35:b7:7c:20:
36:b5:bf:d9:b2:de:29:be:01:93:6e:d7:04:01:ab:42:32:c4:
3f:3a:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:15:32 2025 by rpki-client