Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vhqgeWTS1QXzIlZTqiza40m4DTY.roa
File: vhqgeWTS1QXzIlZTqiza40m4DTY.roa (raw, json)
Hash identifier: nCtTGnDCEGEh5eM7pz092amxVlNJdZE00i+INwLM67U=
Subject key identifier: BE:1A:A0:79:64:D2:D5:05:F3:22:56:53:AA:2C:DA:E3:49:B8:0D:36
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 024E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vhqgeWTS1QXzIlZTqiza40m4DTY.roa
Signing time: Sat 10 May 2025 03:37:51 +0000
ROA not before: Sat 10 May 2025 03:37:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590 (0x24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 03:37:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BE1AA07964D2D505F3225653AA2CDAE349B80D36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:37:46:d2:77:15:7a:9d:cb:d1:bd:aa:5b:
4a:c7:98:50:23:b4:d6:f3:4d:96:b7:aa:a3:85:65:
97:87:e6:fd:cb:f1:93:d0:16:20:23:2b:8d:dc:23:
a3:d0:29:d7:c0:4b:4a:ca:4e:a7:4a:72:79:e4:2b:
c4:a5:fb:95:fb:24:0b:48:a4:ee:4d:19:02:d8:5d:
59:b5:1b:66:23:a8:7c:c5:3a:6d:58:73:fc:65:ed:
38:0c:59:da:07:d1:bd:5b:d1:2e:6e:7f:f8:fa:b5:
b0:e3:5b:a1:20:b7:66:43:14:91:c4:4c:d6:c8:43:
2e:c8:bc:ad:ab:96:e1:28:b3:66:d4:3b:0d:13:20:
8c:3c:d0:2e:46:0c:9e:b8:c0:0f:c0:f5:49:89:7f:
07:0e:69:5a:02:36:1d:d0:5f:6e:eb:e0:f1:7b:6e:
09:5a:f1:3b:5a:cf:8c:62:2c:4a:e3:fb:4f:aa:96:
7f:1f:31:22:f7:09:29:78:0f:7e:fc:eb:ea:a0:a6:
de:f5:b6:05:3a:3a:b8:e9:c7:ae:c9:14:be:fc:2a:
b2:94:60:29:1e:67:a6:7f:7b:eb:c1:1b:eb:ee:16:
4c:29:31:a3:d6:d9:d4:68:53:24:cb:db:36:90:e6:
57:93:fd:f6:87:8b:61:46:00:9f:fe:d1:a4:10:da:
24:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1A:A0:79:64:D2:D5:05:F3:22:56:53:AA:2C:DA:E3:49:B8:0D:36
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vhqgeWTS1QXzIlZTqiza40m4DTY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:61:cf:aa:d2:83:bc:25:eb:04:78:71:13:5b:32:b7:1e:02:
c8:a3:2a:4a:4a:a2:90:d0:a8:78:2e:87:31:87:6c:14:e7:50:
f6:71:d2:c3:3d:1e:4e:ef:ee:43:c6:37:5f:2d:1c:00:57:85:
57:8b:4f:75:76:05:cf:2a:6c:02:f9:f2:62:b3:b8:d4:b5:24:
45:e5:a8:a6:46:64:67:fa:87:fd:1e:6d:c1:f7:77:3c:01:5d:
ca:79:ce:c9:8a:2b:ef:cf:5a:bb:d2:10:c6:85:3a:02:0c:1b:
69:9b:d8:0f:bb:22:c3:9d:35:88:b9:0d:e4:49:07:51:21:13:
a9:24:0e:eb:51:c0:41:c5:f7:0e:ed:5d:b5:a7:92:33:c7:cb:
6b:00:e8:b8:91:e0:4b:f9:5f:b3:47:c3:ff:65:c2:64:27:51:
1c:28:5f:5f:4e:a1:62:7b:a1:70:5d:5d:d2:db:8d:6d:95:36:
a2:18:b1:bb:13:22:90:44:46:c6:22:ed:b3:29:44:0c:f6:79:
7b:e9:ce:ad:3d:00:ac:2f:31:26:bb:60:b0:6e:4e:2f:84:27:
63:87:af:2d:3a:7f:a9:27:46:a0:aa:16:16:4f:36:0a:1e:13:
5c:4d:21:35:90:fb:60:39:36:ed:b0:74:2b:b6:4c:1a:c4:68:
a0:15:34:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:14:06 2025 by rpki-client