Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vx61a-VpfpTWB0tJn5sa3WqpOS4.roa
File: vx61a-VpfpTWB0tJn5sa3WqpOS4.roa (raw, json)
Hash identifier: qDYykkY2VX+rK94atc+uwa+xsmOsOgKJDUcZdr9m1/Q=
Subject key identifier: BF:1E:B5:6B:E5:69:7E:94:D6:07:4B:49:9F:9B:1A:DD:6A:A9:39:2E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2412
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vx61a-VpfpTWB0tJn5sa3WqpOS4.roa
Signing time: Tue 24 Jun 2025 15:42:05 +0000
ROA not before: Tue 24 Jun 2025 15:42:05 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9234 (0x2412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 15:42:05 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BF1EB56BE5697E94D6074B499F9B1ADD6AA9392E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:09:d4:31:34:ec:13:e7:e6:59:c9:82:a4:
78:b8:69:2e:86:6e:c6:3d:3d:0d:77:61:c1:25:3e:
7f:e7:2f:f3:b0:a6:52:99:a6:dd:fa:90:a3:e4:2a:
bb:e0:eb:40:93:de:cf:04:47:45:8f:5e:4d:28:d2:
ae:23:db:6e:0d:b9:95:66:4b:91:42:00:74:85:03:
8c:e7:52:15:2f:84:48:2b:6b:5f:7f:16:69:fd:8e:
51:84:96:34:91:2d:f9:f0:88:40:33:51:ea:ea:a1:
d9:41:c9:e0:b6:74:69:15:c9:37:cc:5d:80:89:44:
72:20:ed:01:90:ff:32:76:a0:c6:54:3f:8e:be:31:
1a:b1:0c:1f:e8:e6:b4:df:67:1a:61:d7:50:28:74:
b4:41:c1:c4:b0:cc:48:8c:42:b3:05:97:f3:78:35:
c7:27:f8:c1:a5:a8:5b:4c:2c:3d:e0:af:f8:72:3d:
b5:ca:50:e9:81:f8:ed:50:ef:b0:d7:25:94:68:7e:
cc:51:c2:b5:36:e5:6e:6a:58:d4:70:7c:3e:fb:19:
13:b7:01:f1:aa:61:3b:ae:a7:70:54:a1:fc:58:7f:
2c:96:c3:1d:11:98:a2:04:a5:2b:3a:76:51:9a:4d:
04:46:0b:3f:47:67:26:40:62:8d:c1:04:a8:4f:86:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1E:B5:6B:E5:69:7E:94:D6:07:4B:49:9F:9B:1A:DD:6A:A9:39:2E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vx61a-VpfpTWB0tJn5sa3WqpOS4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
37:9e:d1:b8:99:54:2e:ad:d6:fc:97:67:b2:4a:b9:b4:fe:7d:
5a:30:46:0a:d4:0d:79:f7:b2:70:4d:67:2d:da:cd:69:76:00:
98:f3:6c:7a:e7:87:d3:b5:eb:4a:a0:bb:11:97:b1:50:72:ec:
09:26:92:12:6f:a3:43:51:af:81:72:d5:ad:da:c5:3b:1e:69:
fc:ec:da:e7:bb:07:0b:13:e7:cc:dd:fe:8e:9c:e6:bd:47:74:
d8:c0:0f:ed:c4:c8:04:e3:20:bb:2f:3e:56:30:d3:c9:38:ba:
66:14:64:57:42:d0:5b:c8:93:bb:a3:92:72:40:a0:0c:d7:e2:
64:b4:d2:77:92:2b:8f:d5:2d:3a:be:a7:de:8f:3d:76:7e:42:
bc:b3:07:49:43:43:cf:b2:b5:95:52:f8:e7:36:a5:37:65:1f:
ea:b2:45:6f:5a:aa:79:e1:78:d8:e3:73:a0:b3:a1:5f:a5:e6:
aa:e2:b8:3d:3d:bd:69:b7:13:07:25:d0:83:5a:90:ec:fa:43:
b6:d0:16:d5:65:0d:60:d5:b8:ad:e1:dc:0c:16:ff:ab:1e:23:
0d:19:25:5e:c4:fc:99:0c:b1:c9:9a:33:26:ea:cd:fd:43:56:
10:0a:7a:ca:cb:11:0b:6a:bc:59:5d:5e:c9:a9:2e:aa:36:e3:
10:ac:e7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:37:38 2025 by rpki-client