Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/xBKoPA6X1VOF6iZMewXet8ZC1a4.roa
File: xBKoPA6X1VOF6iZMewXet8ZC1a4.roa (raw, json)
Hash identifier: JjynPxko+jShCNeA83niYbAqH5ZtlVPKXJKsBXCvDHY=
Subject key identifier: C4:12:A8:3C:0E:97:D5:53:85:EA:26:4C:7B:05:DE:B7:C6:42:D5:AE
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 20AA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xBKoPA6X1VOF6iZMewXet8ZC1a4.roa
Signing time: Fri 20 Jun 2025 00:19:51 +0000
ROA not before: Fri 20 Jun 2025 00:19:51 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8362 (0x20aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 00:19:51 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C412A83C0E97D55385EA264C7B05DEB7C642D5AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:36:88:f3:cf:29:1a:04:3c:0f:c2:b1:95:
47:d0:26:67:bc:97:29:96:82:65:d6:d3:3c:69:8b:
ed:bd:79:03:e5:23:45:05:a8:40:de:3c:8b:1a:bc:
d1:56:8c:ab:b4:e8:7e:bf:fd:01:54:56:a3:62:44:
dc:c8:a5:ac:d3:54:dc:7b:b4:81:ed:59:03:35:05:
89:05:69:90:87:d8:70:38:37:85:1a:04:d8:0b:74:
31:68:f7:d9:a7:8a:8b:04:1d:36:97:99:26:5b:46:
bd:0d:52:cf:1f:36:e9:37:fa:fa:e0:29:25:86:c3:
c6:1b:a8:f0:7e:b2:81:34:d3:a0:47:6d:eb:a0:3b:
cc:81:4b:b4:7b:94:7b:c8:4f:d6:bf:b6:90:75:a1:
2e:c4:e6:09:17:ed:cb:50:77:23:72:4f:92:aa:c6:
c9:86:07:6b:74:e1:a3:54:5b:bd:92:25:02:9f:41:
0b:2b:39:e1:15:38:4d:bc:5c:51:eb:67:2b:ee:76:
83:b3:9e:51:bf:9b:db:a0:5f:98:66:c0:ac:5f:8f:
04:fb:b7:ea:b8:76:b7:df:16:4c:67:6f:eb:f8:4e:
90:b1:c7:9b:a2:b7:6b:34:b3:4e:4b:62:69:cf:08:
f0:6f:76:2a:1a:b0:1b:21:ec:9b:19:43:4c:ea:83:
01:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:12:A8:3C:0E:97:D5:53:85:EA:26:4C:7B:05:DE:B7:C6:42:D5:AE
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xBKoPA6X1VOF6iZMewXet8ZC1a4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:29:b5:d2:c8:45:fa:eb:7e:bd:3b:19:bc:e2:08:b1:94:09:
5f:4b:b4:eb:5b:46:c6:8d:da:52:b1:65:c6:91:15:c5:2f:b8:
dd:f3:7c:6d:84:2d:24:5d:65:30:f8:53:42:6c:4e:1b:a1:9d:
69:7b:a5:7c:9e:8d:a9:d1:82:44:6e:7d:29:70:cb:05:d0:2f:
12:57:43:e5:13:46:ff:70:48:ff:b5:09:bc:81:1e:7a:38:d7:
45:86:d3:91:79:c3:a3:85:bc:0a:2d:fe:61:09:30:4e:4a:01:
8c:34:4e:ee:58:c6:c5:8d:ef:a4:f3:04:db:3a:7f:79:e1:63:
b0:d1:75:98:fb:55:50:fc:0c:54:8d:4d:b8:99:40:c5:b7:6b:
1d:ef:20:55:09:2d:67:10:2f:64:7b:c6:ff:de:05:8d:da:fa:
d3:95:45:e7:44:8d:83:95:81:07:3e:ab:e8:9d:d2:b8:21:48:
82:17:b0:e9:15:9d:e4:dd:c9:03:12:75:e9:9e:8a:4b:53:ba:
8b:3f:16:5c:37:e3:eb:be:fc:45:03:4a:ba:81:d0:0e:91:b5:
c0:d5:8e:05:8f:34:0b:a0:de:66:9a:88:6d:b4:11:c8:7a:c6:
f2:31:75:3a:c1:8b:10:5f:c1:22:1d:18:6c:e2:ae:38:c9:a3:
dc:8e:d0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:50:45 2025 by rpki-client