Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/xLLFFSvIjcXSAorwl84NTyL6nhs.roa
File: xLLFFSvIjcXSAorwl84NTyL6nhs.roa (raw, json)
Hash identifier: GOUvIEcIhhQ8KHPcGxW7GXu6CoqktcM9rSGFOk9f1mw=
Subject key identifier: C4:B2:C5:15:2B:C8:8D:C5:D2:02:8A:F0:97:CE:0D:4F:22:FA:9E:1B
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 22EE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xLLFFSvIjcXSAorwl84NTyL6nhs.roa
Signing time: Mon 23 Jun 2025 03:11:52 +0000
ROA not before: Mon 23 Jun 2025 03:11:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8942 (0x22ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 23 03:11:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C4B2C5152BC88DC5D2028AF097CE0D4F22FA9E1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:e2:73:e0:fe:d4:44:46:0f:0d:82:f9:41:
6c:b1:e3:86:94:3b:1f:a4:f7:a5:5c:00:04:88:b1:
74:5c:81:72:19:77:3f:dc:a0:d1:86:55:62:24:cd:
e2:05:e6:c2:cb:bf:cd:ae:d9:16:81:f5:e3:fb:06:
5b:cf:f1:fd:21:ee:2a:d1:d7:e0:6d:c2:d4:3c:51:
c2:7b:95:c1:97:a0:c8:a7:09:60:a4:ed:2e:0d:fb:
51:b4:19:c1:15:cb:b4:06:78:e6:c1:3a:62:a4:5c:
3a:b8:1b:af:3b:a1:12:00:00:5f:ac:ec:15:0d:56:
b6:86:af:73:de:bd:e9:12:42:dc:01:c5:68:0b:4e:
1d:11:49:94:22:fd:9d:6b:cd:53:2a:20:5c:cd:a6:
da:e5:21:62:11:07:66:a0:c4:ae:75:21:bd:7c:93:
0f:d4:4e:3f:4a:83:40:f6:96:75:4b:86:05:1b:19:
45:8a:66:43:61:f4:a7:68:d1:26:d2:0d:64:3f:88:
b5:76:6c:33:6e:5e:44:7a:fb:10:d0:8e:44:70:29:
9d:d5:8d:1b:6f:f2:99:27:b0:50:8c:da:c4:18:62:
72:d3:7a:8e:f7:bf:12:11:2e:e7:70:b8:fa:ec:d2:
f5:71:54:5e:06:ee:f7:da:41:40:92:bc:be:fe:f4:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B2:C5:15:2B:C8:8D:C5:D2:02:8A:F0:97:CE:0D:4F:22:FA:9E:1B
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xLLFFSvIjcXSAorwl84NTyL6nhs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:6b:9b:98:eb:ea:77:01:95:86:80:78:97:96:24:5d:b4:46:
f1:a9:6c:c3:ec:11:55:5d:7c:db:28:82:1a:f5:61:00:09:32:
91:b3:38:d1:ec:8b:aa:54:ce:bc:44:0d:27:32:c1:3e:0e:f8:
f8:5b:04:40:41:98:a0:0e:b3:1f:c8:79:9c:b2:69:31:4a:53:
05:c2:4e:e1:87:76:0e:12:a9:80:af:0a:e0:34:98:b9:6d:b7:
6d:40:b7:a8:60:bd:99:d7:90:b8:70:2e:e5:46:46:44:68:be:
b9:0e:a9:ff:94:bc:86:2f:96:b4:44:9d:a1:9c:4f:64:e0:c8:
df:94:45:2f:e7:72:81:2f:30:e0:3e:6f:f1:f6:ff:39:15:40:
27:17:b7:44:fb:d9:c1:d9:47:95:43:70:cc:bc:f7:c8:09:99:
ab:56:de:70:ed:a2:3e:29:f8:66:af:a7:45:4a:29:63:f2:dd:
6c:72:8e:53:08:f9:4c:27:1f:66:f0:8a:0e:17:55:08:80:54:
25:ef:f6:ba:aa:2c:f3:d2:a4:b1:18:58:f0:4e:28:8d:65:fa:
e0:22:e9:fe:c2:5d:c7:a7:3f:31:1e:84:0e:a1:a7:4e:a1:59:
ab:7f:1b:3e:bc:15:28:a0:3b:46:37:e9:c7:f0:ce:84:ff:73:
23:38:b5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:49:49 2025 by rpki-client