Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/y04LQU0rd_LfUjmmmszmNiaWsY0.roa
File: y04LQU0rd_LfUjmmmszmNiaWsY0.roa (raw, json)
Hash identifier: Pep2LoIk4deG9icszklhuouxOlNyxcZ93e/IsUGJYbI=
Subject key identifier: CB:4E:0B:41:4D:2B:77:F2:DF:52:39:A6:9A:CC:E6:36:26:96:B1:8D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1DCA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/y04LQU0rd_LfUjmmmszmNiaWsY0.roa
Signing time: Sun 15 Jun 2025 19:19:34 +0000
ROA not before: Sun 15 Jun 2025 19:19:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7626 (0x1dca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 15 19:19:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CB4E0B414D2B77F2DF5239A69ACCE6362696B18D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9a:28:e2:ac:de:20:12:a4:fc:1e:1b:46:0e:
1f:b6:1c:86:c5:10:d8:a2:9d:60:27:1b:3a:14:46:
35:e3:99:d4:69:15:09:e6:36:94:9c:4f:fe:96:08:
08:c0:ba:ea:5a:dd:80:20:1a:94:f1:60:ea:51:22:
d9:73:25:81:30:67:fd:e5:2d:51:40:22:34:6a:41:
cd:68:0a:72:e6:9d:c5:dc:6c:6f:43:aa:5e:01:1f:
5d:f4:e2:a7:b3:56:f8:c0:de:ef:46:86:41:35:b0:
55:22:68:4d:9f:3a:dd:6e:86:c2:2c:99:0a:f4:9a:
c3:5b:d7:bf:4b:26:3b:e7:7a:19:9a:f6:aa:7d:b7:
aa:16:97:9e:d6:ae:1b:83:45:52:2e:c8:ac:ac:69:
c8:ca:5d:97:78:20:80:89:70:4b:51:5a:32:9f:90:
ad:00:ab:85:e5:40:27:29:dd:49:76:9d:df:46:55:
48:c9:2a:0e:b4:7c:32:af:6b:cd:84:54:18:4f:94:
97:55:94:84:07:4e:be:64:3b:4a:74:49:e8:a7:90:
ad:13:4d:3f:b9:48:ac:08:07:76:27:f5:ba:ca:a4:
9a:1f:41:86:5b:b6:10:f8:28:bd:d7:27:00:ab:4b:
5a:a3:13:5a:28:94:25:61:91:80:98:0a:b1:6a:85:
53:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4E:0B:41:4D:2B:77:F2:DF:52:39:A6:9A:CC:E6:36:26:96:B1:8D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/y04LQU0rd_LfUjmmmszmNiaWsY0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:a1:2e:62:0c:58:9a:44:c7:20:c6:a7:df:11:01:e9:5d:1e:
25:44:71:61:5b:29:e9:4d:34:45:6c:62:6d:b0:52:63:28:ca:
3c:61:dd:14:6f:4e:56:52:62:2b:29:22:59:d2:f3:0e:ae:bb:
1f:c5:50:86:8f:35:f8:70:88:37:52:50:27:c3:f0:ae:86:ce:
b9:f9:d0:83:f1:02:93:ca:9f:d2:88:c4:9e:2e:a6:93:25:db:
b7:61:bc:8a:30:f2:8f:27:e3:10:1b:d1:7f:d4:bb:64:50:2c:
cb:7f:a8:73:ea:d2:d4:65:4e:5b:de:03:4b:84:6e:5d:22:ae:
a9:75:6c:be:c6:18:9d:75:c3:46:6c:8c:e1:d4:68:2d:82:b4:
59:d3:55:08:bc:39:c6:47:fb:8d:52:4a:a1:b6:46:70:ae:dc:
ec:4e:ef:29:01:d7:e1:f8:0f:d9:15:71:6d:b5:25:fb:a1:5c:
c9:7e:2d:58:17:e3:89:35:4b:57:84:24:71:ec:40:0d:67:77:
d3:5c:72:f9:a8:7b:66:e1:fe:d7:41:a5:ca:a6:b1:a4:81:d4:
2e:d1:2f:78:28:52:15:5d:53:7c:76:b1:5c:ce:c9:03:e5:23:
49:17:c4:59:77:79:c1:f2:0f:ef:0f:e9:b2:86:a4:77:e7:fb:
2b:76:08:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:50:47 2025 by rpki-client