Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ypV2xHDyBNyq9G3nIfmtqmuDOTg.roa
File: ypV2xHDyBNyq9G3nIfmtqmuDOTg.roa (raw, json)
Hash identifier: I0r0Tk/HFG+OP/tDYmWDIwG+DqD+xbUb75lQ412GkqI=
Subject key identifier: CA:95:76:C4:70:F2:04:DC:AA:F4:6D:E7:21:F9:AD:AA:6B:83:39:38
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0ADE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ypV2xHDyBNyq9G3nIfmtqmuDOTg.roa
Signing time: Wed 21 May 2025 13:39:00 +0000
ROA not before: Wed 21 May 2025 13:39:00 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2782 (0xade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 21 13:39:00 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CA9576C470F204DCAAF46DE721F9ADAA6B833938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:ac:95:90:77:c3:6c:a4:60:49:85:46:30:
c8:fb:f2:7f:1e:57:ea:71:36:d3:6b:50:ac:dc:45:
ef:43:0a:06:c0:5a:14:b3:fc:9c:38:80:c3:a3:d1:
a4:a7:ef:a5:dd:2c:94:6a:24:57:7f:c0:8c:0a:c7:
8d:fb:17:d5:55:d7:3e:37:9e:51:20:51:5d:5c:6f:
17:55:97:2d:f1:bf:2c:26:18:5e:6f:88:de:cd:04:
8a:c2:9b:a1:ee:f3:82:b2:11:ad:9e:6b:5c:18:f9:
fd:90:d7:0b:5e:89:3c:82:f0:6e:e7:98:af:cd:87:
5b:07:8d:10:61:ba:ef:f1:7c:0f:c2:44:eb:8c:44:
44:26:e2:56:f0:6b:b2:b8:55:29:1a:48:52:dc:4a:
56:0e:5d:bc:b6:05:b9:57:21:02:b7:63:86:b3:84:
a2:62:81:ef:99:b5:bf:1e:38:ed:37:58:36:ce:e6:
0e:e0:13:a9:42:34:fe:a6:58:bc:d7:ce:78:f7:c4:
60:28:df:e4:2d:0b:f0:3c:bc:28:31:d5:f9:9b:da:
82:3e:9c:8b:2d:4a:c5:66:8a:35:64:a1:91:cf:e4:
18:3f:ca:b5:6b:f8:18:fe:37:8b:25:27:68:63:ce:
ee:ee:52:ff:c2:59:14:c5:f6:1d:e5:97:6e:2b:5c:
c1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:95:76:C4:70:F2:04:DC:AA:F4:6D:E7:21:F9:AD:AA:6B:83:39:38
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ypV2xHDyBNyq9G3nIfmtqmuDOTg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:70:f7:b4:3b:89:93:17:ed:a0:e6:06:26:43:02:f3:ed:94:
c1:87:a1:5b:92:54:21:91:25:04:82:4c:ca:76:f2:5d:b5:51:
17:79:e6:14:33:8e:57:9c:a8:56:67:5f:06:0c:c1:31:85:88:
2d:cc:f3:d4:f7:77:5b:51:a4:61:cf:a3:79:bb:17:21:f0:f1:
48:45:b9:4f:6e:b4:10:7e:41:12:66:63:30:bd:fe:e3:73:c3:
da:12:30:e4:ed:59:4f:7e:8f:74:eb:c8:da:12:d9:e8:77:fb:
be:ed:fc:df:8f:36:a7:ae:d4:c0:f9:61:a1:ea:9e:c5:5b:31:
82:ea:5e:8d:c8:8b:49:7e:58:fd:61:0d:77:d2:4d:29:18:54:
69:b4:df:bd:61:68:13:20:27:04:66:7d:80:b2:af:46:f9:cb:
24:11:93:dd:a1:a2:25:59:de:d8:36:6e:aa:a4:dd:05:7a:13:
91:3a:6e:0b:65:03:b2:27:75:5d:fe:f5:21:e3:aa:8c:5a:81:
53:d9:c5:fc:f4:b4:a5:b3:0d:1a:98:d6:a0:32:79:a7:98:85:
92:fd:c4:88:5e:5c:57:7b:fc:d9:e6:35:db:87:ac:7c:41:c3:
f5:3f:b5:15:f8:10:32:fe:3c:76:d3:7b:32:92:d7:0d:cc:2c:
8f:43:bb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:12:33 2025 by rpki-client