Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/zCC2fdbbD0SA27lX6Mp7z-iyOCE.roa
File: zCC2fdbbD0SA27lX6Mp7z-iyOCE.roa (raw, json)
Hash identifier: oxnbdk46moZNYQVqQtlZqFgabTL+i/xjZlCBkwyYh6Q=
Subject key identifier: CC:20:B6:7D:D6:DB:0F:44:80:DB:B9:57:E8:CA:7B:CF:E8:B2:38:21
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 08E2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/zCC2fdbbD0SA27lX6Mp7z-iyOCE.roa
Signing time: Sun 18 May 2025 22:08:09 +0000
ROA not before: Sun 18 May 2025 22:08:09 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2274 (0x8e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 22:08:09 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=CC20B67DD6DB0F4480DBB957E8CA7BCFE8B23821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:95:16:1a:cd:c6:34:f4:1a:89:e1:49:d7:
a4:b8:0c:a7:ba:40:c0:98:fc:66:57:35:a5:f1:30:
a8:b4:3a:89:28:ab:4b:92:e2:29:a4:ec:32:a4:50:
04:fa:77:61:bc:96:20:5d:0b:23:09:8e:ca:a2:36:
7c:0b:55:2b:bc:37:d9:89:9c:37:a9:bf:01:f0:fe:
df:cb:08:49:2f:1b:2c:0a:d6:4b:d5:0e:30:98:e1:
ac:3b:99:5a:e1:e9:c1:c6:aa:81:b7:82:69:42:e7:
0a:44:51:ea:52:45:32:d7:92:a9:94:62:01:25:fa:
4e:46:57:35:6d:af:e6:24:43:22:22:20:cb:2d:3d:
a6:f1:32:3d:ec:05:49:02:4a:cb:80:a3:69:c4:96:
ad:2f:5b:0d:df:0b:f8:e5:61:5f:ec:fe:27:98:fd:
29:5b:0b:73:42:5b:eb:f8:eb:88:f7:e3:7e:1a:d9:
f2:0f:87:9e:57:81:f9:96:2e:fa:fe:90:6d:c9:77:
2a:fc:72:76:7a:10:47:87:c1:96:6c:73:63:86:32:
a5:f4:01:ca:47:87:6c:06:cf:27:93:58:1f:72:31:
5f:a6:f3:c7:3a:a1:6c:13:4c:2c:fc:de:15:c4:5a:
ce:91:13:c9:56:6f:f4:c9:1a:5e:34:9f:ab:c7:b4:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:20:B6:7D:D6:DB:0F:44:80:DB:B9:57:E8:CA:7B:CF:E8:B2:38:21
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/zCC2fdbbD0SA27lX6Mp7z-iyOCE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:2a:d5:ff:ab:62:98:6a:6f:f8:53:fb:da:9e:e5:03:80:8e:
60:e5:e3:4e:e5:5d:b7:cb:0b:4e:e8:b9:96:60:f4:39:07:59:
1f:e3:05:a7:7d:92:c8:88:43:aa:37:ab:45:09:16:c3:ea:dd:
19:57:dd:a4:be:7a:ee:d4:ad:24:b9:39:b2:84:34:46:08:48:
f1:8f:42:64:45:7c:a9:ce:c2:35:54:9d:49:d7:4b:e1:6f:dc:
7f:e3:df:82:67:ea:4d:ef:d7:48:f5:3b:50:cd:55:1a:f6:ce:
56:da:98:3f:41:29:ca:c8:d8:a6:25:d0:6c:d7:38:ac:c2:58:
83:28:b9:63:ee:b8:ff:54:18:e7:67:5d:3c:4a:d0:93:37:3b:
66:52:a3:b7:10:d0:6a:d6:47:0a:21:9a:9a:7c:42:cd:09:36:
a2:aa:17:aa:48:74:0e:65:de:08:2d:5a:92:6d:19:55:b8:0e:
5e:42:3c:fd:d2:b2:78:db:04:b3:f2:f2:0d:88:34:8f:0e:49:
5b:74:58:f7:e9:e5:1d:98:cb:b6:ec:b4:04:25:ab:0b:66:33:
e3:76:1e:ca:6f:db:7b:c8:f1:1a:c3:75:aa:1d:96:e5:42:e2:
c7:a6:79:b9:49:1f:e2:56:29:63:4d:6b:c8:62:35:6d:38:6f:
35:bc:81:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:04:27 2025 by rpki-client