Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-sjo8kBHaw7Y93z0dDYHh1hXQd4.roa
File: -sjo8kBHaw7Y93z0dDYHh1hXQd4.roa (raw, json)
Hash identifier: IQ0FKndlCjXgEvTt24IJBX8e93g6vffn/vj+wQ68iQo=
Subject key identifier: FA:C8:E8:F2:40:47:6B:0E:D8:F7:7C:F4:74:36:07:87:58:57:41:DE
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 20E2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-sjo8kBHaw7Y93z0dDYHh1hXQd4.roa
Signing time: Fri 20 Jun 2025 09:56:12 +0000
ROA not before: Fri 20 Jun 2025 09:56:12 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8418 (0x20e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 09:56:12 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FAC8E8F240476B0ED8F77CF474360787585741DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:a8:c6:33:2f:ab:a7:1a:51:72:8b:36:75:
5e:6f:df:cb:f5:f0:95:27:ae:b9:46:05:8e:ec:c2:
8f:e5:1c:e0:5e:51:8d:a7:7e:f8:75:f2:53:87:f1:
70:c1:95:1b:ef:70:92:62:d2:7b:18:e8:9b:a6:fd:
9a:82:75:50:89:8f:e1:20:9f:e2:ad:76:f4:a1:f0:
6a:a6:05:7c:e5:5f:6a:f5:8d:b4:e1:57:48:80:30:
6c:9f:3b:c0:ab:8a:65:1c:28:3d:56:b2:a1:53:57:
52:fb:95:bf:e8:6e:69:16:17:c0:0b:7b:70:a3:7a:
f5:62:e2:9e:eb:7a:59:23:89:4f:37:3b:d5:b4:f4:
d1:6e:5b:09:a1:20:b9:89:66:60:e9:0b:20:07:9e:
2b:3d:9c:e9:29:c0:4c:fc:91:7d:5c:d3:e1:09:b3:
94:ee:57:21:9e:26:c6:e0:3c:2c:00:aa:a2:fc:52:
08:37:b3:15:0a:c0:19:22:ae:73:4b:5f:8c:ed:34:
02:21:ef:4b:4f:d9:ce:12:83:a3:99:5f:17:b9:6c:
03:3f:6b:86:64:2b:d1:a7:bb:ab:7b:26:ce:17:a7:
c5:a0:db:8f:9a:83:4e:0a:e3:36:3c:3e:b4:b2:4a:
bb:b0:09:f3:c8:fc:36:66:2c:7f:ea:9b:ed:c4:e2:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C8:E8:F2:40:47:6B:0E:D8:F7:7C:F4:74:36:07:87:58:57:41:DE
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-sjo8kBHaw7Y93z0dDYHh1hXQd4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:0e:a1:98:99:b6:3c:de:a9:9a:6d:c7:78:cb:8c:36:73:9b:
f5:0a:07:f8:be:8b:64:6a:84:a2:6c:f6:68:f3:38:d3:26:f5:
50:3c:f0:b5:54:87:c7:87:8a:11:98:39:f9:dd:18:4a:ae:3a:
51:3e:52:c4:c9:83:26:80:f3:8e:2b:62:3d:89:ea:54:c0:07:
98:ed:f8:2d:0f:bf:e7:a2:e8:a0:a4:c0:5f:7d:c8:fe:f7:50:
ef:a8:12:4c:17:3f:34:bd:0b:2e:c3:d0:0c:59:aa:f0:e9:37:
46:93:40:f7:37:6b:cd:da:14:7f:d0:20:f5:07:52:65:4a:8b:
ee:cd:c4:9c:99:96:d7:77:3b:1d:b7:f4:f1:47:1f:3b:8a:cf:
4f:24:cb:72:ec:c7:ba:9c:c9:dd:dd:13:1b:7e:ba:36:58:fb:
fd:07:db:97:02:40:ec:93:a3:4a:8a:ec:8f:9c:08:aa:66:5c:
85:04:57:bc:a0:31:e8:a1:1c:c3:6f:72:15:0b:90:99:c4:0e:
f5:8f:74:39:6e:af:1b:bb:5d:64:5d:46:84:b4:77:21:b0:8d:
89:46:af:5b:75:5d:ed:28:11:ba:10:0d:c0:33:bc:df:e6:3a:
8f:7a:a4:55:6d:7d:c9:ad:86:45:c5:d4:03:04:da:02:06:77:
aa:ef:8a:3b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIOIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MjAw
OTU2MTJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEZBQzhFOEYyNDA0NzZC
MEVEOEY3N0NGNDc0MzYwNzg3NTg1NzQxREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzx6jGMy+rpxpRcos2dV5v38v18JUnrrlGBY7swo/lHOBeUY2n
fvh18lOH8XDBlRvvcJJi0nsY6Jum/ZqCdVCJj+Egn+KtdvSh8GqmBXzlX2r1jbTh
V0iAMGyfO8CrimUcKD1WsqFTV1L7lb/obmkWF8ALe3CjevVi4p7relkjiU83O9W0
9NFuWwmhILmJZmDpCyAHnis9nOkpwEz8kX1c0+EJs5TuVyGeJsbgPCwAqqL8Ugg3
sxUKwBkirnNLX4ztNAIh70tP2c4Sg6OZXxe5bAM/a4ZkK9Gnu6t7Js4Xp8Wg24+a
g04K4zY8PrSySruwCfPI/DZmLH/qm+3E4qlJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+sjo8kBHaw7Y93z0dDYHh1hXQd4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni8tc2pvOGtCSGF3N1k5M3ow
ZERZSGgxaFhRZDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAJ0OoZiZtjzeqZptx3jLjDZzm/UKB/i+i2Rq
hKJs9mjzONMm9VA88LVUh8eHihGYOfndGEquOlE+UsTJgyaA844rYj2J6lTAB5jt
+C0Pv+ei6KCkwF99yP73UO+oEkwXPzS9Cy7D0AxZqvDpN0aTQPc3a83aFH/QIPUH
UmVKi+7NxJyZltd3Ox239PFHHzuKz08ky3Lsx7qcyd3dExt+ujZY+/0H25cCQOyT
o0qK7I+cCKpmXIUEV7ygMeihHMNvchULkJnEDvWPdDlurxu7XWRdRoS0dyGwjYlG
r1t1Xe0oEboQDcAzvN/mOo96pFVtfcmthkXF1AME2gIGd6rvijs=
-----END CERTIFICATE-----
Generated at Sun Jul 20 19:09:04 2025 by rpki-client