Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/6RmbBIzg7LRocX4rvQ4U0gnkpik.roa
File: 6RmbBIzg7LRocX4rvQ4U0gnkpik.roa (raw, json)
Hash identifier: 1JHirH4gbK7BO4BrPQr6WZL+EZuakZ+LR4vUfkg4Hw8=
Subject key identifier: E9:19:9B:04:8C:E0:EC:B4:68:71:7E:2B:BD:0E:14:D2:09:E4:A6:29
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1EC2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6RmbBIzg7LRocX4rvQ4U0gnkpik.roa
Signing time: Tue 17 Jun 2025 02:10:03 +0000
ROA not before: Tue 17 Jun 2025 02:10:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7874 (0x1ec2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 02:10:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E9199B048CE0ECB468717E2BBD0E14D209E4A629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:d2:af:80:0d:dd:9f:7b:2c:7f:b3:85:35:
e0:5c:c7:3b:c0:a0:e4:3a:a8:fb:34:02:f1:a2:7f:
87:bf:ae:2c:80:82:9a:d7:b2:c4:66:3e:8f:53:66:
3b:84:16:85:27:ef:38:bf:c5:d2:61:ae:b9:c0:78:
c1:c9:97:27:12:db:2f:78:31:b5:72:31:d2:40:4d:
25:b9:b7:eb:96:10:46:75:0b:82:fa:3a:a7:9d:97:
92:e3:37:08:4c:7d:72:24:01:76:ba:5d:67:68:b8:
89:3e:1f:94:04:a1:dc:d7:02:b7:db:09:5a:11:fa:
bc:d7:98:c7:ac:fc:0b:94:47:73:01:0d:82:18:bb:
70:b6:ae:f1:fe:78:10:92:30:0f:c6:4b:0e:49:cb:
c1:d2:c0:0a:0a:60:56:2b:16:62:86:35:98:2c:3e:
bd:da:9c:5b:39:90:f9:14:3c:45:03:42:71:69:42:
e6:f4:3e:e7:3c:3b:f4:2c:04:54:b7:42:06:6c:49:
e6:a9:4b:d5:51:d0:2d:64:c9:af:62:0f:43:d1:6b:
55:41:0b:7b:67:25:75:f7:00:8f:ae:b6:84:a3:eb:
34:ed:23:88:28:ab:95:46:d3:a2:95:75:14:f9:1c:
88:ab:56:fe:45:30:2f:94:d9:35:ad:4d:2e:dc:8a:
1f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:19:9B:04:8C:E0:EC:B4:68:71:7E:2B:BD:0E:14:D2:09:E4:A6:29
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6RmbBIzg7LRocX4rvQ4U0gnkpik.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:68:b6:7c:fa:49:2c:ee:69:ae:b9:f1:14:cf:bd:58:c4:50:
ce:65:10:a8:af:fc:62:38:e3:9b:ad:12:d5:2f:0a:a3:8a:38:
97:02:c6:93:b7:bc:61:e0:c5:4d:5f:ef:8f:67:c5:dd:29:1a:
2c:7f:90:3e:36:d4:f3:64:04:29:57:5e:3f:bc:c0:b9:9a:14:
e5:80:34:bb:30:ab:54:69:c9:a6:b7:54:d7:84:b2:1c:a5:8e:
1f:0d:0f:42:76:e9:95:6f:0f:56:fd:e5:f8:68:5e:9a:83:2f:
3a:65:af:eb:a0:1d:b6:3c:86:5c:0b:fb:fd:4f:26:ee:cf:00:
da:27:54:62:99:e1:f3:3d:65:d4:d8:0b:27:8d:e5:c9:19:48:
2e:9a:e4:ff:83:96:fd:54:a1:99:8e:9e:78:3f:4b:69:ef:1e:
b4:de:10:90:2d:00:cd:4b:7a:92:25:3e:3c:ca:1e:7f:12:43:
0c:81:d2:56:84:d1:48:c6:60:5b:37:f5:2b:26:c3:c0:14:e7:
19:2e:8d:9e:9a:43:76:c3:4d:a0:7a:48:7e:e9:52:99:71:4f:
5c:22:1b:a5:57:88:ac:44:5c:42:db:6d:41:a0:46:6e:8b:75:
f3:7e:f2:80:e5:41:78:bd:d0:32:db:c0:7d:2f:f0:7b:f0:eb:
ba:53:e7:ec
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHsIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTcw
MjEwMDNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEU5MTk5QjA0OENFMEVD
QjQ2ODcxN0UyQkJEMEUxNEQyMDlFNEE2MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCfNKvgA3dn3ssf7OFNeBcxzvAoOQ6qPs0AvGif4e/riyAgprX
ssRmPo9TZjuEFoUn7zi/xdJhrrnAeMHJlycS2y94MbVyMdJATSW5t+uWEEZ1C4L6
Oqedl5LjNwhMfXIkAXa6XWdouIk+H5QEodzXArfbCVoR+rzXmMes/AuUR3MBDYIY
u3C2rvH+eBCSMA/GSw5Jy8HSwAoKYFYrFmKGNZgsPr3anFs5kPkUPEUDQnFpQub0
Puc8O/QsBFS3QgZsSeapS9VR0C1kya9iD0PRa1VBC3tnJXX3AI+utoSj6zTtI4go
q5VG06KVdRT5HIirVv5FMC+U2TWtTS7cih/5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6RmbBIzg7LRocX4rvQ4U0gnkpikwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni82Um1iQkl6ZzdMUm9jWDRy
dlE0VTBnbmtwaWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAH5otnz6SSzuaa658RTPvVjEUM5lEKiv/GI4
45utEtUvCqOKOJcCxpO3vGHgxU1f749nxd0pGix/kD421PNkBClXXj+8wLmaFOWA
NLswq1Rpyaa3VNeEshyljh8ND0J26ZVvD1b95fhoXpqDLzplr+ugHbY8hlwL+/1P
Ju7PANonVGKZ4fM9ZdTYCyeN5ckZSC6a5P+Dlv1UoZmOnng/S2nvHrTeEJAtAM1L
epIlPjzKHn8SQwyB0laE0UjGYFs39Ssmw8AU5xkujZ6aQ3bDTaB6SH7pUplxT1wi
G6VXiKxEXELbbUGgRm6LdfN+8oDlQXi90DLbwH0v8Hvw67pT5+w=
-----END CERTIFICATE-----
Generated at Sun Jul 20 23:12:17 2025 by rpki-client