Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/8QzqXiAhv8n2FfW2t8s_V-Srn74.roa
File: 8QzqXiAhv8n2FfW2t8s_V-Srn74.roa (raw, json)
Hash identifier: iiUldSzhFa7jQdxOVX7ZZo+c+rdXYjB5v0epjeNW8Vg=
Subject key identifier: F1:0C:EA:5E:20:21:BF:C9:F6:15:F5:B6:B7:CB:3F:57:E4:AB:9F:BE
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E86
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8QzqXiAhv8n2FfW2t8s_V-Srn74.roa
Signing time: Mon 26 May 2025 10:38:41 +0000
ROA not before: Mon 26 May 2025 10:38:41 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3718 (0xe86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 10:38:41 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F10CEA5E2021BFC9F615F5B6B7CB3F57E4AB9FBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:c4:4f:fa:61:4c:b7:bb:b6:95:f5:3e:cd:
a0:68:fa:54:c9:6a:f5:dc:c7:e5:00:b0:b4:0b:b5:
c2:2d:7a:2f:24:5c:c2:63:94:40:68:9d:0c:7a:c9:
dd:da:44:21:6c:96:81:31:77:ab:e7:e7:49:aa:e3:
77:d5:5c:1e:5c:60:15:d6:eb:c2:93:3b:31:9a:e2:
29:9b:ba:0c:33:75:7c:5c:00:08:13:93:c2:35:ce:
45:77:4c:79:f2:85:9a:4c:b1:1a:15:bb:91:d4:ef:
ee:c6:d2:3b:e3:66:b1:3f:da:90:99:35:e7:69:3b:
f0:d5:a9:44:02:f1:05:4a:d1:8a:5d:6c:70:20:f3:
ee:1c:2b:0e:26:f7:25:2a:4b:84:71:99:57:0d:10:
90:cf:0b:f7:5b:c7:a6:71:db:fd:fa:01:1b:e9:ad:
30:ea:47:fc:8c:a9:10:3a:d0:71:cf:9b:56:9f:a6:
4c:d5:4f:bb:b3:1c:6e:30:ef:a1:bc:74:22:4a:74:
08:d2:44:9d:11:0b:f4:fc:e9:56:f9:bf:b1:c8:3b:
f4:05:c9:4a:06:a8:57:be:0c:ed:64:9e:78:1b:3c:
2b:7a:7d:64:d7:79:77:90:3a:66:1f:6d:05:39:d1:
74:4e:e5:58:25:05:b6:44:70:f3:7b:eb:eb:f2:eb:
3c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0C:EA:5E:20:21:BF:C9:F6:15:F5:B6:B7:CB:3F:57:E4:AB:9F:BE
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8QzqXiAhv8n2FfW2t8s_V-Srn74.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:18:0f:7c:43:10:f6:56:a2:43:54:ce:0a:c7:0b:6a:b8:70:
53:b2:73:92:0b:a1:f6:bd:be:fa:7d:b4:2f:9d:05:44:39:82:
d3:db:59:1d:fe:e7:3a:ec:68:41:a9:17:3a:9d:1b:76:e1:18:
64:48:c6:7e:2f:26:1b:3d:74:50:ad:cb:ff:3a:ac:34:17:b3:
c2:4e:3b:b9:6f:4c:e7:f9:7b:6f:67:38:de:f5:4f:c1:f3:a9:
b6:a0:15:ed:b0:56:86:49:df:d6:37:81:da:72:0e:fc:50:39:
bf:a3:89:e4:08:bf:82:6d:73:91:f7:72:da:84:73:ff:73:46:
7c:5a:1e:b1:33:f7:f5:3a:dc:02:24:bc:ac:08:99:b1:0d:7e:
6e:63:ac:16:37:54:06:b5:94:fb:6d:1a:8a:80:a1:9f:0e:3a:
42:5b:51:d7:05:1a:c2:d4:dd:cb:69:b8:91:88:51:5e:a5:a2:
4c:f5:f1:17:e4:45:82:66:90:7a:5d:58:6b:e8:33:9d:c3:4f:
de:24:b5:d0:98:8b:f6:a4:1a:ba:24:94:af:b9:85:b5:c2:67:
47:64:f5:2d:d9:e3:ed:18:2b:0f:33:02:6d:40:d7:58:aa:19:
09:17:6e:68:ae:9b:71:3a:a1:48:8f:d2:66:c0:55:53:5c:28:
00:83:1a:61
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDoYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjYx
MDM4NDFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEYxMENFQTVFMjAyMUJG
QzlGNjE1RjVCNkI3Q0IzRjU3RTRBQjlGQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvMMRP+mFMt7u2lfU+zaBo+lTJavXcx+UAsLQLtcItei8kXMJj
lEBonQx6yd3aRCFsloExd6vn50mq43fVXB5cYBXW68KTOzGa4imbugwzdXxcAAgT
k8I1zkV3THnyhZpMsRoVu5HU7+7G0jvjZrE/2pCZNedpO/DVqUQC8QVK0YpdbHAg
8+4cKw4m9yUqS4RxmVcNEJDPC/dbx6Zx2/36ARvprTDqR/yMqRA60HHPm1afpkzV
T7uzHG4w76G8dCJKdAjSRJ0RC/T86Vb5v7HIO/QFyUoGqFe+DO1knngbPCt6fWTX
eXeQOmYfbQU50XRO5VglBbZEcPN76+vy6zzBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8QzqXiAhv8n2FfW2t8s/V+Srn74wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni84UXpxWGlBaHY4bjJGZlcy
dDhzX1YtU3JuNzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAFkYD3xDEPZWokNUzgrHC2q4cFOyc5ILofa9
vvp9tC+dBUQ5gtPbWR3+5zrsaEGpFzqdG3bhGGRIxn4vJhs9dFCty/86rDQXs8JO
O7lvTOf5e29nON71T8HzqbagFe2wVoZJ39Y3gdpyDvxQOb+jieQIv4Jtc5H3ctqE
c/9zRnxaHrEz9/U63AIkvKwImbENfm5jrBY3VAa1lPttGoqAoZ8OOkJbUdcFGsLU
3ctpuJGIUV6lokz18RfkRYJmkHpdWGvoM53DT94ktdCYi/akGroklK+5hbXCZ0dk
9S3Z4+0YKw8zAm1A11iqGQkXbmium3E6oUiP0mbAVVNcKACDGmE=
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:07:43 2025 by rpki-client