Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/DXD6kivIBhk3RWL38NPyzLjj6_w.roa
File: DXD6kivIBhk3RWL38NPyzLjj6_w.roa (raw, json)
Hash identifier: Sof8KtOg1NhwUcCA9jg+OMO7yNCXpH0MITv5lFG4nVE=
Subject key identifier: 0D:70:FA:92:2B:C8:06:19:37:45:62:F7:F0:D3:F2:CC:B8:E3:EB:FC
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 21BE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DXD6kivIBhk3RWL38NPyzLjj6_w.roa
Signing time: Sat 21 Jun 2025 13:11:46 +0000
ROA not before: Sat 21 Jun 2025 13:11:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8638 (0x21be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 21 13:11:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0D70FA922BC80619374562F7F0D3F2CCB8E3EBFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:71:e2:a0:08:71:41:e2:f4:72:56:8c:40:
11:8b:a0:27:ea:fc:30:76:6b:14:60:31:ca:5e:4a:
c2:c5:d3:58:2d:f0:25:0d:30:02:ab:76:7c:d6:26:
36:47:d0:dc:86:12:d8:47:22:b5:f1:6d:4e:2b:69:
e9:d8:bf:80:19:4b:5e:63:e1:7e:d2:cd:83:20:3d:
ee:4d:bd:5a:5b:d3:3b:9e:1d:02:fa:05:51:28:b0:
1c:4d:2e:a5:d4:f8:b3:a7:a4:bf:c1:7c:82:e3:c2:
47:1a:16:1d:a0:1d:d1:cc:1b:8a:dd:8a:70:e4:f0:
80:cc:4c:a6:9c:e2:d8:6b:ac:e0:99:ac:09:00:00:
d0:c8:7a:7f:ce:17:ce:22:fe:80:7f:50:4d:dd:5f:
cc:0a:a4:90:64:77:24:31:ba:21:8e:04:a2:d4:63:
58:70:c5:81:45:fd:2b:29:27:23:5b:77:ad:2f:b0:
6d:1e:7e:33:6c:6b:29:6a:f5:21:10:0b:e6:54:66:
7a:40:7a:ff:65:21:78:b5:fa:e9:ea:52:c0:0c:29:
14:15:e8:f2:ba:9c:a7:52:f3:67:79:75:01:4a:3c:
a6:c3:e7:4b:04:74:5f:c8:97:e8:da:0f:f0:a3:57:
ff:8d:3d:c2:ad:de:60:83:97:5c:80:27:9a:34:d5:
c2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:70:FA:92:2B:C8:06:19:37:45:62:F7:F0:D3:F2:CC:B8:E3:EB:FC
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/DXD6kivIBhk3RWL38NPyzLjj6_w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:ce:05:71:37:0a:33:b3:17:95:8f:5f:1f:97:fa:21:e2:45:
81:a2:d8:9b:d0:48:cf:ab:f0:1d:06:90:52:b2:7a:8e:91:fd:
16:c5:93:fd:65:27:81:48:97:1d:65:db:27:c1:d4:1d:14:a1:
e4:0d:0b:7e:d4:c6:ed:75:24:27:3d:f4:73:3a:c1:02:be:dc:
7e:dd:72:0f:05:e9:be:7d:ab:df:7d:f0:e1:eb:2f:d9:9f:82:
d4:3e:5c:c4:4f:b5:a8:9f:b7:10:68:43:6b:bc:e5:5f:af:36:
76:58:cb:fa:93:3e:6e:1e:38:17:4a:1e:f0:5e:f9:33:00:9d:
a2:06:28:0d:82:05:99:5c:cb:95:3a:5d:a4:d8:3b:fb:d6:83:
ee:86:7b:f5:db:df:46:39:4c:94:34:6f:54:32:15:52:76:0e:
54:b3:2c:7e:69:b6:b9:7a:df:fc:0d:80:e1:1e:cf:ed:d4:91:
cd:3f:cc:18:3d:a2:aa:74:db:f1:a7:a5:c8:e8:29:f7:45:4f:
af:c9:14:42:42:0a:c0:bd:f0:c1:94:93:4c:89:dd:67:fa:d0:
54:c2:36:04:c8:33:19:d8:7e:74:c7:a7:ef:ae:c1:77:8f:e6:
5f:29:fd:ce:85:ca:9f:fc:af:1a:62:1d:bc:48:81:22:b0:aa:
1e:0a:f3:43
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIb4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MjEx
MzExNDZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDBENzBGQTkyMkJDODA2
MTkzNzQ1NjJGN0YwRDNGMkNDQjhFM0VCRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfUXHioAhxQeL0claMQBGLoCfq/DB2axRgMcpeSsLF01gt8CUN
MAKrdnzWJjZH0NyGEthHIrXxbU4raenYv4AZS15j4X7SzYMgPe5NvVpb0zueHQL6
BVEosBxNLqXU+LOnpL/BfILjwkcaFh2gHdHMG4rdinDk8IDMTKac4thrrOCZrAkA
ANDIen/OF84i/oB/UE3dX8wKpJBkdyQxuiGOBKLUY1hwxYFF/SspJyNbd60vsG0e
fjNsaylq9SEQC+ZUZnpAev9lIXi1+unqUsAMKRQV6PK6nKdS82d5dQFKPKbD50sE
dF/Il+jaD/CjV/+NPcKt3mCDl1yAJ5o01cK/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUDXD6kivIBhk3RWL38NPyzLjj6/wwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9EWEQ2a2l2SUJoazNSV0wz
OE5QeXpMamo2X3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAG7OBXE3CjOzF5WPXx+X+iHiRYGi2JvQSM+r
8B0GkFKyeo6R/RbFk/1lJ4FIlx1l2yfB1B0UoeQNC37Uxu11JCc99HM6wQK+3H7d
cg8F6b59q9998OHrL9mfgtQ+XMRPtaiftxBoQ2u85V+vNnZYy/qTPm4eOBdKHvBe
+TMAnaIGKA2CBZlcy5U6XaTYO/vWg+6Ge/Xb30Y5TJQ0b1QyFVJ2DlSzLH5ptrl6
3/wNgOEez+3Ukc0/zBg9oqp02/GnpcjoKfdFT6/JFEJCCsC98MGUk0yJ3Wf60FTC
NgTIMxnYfnTHp++uwXeP5l8p/c6Fyp/8rxpiHbxIgSKwqh4K80M=
-----END CERTIFICATE-----
Generated at Sun Jul 20 18:59:36 2025 by rpki-client