Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/E9fJiIUo8CJJbn9Gmuxxl9sFPyo.roa
File: E9fJiIUo8CJJbn9Gmuxxl9sFPyo.roa (raw, json)
Hash identifier: o/nR9fuK5TgQSI5gbTPKu+E0qSX9p9Mkhb8pNRC9skA=
Subject key identifier: 13:D7:C9:88:85:28:F0:22:49:6E:7F:46:9A:EC:71:97:DB:05:3F:2A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 098E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/E9fJiIUo8CJJbn9Gmuxxl9sFPyo.roa
Signing time: Mon 19 May 2025 19:38:25 +0000
ROA not before: Mon 19 May 2025 19:38:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2446 (0x98e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 19:38:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=13D7C9888528F022496E7F469AEC7197DB053F2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:9d:86:eb:ac:ff:80:1d:33:33:be:0f:03:
54:38:38:00:d6:11:bc:d2:f2:72:18:74:86:7e:f4:
9f:cc:96:68:b3:5f:4e:fb:e3:a5:df:91:f2:53:f4:
5c:e3:88:35:58:8e:c6:99:dd:eb:51:11:9c:96:d4:
d2:94:a7:da:1a:e6:64:03:11:a4:53:bc:4d:0b:9f:
35:2c:a6:77:d3:62:eb:58:5a:07:63:2e:82:1a:da:
67:c0:d5:a7:46:67:38:3e:0a:0d:30:ee:68:56:3f:
dd:4b:56:cb:4a:88:88:d2:59:a7:fe:2f:2d:ff:02:
3f:1b:8e:94:36:37:d1:77:e6:e4:e9:b0:51:a0:ef:
31:83:54:b6:25:31:62:5e:a9:4e:a7:f9:33:c1:d7:
75:f2:c1:47:c4:87:c2:27:2c:b2:75:1d:61:38:d0:
f8:5c:04:30:15:5e:7d:4d:3e:4e:d5:ea:86:24:6b:
06:35:50:f8:f1:e4:ab:c3:3d:79:2b:06:be:5c:2d:
36:d5:f1:dc:84:87:2c:54:ef:51:87:37:80:12:3e:
40:e4:aa:98:a2:ad:ed:b1:2a:75:f4:71:e6:1d:27:
68:bc:cd:b3:11:15:87:5a:77:3d:cb:3b:15:2d:b3:
82:f1:28:71:1a:ce:5d:ab:e7:88:89:2b:46:10:3f:
b2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D7:C9:88:85:28:F0:22:49:6E:7F:46:9A:EC:71:97:DB:05:3F:2A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/E9fJiIUo8CJJbn9Gmuxxl9sFPyo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:33:75:8e:dc:56:dc:da:94:f2:8f:9f:0d:e8:68:79:80:ff:
2a:6e:a3:57:79:22:1b:bc:b6:b4:29:d9:ee:6e:c1:dd:25:30:
e6:d6:03:c5:af:f1:0a:40:e0:9a:90:98:a2:12:17:09:4f:68:
2e:64:53:4d:b1:5e:6e:d8:0b:32:c1:2f:55:1f:10:14:d2:b7:
de:8e:c7:3a:1a:9f:eb:8e:a3:0f:c0:6d:87:2e:78:aa:5f:40:
20:25:34:5f:d8:da:b0:5b:51:9d:ea:e9:66:46:03:45:ac:61:
18:4d:ab:65:e7:0d:28:2d:7c:61:c1:62:aa:27:58:24:37:2f:
2e:8d:26:42:81:b9:22:ac:4d:c5:14:ef:be:bc:e8:4c:4c:77:
6c:49:9e:e7:73:e2:27:54:7e:6d:7f:c2:5b:82:5f:05:8f:38:
b3:6a:53:1b:76:37:7b:44:92:18:ca:12:ee:8e:1b:76:1f:6c:
3e:69:8d:c3:7b:61:68:00:d8:e4:2f:ef:32:eb:bb:20:fd:8f:
b2:ca:40:9b:71:a4:56:2e:d6:d6:7c:33:ca:93:98:f8:a5:92:
60:73:90:cc:d8:af:27:fc:78:33:f3:43:6d:06:39:b6:20:81:
f2:60:d5:f6:f3:34:d9:01:a0:91:c5:6c:b3:70:9e:a8:94:e1:
65:30:5e:6a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCY4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTkx
OTM4MjVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDEzRDdDOTg4ODUyOEYw
MjI0OTZFN0Y0NjlBRUM3MTk3REIwNTNGMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCryJ2G66z/gB0zM74PA1Q4OADWEbzS8nIYdIZ+9J/MlmizX077
46XfkfJT9FzjiDVYjsaZ3etREZyW1NKUp9oa5mQDEaRTvE0LnzUspnfTYutYWgdj
LoIa2mfA1adGZzg+Cg0w7mhWP91LVstKiIjSWaf+Ly3/Aj8bjpQ2N9F35uTpsFGg
7zGDVLYlMWJeqU6n+TPB13XywUfEh8InLLJ1HWE40PhcBDAVXn1NPk7V6oYkawY1
UPjx5KvDPXkrBr5cLTbV8dyEhyxU71GHN4ASPkDkqpiire2xKnX0ceYdJ2i8zbMR
FYdadz3LOxUts4LxKHEazl2r54iJK0YQP7LvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUE9fJiIUo8CJJbn9Gmuxxl9sFPyowHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9FOWZKaUlVbzhDSkpibjlH
bXV4eGw5c0ZQeW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAH4zdY7cVtzalPKPnw3oaHmA/ypuo1d5Ihu8
trQp2e5uwd0lMObWA8Wv8QpA4JqQmKISFwlPaC5kU02xXm7YCzLBL1UfEBTSt96O
xzoan+uOow/AbYcueKpfQCAlNF/Y2rBbUZ3q6WZGA0WsYRhNq2XnDSgtfGHBYqon
WCQ3Ly6NJkKBuSKsTcUU77686ExMd2xJnudz4idUfm1/wluCXwWPOLNqUxt2N3tE
khjKEu6OG3YfbD5pjcN7YWgA2OQv7zLruyD9j7LKQJtxpFYu1tZ8M8qTmPilkmBz
kMzYryf8eDPzQ20GObYggfJg1fbzNNkBoJHFbLNwnqiU4WUwXmo=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:28:10 2025 by rpki-client