Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/EEvk1C11TUqsVKS81Gk4kL6M5uA.roa
File: EEvk1C11TUqsVKS81Gk4kL6M5uA.roa (raw, json)
Hash identifier: kuAD+yF3triB86MygcdKh4F3Q+WMwQZN8LBcqJVRv00=
Subject key identifier: 10:4B:E4:D4:2D:75:4D:4A:AC:54:A4:BC:D4:69:38:90:BE:8C:E6:E0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 04AE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/EEvk1C11TUqsVKS81Gk4kL6M5uA.roa
Signing time: Tue 13 May 2025 07:37:57 +0000
ROA not before: Tue 13 May 2025 07:37:57 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1198 (0x4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 13 07:37:57 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=104BE4D42D754D4AAC54A4BCD4693890BE8CE6E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:a3:94:ab:0b:ee:3c:d3:43:0d:3d:0a:c3:
43:97:a5:eb:28:e2:e6:8d:88:f0:ff:98:5b:fc:75:
f6:41:8b:91:31:f4:65:5d:42:be:42:36:b2:0e:4b:
bc:86:0b:3a:0f:01:c7:64:30:5f:aa:2a:34:32:e4:
78:b9:37:e2:ce:13:98:2e:1e:ec:c1:15:ac:80:4c:
f1:ad:37:aa:81:66:3c:44:8a:15:ec:92:09:95:69:
dd:20:1e:89:1e:ac:ec:91:5c:3b:51:a0:6e:77:81:
62:d9:53:d1:b8:68:a8:54:d4:c9:8f:f8:81:25:93:
26:f0:29:77:96:21:03:ff:08:78:56:c6:cd:5d:07:
13:4e:47:cc:9a:ed:b0:e9:2b:52:64:02:78:78:3c:
a7:c7:30:dc:b5:e9:3e:26:87:5e:46:42:f0:bf:11:
82:1e:0a:3d:ca:55:46:28:18:83:1b:86:5a:2d:8d:
19:c0:53:f1:5e:06:b3:62:a7:5c:16:a0:44:70:82:
c4:91:27:aa:9c:17:12:31:6b:6f:cb:7d:2f:9c:22:
fe:4e:7b:90:c6:c8:ee:05:a9:ed:b7:22:e3:35:79:
46:e5:ba:57:d2:60:c1:5e:db:db:f6:14:7b:36:3a:
35:d2:dc:91:c0:40:6b:58:4a:33:0b:6a:d9:49:12:
ed:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4B:E4:D4:2D:75:4D:4A:AC:54:A4:BC:D4:69:38:90:BE:8C:E6:E0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/EEvk1C11TUqsVKS81Gk4kL6M5uA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:ef:87:a0:62:1b:2f:1b:ae:83:bf:9b:f3:2f:80:be:5c:d1:
7e:45:34:23:d2:54:7f:93:ce:79:25:8a:76:36:12:5b:4e:51:
81:8e:50:43:5a:95:4a:3f:07:95:c7:e6:2e:b2:44:83:c3:2f:
0f:db:a0:9b:3b:cb:ac:86:b7:26:2a:80:59:ee:17:d3:32:11:
5a:57:3c:25:60:35:79:cc:4b:a9:22:54:1e:0e:2e:da:7c:cb:
71:51:3f:de:44:75:54:0d:2f:86:75:50:b0:77:6e:9d:31:20:
85:59:33:ca:51:6d:0f:c3:52:f7:71:d3:30:9d:22:47:99:c1:
85:f0:17:85:46:39:3f:ec:d8:60:d0:f8:1d:a2:71:99:60:c2:
43:f7:c9:bb:63:29:b7:d8:2c:ed:2e:d8:a5:ad:e4:3b:4a:cf:
6a:c1:5a:c5:45:23:97:e1:42:23:b4:ac:49:0f:9e:13:f7:a3:
0f:60:13:8a:8e:35:e1:82:be:a0:5d:b6:f9:ec:ab:e6:60:5a:
cd:89:58:60:02:38:08:66:ec:11:a7:21:be:40:4f:87:31:1f:
dd:fc:d0:b7:78:10:0f:f1:99:c6:11:1f:cc:a8:92:5b:76:90:
83:06:03:ad:99:50:95:de:6e:e3:a1:b8:97:31:1d:3d:67:9c:
26:95:2f:e8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTMw
NzM3NTdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDEwNEJFNEQ0MkQ3NTRE
NEFBQzU0QTRCQ0Q0NjkzODkwQkU4Q0U2RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCeJKOUqwvuPNNDDT0Kw0OXpeso4uaNiPD/mFv8dfZBi5Ex9GVd
Qr5CNrIOS7yGCzoPAcdkMF+qKjQy5Hi5N+LOE5guHuzBFayATPGtN6qBZjxEihXs
kgmVad0gHokerOyRXDtRoG53gWLZU9G4aKhU1MmP+IElkybwKXeWIQP/CHhWxs1d
BxNOR8ya7bDpK1JkAnh4PKfHMNy16T4mh15GQvC/EYIeCj3KVUYoGIMbhlotjRnA
U/FeBrNip1wWoERwgsSRJ6qcFxIxa2/LfS+cIv5Oe5DGyO4Fqe23IuM1eUblulfS
YMFe29v2FHs2OjXS3JHAQGtYSjMLatlJEu2pAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUEEvk1C11TUqsVKS81Gk4kL6M5uAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9FRXZrMUMxMVRVcXNWS1M4
MUdrNGtMNk01dUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAJvvh6BiGy8broO/m/MvgL5c0X5FNCPSVH+T
znklinY2EltOUYGOUENalUo/B5XH5i6yRIPDLw/boJs7y6yGtyYqgFnuF9MyEVpX
PCVgNXnMS6kiVB4OLtp8y3FRP95EdVQNL4Z1ULB3bp0xIIVZM8pRbQ/DUvdx0zCd
IkeZwYXwF4VGOT/s2GDQ+B2icZlgwkP3ybtjKbfYLO0u2KWt5DtKz2rBWsVFI5fh
QiO0rEkPnhP3ow9gE4qONeGCvqBdtvnsq+ZgWs2JWGACOAhm7BGnIb5AT4cxH938
0Ld4EA/xmcYRH8yoklt2kIMGA62ZUJXebuOhuJcxHT1nnCaVL+g=
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:36:53 2025 by rpki-client