Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/EPwqvjkXoc5KG4o47Vrro04O2FA.roa
File: EPwqvjkXoc5KG4o47Vrro04O2FA.roa (raw, json)
Hash identifier: MWgEHUAFR/9ix+DvPRrXxZWOusu8Mdvq7DM2WdS+ieE=
Subject key identifier: 10:FC:2A:BE:39:17:A1:CE:4A:1B:8A:38:ED:5A:EB:A3:4E:0E:D8:50
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0EAA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/EPwqvjkXoc5KG4o47Vrro04O2FA.roa
Signing time: Mon 26 May 2025 15:08:43 +0000
ROA not before: Mon 26 May 2025 15:08:43 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3754 (0xeaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 15:08:43 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=10FC2ABE3917A1CE4A1B8A38ED5AEBA34E0ED850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6f:f1:9f:88:66:7b:af:1e:31:1c:e5:4b:d0:
67:9a:02:d0:74:72:23:bd:13:80:0f:b2:94:2c:fe:
ee:2c:e8:40:75:06:bd:8f:ad:6c:ef:7c:73:47:51:
1e:82:87:7e:84:11:ea:92:28:84:17:f6:10:b3:91:
7f:6f:33:d0:62:b7:7f:df:8e:ee:a1:a5:bd:1e:21:
dc:34:70:04:6c:5c:3f:de:78:18:0c:37:81:79:85:
1f:91:16:a2:86:ea:81:63:eb:ae:60:2f:be:09:ba:
ee:a5:de:30:0b:02:d9:c7:b2:a8:1a:dd:dd:fd:f8:
7d:d7:b3:ab:72:b6:40:5e:36:ac:ce:ed:36:bb:f7:
49:fb:36:fe:10:ec:09:1f:0c:20:19:f5:0e:dc:8f:
e6:2d:11:f4:a4:85:bf:fa:07:5f:f1:1e:3a:be:b9:
c8:42:b6:55:89:23:2f:f9:c4:64:f3:e5:33:ed:30:
df:01:49:c1:58:6b:bf:24:5f:ad:85:f4:36:46:e1:
70:a9:d2:97:20:d4:0b:fe:d7:b1:b3:d8:12:b5:b9:
de:af:91:74:90:38:66:3d:6f:a1:f3:1d:9f:8d:3b:
19:22:db:98:81:10:a6:89:da:8d:93:c8:93:f7:4c:
9e:95:73:3c:a2:f7:fe:43:12:bf:20:2c:81:09:06:
31:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FC:2A:BE:39:17:A1:CE:4A:1B:8A:38:ED:5A:EB:A3:4E:0E:D8:50
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/EPwqvjkXoc5KG4o47Vrro04O2FA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:fc:4c:be:83:58:1f:8a:16:5c:59:44:67:d5:d9:c5:f2:7c:
7e:56:05:84:fb:85:4a:f9:6a:90:86:20:b6:03:f9:93:4a:b0:
d4:54:fe:21:ef:3d:4b:06:af:ba:b0:6b:a2:b9:25:6a:3f:fc:
19:a9:82:73:64:65:5f:a1:ac:22:29:7d:64:f3:03:20:e9:de:
07:39:4b:9a:8e:83:d7:65:28:00:a2:bb:e4:bc:7f:52:72:e0:
18:fe:6d:e9:58:32:d2:b3:03:b0:61:a0:b8:85:aa:c3:30:1e:
ee:d4:86:3d:fc:52:c6:ed:ae:38:e7:3b:6e:97:60:22:18:28:
cf:50:48:94:78:03:4d:4b:c2:b9:75:36:0d:dc:c5:95:df:f3:
a3:60:95:3f:f4:f0:11:41:85:4c:bb:b1:7e:06:46:3b:6a:a0:
fe:cc:93:0b:fa:67:8b:eb:34:7d:cb:c7:d1:9b:0d:3a:89:f3:
39:cd:48:52:a6:01:50:3e:72:5b:9e:dc:97:54:f9:d0:74:c1:
79:6a:04:57:d5:cf:52:9e:21:e3:54:b0:8c:7c:b4:46:74:7d:
d8:9d:cd:10:67:f9:6c:d3:e0:82:7e:77:6b:80:76:5b:ad:fe:
88:47:1e:74:78:e2:37:c1:b6:e1:92:e9:79:22:9a:a0:ab:fe:
c6:ec:e6:ba
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDqowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjYx
NTA4NDNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDEwRkMyQUJFMzkxN0Ex
Q0U0QTFCOEEzOEVENUFFQkEzNEUwRUQ4NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDob/GfiGZ7rx4xHOVL0GeaAtB0ciO9E4APspQs/u4s6EB1Br2P
rWzvfHNHUR6Ch36EEeqSKIQX9hCzkX9vM9Bit3/fju6hpb0eIdw0cARsXD/eeBgM
N4F5hR+RFqKG6oFj665gL74Juu6l3jALAtnHsqga3d39+H3Xs6tytkBeNqzO7Ta7
90n7Nv4Q7AkfDCAZ9Q7cj+YtEfSkhb/6B1/xHjq+uchCtlWJIy/5xGTz5TPtMN8B
ScFYa78kX62F9DZG4XCp0pcg1Av+17Gz2BK1ud6vkXSQOGY9b6HzHZ+NOxki25iB
EKaJ2o2TyJP3TJ6Vczyi9/5DEr8gLIEJBjEpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUEPwqvjkXoc5KG4o47Vrro04O2FAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9FUHdxdmprWG9jNUtHNG80
N1Zycm8wNE8yRkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAJj8TL6DWB+KFlxZRGfV2cXyfH5WBYT7hUr5
apCGILYD+ZNKsNRU/iHvPUsGr7qwa6K5JWo//BmpgnNkZV+hrCIpfWTzAyDp3gc5
S5qOg9dlKACiu+S8f1Jy4Bj+belYMtKzA7BhoLiFqsMwHu7Uhj38UsbtrjjnO26X
YCIYKM9QSJR4A01Lwrl1Ng3cxZXf86NglT/08BFBhUy7sX4GRjtqoP7Mkwv6Z4vr
NH3Lx9GbDTqJ8znNSFKmAVA+clue3JdU+dB0wXlqBFfVz1KeIeNUsIx8tEZ0fdid
zRBn+WzT4IJ+d2uAdlut/ohHHnR44jfBtuGS6XkimqCr/sbs5ro=
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:19:10 2025 by rpki-client