Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/F2Vz_B9s-Xky0-abM8-vp7x2q6o.roa
File: F2Vz_B9s-Xky0-abM8-vp7x2q6o.roa (raw, json)
Hash identifier: OoGjiK+Zp/ty3w5fw7Q06Rb2k3f8g2i8tDMs2l9bqPA=
Subject key identifier: 17:65:73:FC:1F:6C:F9:79:32:D3:E6:9B:33:CF:AF:A7:BC:76:AB:AA
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 12F2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/F2Vz_B9s-Xky0-abM8-vp7x2q6o.roa
Signing time: Sun 01 Jun 2025 08:09:21 +0000
ROA not before: Sun 01 Jun 2025 08:09:21 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4850 (0x12f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 1 08:09:21 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=176573FC1F6CF97932D3E69B33CFAFA7BC76ABAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:0e:f3:3d:81:fa:b1:a8:ab:ac:4c:9a:29:
cf:6b:5a:e8:a7:ea:62:0b:07:87:72:ab:4b:66:54:
34:a8:c8:48:8b:29:04:88:9e:f0:2e:37:a7:e4:01:
2a:3b:19:2d:56:43:10:e9:fd:48:3e:3a:45:2a:7e:
f8:eb:7d:25:94:04:3c:ac:4b:f7:6d:af:b4:1e:28:
79:00:6e:e6:10:d2:76:28:a5:52:86:66:50:2f:9f:
69:ca:eb:9d:c8:55:87:e1:9c:f1:6e:0e:9a:e1:3d:
5a:32:6f:2a:ba:12:4d:16:93:dd:c4:ef:a8:f3:ab:
57:03:ca:24:ce:25:0f:dd:d5:7c:1c:f7:58:14:ce:
60:e8:fe:ca:e5:52:30:58:ed:7f:fa:b3:98:09:f4:
47:0d:73:64:3b:ba:54:fe:c0:af:fb:23:79:65:c0:
51:51:2e:7b:e4:59:8d:09:ac:b8:50:1a:54:12:e9:
1a:59:f6:81:70:63:e2:ad:57:ea:53:46:ac:99:1d:
92:2d:fd:2d:21:7a:b7:9d:8e:72:e4:70:86:47:17:
f5:b8:ea:9b:54:c3:21:0f:86:27:2f:43:5c:d9:07:
56:68:44:a2:b0:ba:e1:91:b7:a5:d0:26:c4:22:89:
80:01:ba:31:15:bb:67:1d:79:78:82:78:74:b2:e1:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:65:73:FC:1F:6C:F9:79:32:D3:E6:9B:33:CF:AF:A7:BC:76:AB:AA
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/F2Vz_B9s-Xky0-abM8-vp7x2q6o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:1c:cb:7d:f1:e7:63:35:f4:d2:c9:d0:8f:a4:56:4a:74:d0:
8e:95:f7:03:a3:de:0a:8d:dd:81:1f:ad:ad:cf:27:d7:90:78:
de:e4:96:a1:5e:ec:2c:b6:69:21:88:00:80:31:11:ca:80:b5:
3f:71:59:65:9e:4e:94:52:9c:03:2e:52:08:e5:3b:f0:ab:eb:
19:ed:29:cc:66:61:82:df:47:f8:57:05:c3:32:01:8a:6f:94:
7f:09:b5:79:0e:0b:28:06:c1:60:1f:82:3d:69:93:4f:84:9b:
17:0c:d0:19:7f:2d:e3:e3:e0:97:c3:31:c0:03:4b:cc:e5:4a:
f9:c2:27:5a:52:2d:c4:8f:95:f5:5a:c3:e2:33:14:01:80:7d:
01:95:44:b1:33:c5:58:f3:00:6b:80:56:ca:89:db:f6:b4:d1:
6e:9c:57:4f:06:a1:80:0c:8f:18:0f:63:1c:a7:78:2e:e1:e7:
d4:d1:8c:24:f1:50:7e:7d:2a:6a:0e:a6:f2:92:c3:b6:59:a3:
23:a0:bc:d4:8b:9f:f0:99:56:76:c8:e3:53:fe:80:43:56:47:
13:8e:18:59:79:62:d1:ee:64:61:6c:76:39:9c:b0:8b:2d:bd:
d6:ab:7d:ef:58:f1:6f:ef:ce:94:b9:4e:67:5c:5f:dc:5c:88:
17:ff:2e:15
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEvIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDEw
ODA5MjFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDE3NjU3M0ZDMUY2Q0Y5
NzkzMkQzRTY5QjMzQ0ZBRkE3QkM3NkFCQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKYA7zPYH6sairrEyaKc9rWuin6mILB4dyq0tmVDSoyEiLKQSI
nvAuN6fkASo7GS1WQxDp/Ug+OkUqfvjrfSWUBDysS/dtr7QeKHkAbuYQ0nYopVKG
ZlAvn2nK653IVYfhnPFuDprhPVoybyq6Ek0Wk93E76jzq1cDyiTOJQ/d1Xwc91gU
zmDo/srlUjBY7X/6s5gJ9EcNc2Q7ulT+wK/7I3llwFFRLnvkWY0JrLhQGlQS6RpZ
9oFwY+KtV+pTRqyZHZIt/S0heredjnLkcIZHF/W46ptUwyEPhicvQ1zZB1ZoRKKw
uuGRt6XQJsQiiYABujEVu2cdeXiCeHSy4TA5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUF2Vz/B9s+Xky0+abM8+vp7x2q6owHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9GMlZ6X0I5cy1Ya3kwLWFi
TTgtdnA3eDJxNm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAKwcy33x52M19NLJ0I+kVkp00I6V9wOj3gqN
3YEfra3PJ9eQeN7klqFe7Cy2aSGIAIAxEcqAtT9xWWWeTpRSnAMuUgjlO/Cr6xnt
KcxmYYLfR/hXBcMyAYpvlH8JtXkOCygGwWAfgj1pk0+EmxcM0Bl/LePj4JfDMcAD
S8zlSvnCJ1pSLcSPlfVaw+IzFAGAfQGVRLEzxVjzAGuAVsqJ2/a00W6cV08GoYAM
jxgPYxyneC7h59TRjCTxUH59KmoOpvKSw7ZZoyOgvNSLn/CZVnbI41P+gENWRxOO
GFl5YtHuZGFsdjmcsIstvdarfe9Y8W/vzpS5TmdcX9xciBf/LhU=
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:09:56 2025 by rpki-client