Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/GHF-HgaFU7_n8QkgLXjhZbKyUV8.roa
File: GHF-HgaFU7_n8QkgLXjhZbKyUV8.roa (raw, json)
Hash identifier: oWpk4EQSVG4Aw310QiHPrmW8W0FMXo114ArP7JksOQU=
Subject key identifier: 18:71:7E:1E:06:85:53:BF:E7:F1:09:20:2D:78:E1:65:B2:B2:51:5F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0DDA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GHF-HgaFU7_n8QkgLXjhZbKyUV8.roa
Signing time: Sun 25 May 2025 13:08:34 +0000
ROA not before: Sun 25 May 2025 13:08:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3546 (0xdda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 25 13:08:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=18717E1E068553BFE7F109202D78E165B2B2515F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:2f:a2:59:e1:69:bc:c5:a4:bc:5b:0f:94:
45:dd:98:1c:e4:6d:e1:38:58:af:82:c4:23:44:46:
f9:97:b1:7b:2e:89:70:df:32:ca:e7:af:68:f3:c7:
15:64:4e:43:49:02:b9:14:92:01:44:f6:cc:34:2c:
4b:c5:03:4c:56:cc:8a:a4:ae:b2:d0:82:33:12:d4:
38:da:1c:cb:cf:a0:4f:0d:11:4d:d9:22:86:7b:30:
be:34:8b:23:9c:c7:66:b5:c3:47:74:14:00:93:71:
20:90:08:34:0d:71:11:22:4a:dd:a0:39:94:6d:86:
ca:3a:b0:9f:78:98:d3:56:be:0a:79:fb:7c:a5:9b:
d0:3c:74:7f:9c:e0:f8:c8:01:43:87:77:7b:a6:73:
6e:61:a2:cf:76:c5:65:89:4e:d0:cd:77:17:68:5d:
fc:9f:fc:03:8e:9a:b0:ab:ac:38:54:50:de:3b:0f:
ec:bf:f9:4b:e4:2f:d0:44:07:ef:21:0d:0c:6b:c1:
1d:d1:c6:3a:0a:1e:4b:55:95:0f:3c:ab:07:fb:40:
82:51:1b:cf:21:dc:f0:f7:d7:2d:d5:3c:46:e0:90:
b4:45:f3:b9:75:c4:3b:04:16:4f:01:1f:42:6a:83:
e9:b4:f1:f5:6d:ed:e3:e3:f4:55:5c:82:97:14:20:
86:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:71:7E:1E:06:85:53:BF:E7:F1:09:20:2D:78:E1:65:B2:B2:51:5F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/GHF-HgaFU7_n8QkgLXjhZbKyUV8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
54:34:e0:de:32:8b:77:78:7e:6b:52:c9:6a:dc:ac:db:19:e2:
a2:38:21:86:b7:c5:95:44:fd:32:39:29:e8:43:ba:1e:fa:67:
5d:2a:35:69:ac:af:b9:00:20:bf:4d:12:2f:d3:61:78:9a:49:
97:e5:1d:a3:a8:c8:2d:d9:f5:f4:39:e4:25:e2:8e:04:48:14:
c9:ac:80:72:76:89:80:7a:26:00:ce:91:1f:12:8f:eb:34:56:
11:0b:08:14:91:67:16:15:f8:eb:42:65:d5:c8:a2:90:2b:21:
e6:8c:d7:a4:40:bc:30:d6:63:08:c6:5a:7a:fd:af:44:c8:7a:
c2:34:44:03:c0:84:6d:c8:b9:f0:86:83:f1:4a:f5:91:66:4c:
aa:62:0a:ec:75:e4:e0:aa:a7:51:fb:3f:ce:76:35:26:05:c0:
da:64:6c:b8:3f:50:53:87:81:14:3d:07:52:89:37:b2:94:4d:
7a:f0:b6:67:b5:a6:f9:20:32:fb:6c:a4:6d:66:b6:3a:db:33:
22:6c:c2:cd:af:07:00:d9:99:e8:a2:60:a2:36:f0:47:94:2d:
15:cc:0b:91:bf:b7:f6:35:1f:54:6d:51:3e:91:2e:cc:ad:14:
f2:2e:40:ca:3b:40:7a:8e:eb:96:b2:8a:c6:52:b9:c9:0e:1e:
d0:63:88:86
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjUx
MzA4MzRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDE4NzE3RTFFMDY4NTUz
QkZFN0YxMDkyMDJENzhFMTY1QjJCMjUxNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHii+iWeFpvMWkvFsPlEXdmBzkbeE4WK+CxCNERvmXsXsuiXDf
Msrnr2jzxxVkTkNJArkUkgFE9sw0LEvFA0xWzIqkrrLQgjMS1DjaHMvPoE8NEU3Z
IoZ7ML40iyOcx2a1w0d0FACTcSCQCDQNcREiSt2gOZRthso6sJ94mNNWvgp5+3yl
m9A8dH+c4PjIAUOHd3umc25hos92xWWJTtDNdxdoXfyf/AOOmrCrrDhUUN47D+y/
+UvkL9BEB+8hDQxrwR3RxjoKHktVlQ88qwf7QIJRG88h3PD31y3VPEbgkLRF87l1
xDsEFk8BH0Jqg+m08fVt7ePj9FVcgpcUIIbxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUGHF+HgaFU7/n8QkgLXjhZbKyUV8wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9HSEYtSGdhRlU3X244UWtn
TFhqaFpiS3lVVjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAFQ04N4yi3d4fmtSyWrcrNsZ4qI4IYa3xZVE
/TI5KehDuh76Z10qNWmsr7kAIL9NEi/TYXiaSZflHaOoyC3Z9fQ55CXijgRIFMms
gHJ2iYB6JgDOkR8Sj+s0VhELCBSRZxYV+OtCZdXIopArIeaM16RAvDDWYwjGWnr9
r0TIesI0RAPAhG3IufCGg/FK9ZFmTKpiCux15OCqp1H7P852NSYFwNpkbLg/UFOH
gRQ9B1KJN7KUTXrwtme1pvkgMvtspG1mtjrbMyJsws2vBwDZmeiiYKI28EeULRXM
C5G/t/Y1H1RtUT6RLsytFPIuQMo7QHqO65ayisZSuckOHtBjiIY=
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:00:35 2025 by rpki-client