Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/KSKee2JJCgCPBOeot26DmxTTQwA.roa
File: KSKee2JJCgCPBOeot26DmxTTQwA.roa (raw, json)
Hash identifier: HJ1FfQ/XSF4DDTY4tvOdJrG3vjoQrl22505iTQ5Wp0c=
Subject key identifier: 29:22:9E:7B:62:49:0A:00:8F:04:E7:A8:B7:6E:83:9B:14:D3:43:00
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 20C2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KSKee2JJCgCPBOeot26DmxTTQwA.roa
Signing time: Fri 20 Jun 2025 04:39:50 +0000
ROA not before: Fri 20 Jun 2025 04:39:50 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8386 (0x20c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 20 04:39:50 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=29229E7B62490A008F04E7A8B76E839B14D34300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:a8:6b:4e:52:bc:23:31:ba:f2:35:c7:50:
2c:d1:f5:64:4a:da:73:dd:06:b1:a7:30:a6:23:e1:
17:56:ed:9b:04:76:b5:be:28:6c:73:af:02:3e:8a:
29:55:af:dd:1a:44:12:57:67:26:2f:7c:b7:82:5a:
55:e9:3e:88:ec:f9:0d:97:34:69:d1:69:62:0e:0a:
81:d4:07:98:0d:e4:fa:16:af:9a:52:ec:d5:93:6e:
72:7d:a0:9b:10:9e:32:4e:01:38:e9:85:c9:34:03:
df:9e:c4:d4:c2:97:f0:9d:c0:cf:1a:74:43:a4:d1:
d1:13:4a:83:44:df:92:cd:11:d8:05:14:03:87:9c:
46:e8:f9:5f:7c:a2:43:8c:e5:e4:2c:eb:f7:ae:e8:
89:28:9c:31:26:ce:5e:91:bd:5d:82:35:12:35:de:
f8:9b:e8:fa:bd:62:c2:9a:e9:a5:7e:af:31:e0:75:
16:b3:ee:93:ad:e5:74:ea:ca:3c:0a:4c:00:e1:19:
e2:fc:2f:d9:7c:62:04:e8:ff:f4:9a:cb:c7:f1:ef:
d5:da:c9:09:35:6b:80:27:81:65:a6:21:f9:96:ed:
20:ec:6c:c1:f3:ef:dc:39:cd:28:7a:5d:70:1c:bb:
6d:5d:03:9d:53:a1:ae:ae:79:12:b7:5b:53:91:ad:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:22:9E:7B:62:49:0A:00:8F:04:E7:A8:B7:6E:83:9B:14:D3:43:00
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KSKee2JJCgCPBOeot26DmxTTQwA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:45:bd:b9:b5:60:a4:5e:f3:7d:7d:3f:55:09:70:79:00:e1:
41:4b:19:58:83:43:5a:80:bf:06:58:e6:66:c7:94:df:de:89:
a7:dc:d8:eb:d5:43:24:bb:62:eb:ac:1f:ec:46:05:0b:90:cf:
a1:74:ee:d2:38:ef:8b:fb:70:a3:d7:85:4f:83:2b:6a:df:49:
a6:fb:42:89:e0:9a:80:f1:7a:99:8a:a4:36:bb:74:42:30:8d:
a1:d8:1b:2c:29:40:30:af:ba:5e:43:b9:a9:c6:4a:8c:6f:d4:
df:f7:b6:5e:80:b1:e6:9c:0f:7c:55:40:08:e5:a3:21:60:fa:
51:f8:dd:85:a2:8d:cc:53:58:fb:1e:63:3b:b8:9f:06:05:e5:
46:53:26:47:07:4f:c9:d9:3a:2d:37:b5:cc:e4:94:40:bc:8f:
67:0b:91:09:8b:d0:b9:8d:ce:7a:5b:d2:01:83:2f:1a:54:fc:
48:90:f4:80:b0:4e:fa:50:84:5f:11:96:82:44:8d:f3:c8:41:
9f:c9:39:ab:e9:dc:9e:a0:40:17:24:c4:e7:5e:7a:e0:4b:0c:
7d:95:c8:25:a1:a9:1e:29:32:ee:ce:16:04:23:63:19:24:01:
fc:1c:df:d0:1f:14:fd:01:5f:ce:07:32:3e:ae:86:b2:35:e7:
49:4a:f7:b5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MjAw
NDM5NTBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDI5MjI5RTdCNjI0OTBB
MDA4RjA0RTdBOEI3NkU4MzlCMTREMzQzMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqrahrTlK8IzG68jXHUCzR9WRK2nPdBrGnMKYj4RdW7ZsEdrW+
KGxzrwI+iilVr90aRBJXZyYvfLeCWlXpPojs+Q2XNGnRaWIOCoHUB5gN5PoWr5pS
7NWTbnJ9oJsQnjJOATjphck0A9+exNTCl/CdwM8adEOk0dETSoNE35LNEdgFFAOH
nEbo+V98okOM5eQs6/eu6IkonDEmzl6RvV2CNRI13vib6Pq9YsKa6aV+rzHgdRaz
7pOt5XTqyjwKTADhGeL8L9l8YgTo//Say8fx79XayQk1a4AngWWmIfmW7SDsbMHz
79w5zSh6XXAcu21dA51Toa6ueRK3W1ORrSClAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKSKee2JJCgCPBOeot26DmxTTQwAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9LU0tlZTJKSkNnQ1BCT2Vv
dDI2RG14VFRRd0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAFNFvbm1YKRe8319P1UJcHkA4UFLGViDQ1qA
vwZY5mbHlN/eiafc2OvVQyS7YuusH+xGBQuQz6F07tI474v7cKPXhU+DK2rfSab7
QongmoDxepmKpDa7dEIwjaHYGywpQDCvul5DuanGSoxv1N/3tl6AseacD3xVQAjl
oyFg+lH43YWijcxTWPseYzu4nwYF5UZTJkcHT8nZOi03tczklEC8j2cLkQmL0LmN
znpb0gGDLxpU/EiQ9ICwTvpQhF8RloJEjfPIQZ/JOavp3J6gQBckxOdeeuBLDH2V
yCWhqR4pMu7OFgQjYxkkAfwc39AfFP0BX84HMj6uhrI150lK97U=
-----END CERTIFICATE-----
Generated at Mon Jul 21 03:00:56 2025 by rpki-client