Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ZJi8vvkeFoqH9cgvCYqLe9rrUag.roa
File: ZJi8vvkeFoqH9cgvCYqLe9rrUag.roa (raw, json)
Hash identifier: C03mZbUEp6awlVz5Bh7FP8rfET1JjRF+nJSRXOjGfqM=
Subject key identifier: 64:98:BC:BE:F9:1E:16:8A:87:F5:C8:2F:09:8A:8B:7B:DA:EB:51:A8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1FAE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZJi8vvkeFoqH9cgvCYqLe9rrUag.roa
Signing time: Wed 18 Jun 2025 07:40:05 +0000
ROA not before: Wed 18 Jun 2025 07:40:05 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8110 (0x1fae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 18 07:40:05 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6498BCBEF91E168A87F5C82F098A8B7BDAEB51A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:fc:30:cf:6d:78:ab:88:37:05:61:7e:fe:
6d:36:1d:62:f7:4a:ca:46:c5:c3:b9:d3:cb:5a:9b:
f8:ac:e0:0b:8e:2f:24:54:b3:64:5d:f2:9e:a4:46:
fd:a7:c2:76:14:39:44:c9:fe:bf:06:ac:31:be:36:
bc:2c:88:6b:bd:a1:c9:96:3f:d1:91:35:33:a0:bd:
64:13:a6:68:b8:80:1b:f2:50:c0:31:3d:26:fb:6e:
6f:c2:d4:b3:9f:99:70:1c:c8:d6:ee:25:d3:4b:d7:
98:60:5a:ba:ae:6f:ac:dd:78:77:2d:94:9f:2f:05:
3b:ee:22:05:be:ee:b2:45:63:01:42:05:7e:20:0e:
ba:eb:f7:72:53:e0:8f:4a:9f:df:87:5c:30:98:71:
d9:1b:47:3b:6d:ab:c7:49:51:b4:1e:c7:20:8c:e9:
29:c2:4f:3c:4a:a1:50:67:a2:93:52:0a:9b:8d:f7:
07:9d:46:d7:20:87:2b:c6:71:71:b2:b1:61:2d:d6:
d9:27:3f:41:3f:8e:5b:b2:06:25:ee:48:8e:01:7d:
59:7a:22:97:9b:01:14:55:04:2e:f7:6b:ac:e7:de:
64:89:31:3a:55:d6:63:55:1b:99:79:8e:05:0b:e6:
f4:f0:76:d0:98:ad:eb:0e:f9:03:ae:b5:3f:66:80:
e9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:98:BC:BE:F9:1E:16:8A:87:F5:C8:2F:09:8A:8B:7B:DA:EB:51:A8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZJi8vvkeFoqH9cgvCYqLe9rrUag.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:2a:8f:12:71:21:2b:8a:f9:11:a9:75:a1:e7:d4:d2:28:6a:
7b:1f:13:4f:d1:45:8d:3b:f0:27:3b:4a:0c:61:03:60:07:d7:
d4:97:b4:80:0c:39:76:ed:ac:ff:b1:c1:fc:11:a4:e4:ef:5c:
d6:bf:46:df:08:6b:b8:ff:6e:09:08:11:a8:bd:76:42:5b:7e:
19:26:d7:81:95:5a:ca:ab:9c:50:b5:74:5b:b8:b0:72:44:4d:
70:03:68:4f:86:11:dd:54:4f:bb:fe:a3:b6:db:7b:ff:52:79:
cf:b9:b9:9b:d8:31:cc:90:77:07:8d:c5:f0:1e:05:d1:96:88:
7b:b7:cf:e5:bb:ca:bf:b3:56:c7:7e:c1:4e:15:62:3d:34:4c:
a7:14:9a:53:29:e5:50:5a:ae:02:31:b9:d6:f2:6c:93:91:81:
b1:03:5e:41:1f:27:88:41:c2:5d:84:bf:de:b4:9a:6e:f2:4c:
bc:b0:ee:31:7b:56:78:29:bb:2b:ee:bb:23:29:0c:16:cb:f4:
51:f7:5a:19:e1:14:34:27:67:84:de:cb:1f:84:1d:5f:33:fe:
86:ac:fb:b5:15:4b:91:02:7b:f3:01:9b:9c:d6:b1:a9:47:24:
a0:fe:ea:23:33:d5:95:c8:da:bf:51:34:1e:b2:ef:14:c2:88:
d1:6f:91:ce
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH64wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTgw
NzQwMDVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDY0OThCQ0JFRjkxRTE2
OEE4N0Y1QzgyRjA5OEE4QjdCREFFQjUxQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCysfwwz214q4g3BWF+/m02HWL3SspGxcO508tam/is4AuOLyRU
s2Rd8p6kRv2nwnYUOUTJ/r8GrDG+NrwsiGu9ocmWP9GRNTOgvWQTpmi4gBvyUMAx
PSb7bm/C1LOfmXAcyNbuJdNL15hgWrqub6zdeHctlJ8vBTvuIgW+7rJFYwFCBX4g
Drrr93JT4I9Kn9+HXDCYcdkbRzttq8dJUbQexyCM6SnCTzxKoVBnopNSCpuN9wed
RtcghyvGcXGysWEt1tknP0E/jluyBiXuSI4BfVl6IpebARRVBC73a6zn3mSJMTpV
1mNVG5l5jgUL5vTwdtCYresO+QOutT9mgOkvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUZJi8vvkeFoqH9cgvCYqLe9rrUagwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9aSmk4dnZrZUZvcUg5Y2d2
Q1lxTGU5cnJVYWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAF8qjxJxISuK+RGpdaHn1NIoansfE0/RRY07
8Cc7SgxhA2AH19SXtIAMOXbtrP+xwfwRpOTvXNa/Rt8Ia7j/bgkIEai9dkJbfhkm
14GVWsqrnFC1dFu4sHJETXADaE+GEd1UT7v+o7bbe/9Sec+5uZvYMcyQdweNxfAe
BdGWiHu3z+W7yr+zVsd+wU4VYj00TKcUmlMp5VBargIxudbybJORgbEDXkEfJ4hB
wl2Ev960mm7yTLyw7jF7VngpuyvuuyMpDBbL9FH3WhnhFDQnZ4Teyx+EHV8z/oas
+7UVS5ECe/MBm5zWsalHJKD+6iMz1ZXI2r9RNB6y7xTCiNFvkc4=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:51:41 2025 by rpki-client