Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/aA9oiuf-ir4XHwekBnK5oyWqICA.roa
File: aA9oiuf-ir4XHwekBnK5oyWqICA.roa (raw, json)
Hash identifier: D/NNiBFTiHsHkaBtGMtjYvsgzOG0XnkVglgZpbWbwck=
Subject key identifier: 68:0F:68:8A:E7:FE:8A:BE:17:1F:07:A4:06:72:B9:A3:25:AA:20:20
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1E62
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aA9oiuf-ir4XHwekBnK5oyWqICA.roa
Signing time: Mon 16 Jun 2025 14:10:05 +0000
ROA not before: Mon 16 Jun 2025 14:10:05 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7778 (0x1e62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 14:10:05 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=680F688AE7FE8ABE171F07A40672B9A325AA2020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:95:b4:21:f1:da:99:1c:c1:4b:11:2b:fe:
61:14:c5:de:a2:06:4a:b6:bf:97:71:38:c4:66:ff:
f3:d0:bc:40:29:0b:0b:27:19:33:49:b2:99:0c:12:
1e:14:c6:c2:00:5c:aa:bd:32:ca:f7:74:29:c7:f3:
85:60:1e:63:e4:2b:7c:a0:56:cb:f2:06:a7:aa:59:
c9:55:c7:24:fd:ca:1a:41:98:9c:f3:c2:73:65:18:
54:78:b0:ef:9f:51:21:ef:cb:83:d2:d4:e7:11:80:
26:16:3f:f6:ab:a7:f3:be:33:32:d9:3b:c9:6a:8e:
4d:af:4f:6c:98:50:66:e7:8d:9c:8b:ce:dc:30:54:
ef:26:f3:1c:27:79:d0:9e:f5:e3:35:6a:7a:ae:ab:
6e:a5:e6:a2:b8:55:5c:5a:89:e9:36:51:51:5e:ab:
7b:27:a5:a1:32:ef:e1:84:28:33:d6:11:1e:f3:5c:
2b:02:87:2b:3d:b2:71:53:9f:74:ae:77:59:5c:54:
de:83:ea:ea:f4:3e:36:88:5b:ee:7d:34:3e:bf:7e:
ca:1e:83:e0:d4:d7:35:f5:c1:4f:59:fd:73:49:d1:
c7:2f:11:53:86:c7:c1:f4:f5:9f:59:c8:05:20:8d:
db:45:87:9c:8e:df:0d:fd:20:fe:df:d6:e1:be:8e:
77:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0F:68:8A:E7:FE:8A:BE:17:1F:07:A4:06:72:B9:A3:25:AA:20:20
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/aA9oiuf-ir4XHwekBnK5oyWqICA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:ff:14:c5:a1:c4:eb:0e:10:ea:34:10:5b:38:c3:2f:ec:c5:
dc:7f:74:e4:19:10:ca:6b:5d:c2:0c:db:a1:89:02:d5:35:57:
51:b1:4f:e9:c6:f3:42:b8:a8:c9:3e:d0:32:5a:3b:4b:ef:71:
72:5f:ae:c7:53:2a:ed:b8:8d:e5:bc:b4:22:64:99:70:d1:99:
b1:96:1d:e4:f9:6d:44:3a:2f:83:99:db:ad:a3:bf:a0:14:45:
a4:52:1a:20:d8:39:db:bc:8f:71:ce:d1:4e:7c:fa:6d:63:83:
11:5c:60:55:8a:56:ed:7c:df:c1:7a:f1:9f:bf:25:2b:82:07:
27:06:23:f8:a8:2e:ca:55:c4:5a:e6:6a:5d:fe:2a:c8:81:47:
43:12:ae:37:6e:a9:3b:86:02:73:81:1a:cf:8f:c0:fb:b7:df:
80:9d:0e:4c:a8:9a:19:04:e7:25:9b:1f:dd:e8:84:82:64:d5:
ea:06:7c:7d:49:61:a2:6f:b5:24:6f:3a:60:d4:2a:c8:cd:2d:
73:01:50:a7:24:d4:fb:8c:f5:87:33:5c:74:76:c6:ec:f4:6d:
ed:e0:2d:c7:38:34:11:b1:18:51:c5:1e:25:da:ec:fc:24:61:
72:42:ef:48:a3:06:6b:6f:62:2e:ff:ca:9d:68:e0:f8:92:99:
57:cb:c6:9f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTYx
NDEwMDVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDY4MEY2ODhBRTdGRThB
QkUxNzFGMDdBNDA2NzJCOUEzMjVBQTIwMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpwZW0IfHamRzBSxEr/mEUxd6iBkq2v5dxOMRm//PQvEApCwsn
GTNJspkMEh4UxsIAXKq9Msr3dCnH84VgHmPkK3ygVsvyBqeqWclVxyT9yhpBmJzz
wnNlGFR4sO+fUSHvy4PS1OcRgCYWP/arp/O+MzLZO8lqjk2vT2yYUGbnjZyLztww
VO8m8xwnedCe9eM1anquq26l5qK4VVxaiek2UVFeq3snpaEy7+GEKDPWER7zXCsC
hys9snFTn3Sud1lcVN6D6ur0PjaIW+59ND6/fsoeg+DU1zX1wU9Z/XNJ0ccvEVOG
x8H09Z9ZyAUgjdtFh5yO3w39IP7f1uG+jndtAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUaA9oiuf+ir4XHwekBnK5oyWqICAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9hQTlvaXVmLWlyNFhId2Vr
Qm5LNW95V3FJQ0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAFr/FMWhxOsOEOo0EFs4wy/sxdx/dOQZEMpr
XcIM26GJAtU1V1GxT+nG80K4qMk+0DJaO0vvcXJfrsdTKu24jeW8tCJkmXDRmbGW
HeT5bUQ6L4OZ262jv6AURaRSGiDYOdu8j3HO0U58+m1jgxFcYFWKVu1838F68Z+/
JSuCBycGI/ioLspVxFrmal3+KsiBR0MSrjduqTuGAnOBGs+PwPu334CdDkyomhkE
5yWbH93ohIJk1eoGfH1JYaJvtSRvOmDUKsjNLXMBUKck1PuM9YczXHR2xuz0be3g
Lcc4NBGxGFHFHiXa7PwkYXJC70ijBmtvYi7/yp1o4PiSmVfLxp8=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:45:48 2025 by rpki-client