Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/cN8g93T80mDpghsVc73nYp2wv6g.roa
File: cN8g93T80mDpghsVc73nYp2wv6g.roa (raw, json)
Hash identifier: XK5fAghOsnH0/inaC/nMC06yJmW95ZYD3dALkdQIpLQ=
Subject key identifier: 70:DF:20:F7:74:FC:D2:60:E9:82:1B:15:73:BD:E7:62:9D:B0:BF:A8
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0B92
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cN8g93T80mDpghsVc73nYp2wv6g.roa
Signing time: Thu 22 May 2025 12:08:25 +0000
ROA not before: Thu 22 May 2025 12:08:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2962 (0xb92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 22 12:08:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=70DF20F774FCD260E9821B1573BDE7629DB0BFA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:71:e2:80:fd:5d:51:fb:be:4c:a3:f6:63:05:
0a:1b:3a:56:be:b7:b2:fb:08:2b:3e:74:f1:b4:1d:
53:a8:ed:61:1d:94:d1:cc:b8:24:d2:c5:ee:a3:44:
8a:71:cf:a4:37:38:0f:8d:b4:5e:40:81:70:28:ed:
6b:20:29:b6:aa:91:51:bb:44:f9:68:9f:dd:58:d0:
c4:6a:a0:3f:6b:91:eb:db:04:80:56:bf:e2:dc:30:
eb:e1:f2:f1:01:9b:58:52:04:bc:75:dc:59:6e:8b:
3d:10:1b:e6:42:f4:b1:00:52:20:cb:a7:e5:ed:91:
5e:e9:a5:74:f6:c4:42:93:cd:ff:f4:9b:c9:9c:18:
ac:bf:45:f4:a6:59:ce:26:ee:5e:3e:d3:83:2c:87:
15:d4:2f:a0:f2:23:7d:64:4c:90:71:17:15:8f:b4:
2e:16:c5:e1:15:d9:70:5a:06:54:44:5b:09:c6:33:
ee:f6:c3:61:69:e1:3f:fa:c7:5f:5c:ac:3a:2a:30:
d0:10:4c:68:b2:76:3a:7c:e2:b2:47:84:89:87:3a:
13:32:5d:8c:00:cd:b4:91:99:06:32:4d:2b:e4:5c:
fb:f7:73:f6:bd:90:23:c0:1a:e2:1d:05:e5:05:89:
51:7b:d6:eb:ec:55:6d:b7:70:9d:48:2a:13:22:9c:
a2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DF:20:F7:74:FC:D2:60:E9:82:1B:15:73:BD:E7:62:9D:B0:BF:A8
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cN8g93T80mDpghsVc73nYp2wv6g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:be:0a:3a:25:7c:26:aa:a0:39:16:2a:74:00:85:89:b3:c1:
c9:7e:df:93:ca:51:ec:36:48:f1:b0:b0:4b:0c:29:0a:a4:ec:
2a:cb:9d:ff:8b:ae:26:95:88:e1:d9:b5:83:bc:c4:52:9d:5a:
0c:94:e5:d4:93:ec:88:e8:8d:ae:92:2c:36:38:c6:a1:50:8d:
49:ab:e6:d4:60:f7:af:51:3f:47:df:2d:51:18:66:bc:f4:f7:
dd:da:41:3a:14:e3:0e:bd:f6:7a:1e:3c:2b:d0:65:38:a0:dc:
56:38:5f:a6:c7:a2:b5:a7:ec:5a:0a:32:e2:f1:f3:ad:c7:03:
f4:51:bc:0b:d0:3e:d9:56:b2:4b:2b:2c:55:dc:cd:28:14:2f:
d5:d2:47:e6:c8:90:a7:e3:2d:7a:a9:70:3b:2e:46:4f:62:2e:
af:06:09:39:cb:06:1e:f6:38:8c:e8:c5:5a:89:a7:c7:8c:f8:
e7:43:13:c2:56:8f:24:fb:a7:ac:2a:d0:e1:10:b0:27:d2:f3:
ad:ce:8a:e9:e4:65:1d:57:4e:ff:31:55:ef:99:2a:6d:2a:dd:
8e:63:2a:52:bd:65:f2:32:0b:c7:98:19:d4:ed:ca:a3:50:11:
20:f0:27:7c:0d:e9:3b:7f:b8:f3:d5:52:5f:51:82:36:b3:08:
1e:24:64:b3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC5IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjIx
MjA4MjVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDcwREYyMEY3NzRGQ0Qy
NjBFOTgyMUIxNTczQkRFNzYyOURCMEJGQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnceKA/V1R+75Mo/ZjBQobOla+t7L7CCs+dPG0HVOo7WEdlNHM
uCTSxe6jRIpxz6Q3OA+NtF5AgXAo7WsgKbaqkVG7RPlon91Y0MRqoD9rkevbBIBW
v+LcMOvh8vEBm1hSBLx13Fluiz0QG+ZC9LEAUiDLp+XtkV7ppXT2xEKTzf/0m8mc
GKy/RfSmWc4m7l4+04MshxXUL6DyI31kTJBxFxWPtC4WxeEV2XBaBlREWwnGM+72
w2Fp4T/6x19crDoqMNAQTGiydjp84rJHhImHOhMyXYwAzbSRmQYyTSvkXPv3c/a9
kCPAGuIdBeUFiVF71uvsVW23cJ1IKhMinKKnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUcN8g93T80mDpghsVc73nYp2wv6gwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9jTjhnOTNUODBtRHBnaHNW
YzczbllwMnd2Nmcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAIe+CjolfCaqoDkWKnQAhYmzwcl+35PKUew2
SPGwsEsMKQqk7CrLnf+LriaViOHZtYO8xFKdWgyU5dST7Ijoja6SLDY4xqFQjUmr
5tRg969RP0ffLVEYZrz0993aQToU4w699noePCvQZTig3FY4X6bHorWn7FoKMuLx
863HA/RRvAvQPtlWsksrLFXczSgUL9XSR+bIkKfjLXqpcDsuRk9iLq8GCTnLBh72
OIzoxVqJp8eM+OdDE8JWjyT7p6wq0OEQsCfS863OiunkZR1XTv8xVe+ZKm0q3Y5j
KlK9ZfIyC8eYGdTtyqNQESDwJ3wN6Tt/uPPVUl9RgjazCB4kZLM=
-----END CERTIFICATE-----
Generated at Wed Jun 4 02:32:11 2025 by rpki-client