Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/jW2PhVMxQpXUjbYWf-INgo3p1jA.roa
File: jW2PhVMxQpXUjbYWf-INgo3p1jA.roa (raw, json)
Hash identifier: P+r8nlDSm8vPWuZTGzPpJo+lf6eUdyW6nnrf9jMQwsE=
Subject key identifier: 8D:6D:8F:85:53:31:42:95:D4:8D:B6:16:7F:E2:0D:82:8D:E9:D6:30
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D4E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jW2PhVMxQpXUjbYWf-INgo3p1jA.roa
Signing time: Sat 24 May 2025 19:38:31 +0000
ROA not before: Sat 24 May 2025 19:38:31 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3406 (0xd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 19:38:31 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=8D6D8F8553314295D48DB6167FE20D828DE9D630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:be:76:93:2b:bb:2c:e1:3d:f2:94:d2:b1:
40:80:a6:28:bb:23:0b:93:33:ba:7f:1e:12:a8:29:
05:46:a1:3a:fc:81:c1:48:a4:d6:0e:1a:8c:13:c3:
5e:ef:4d:d5:54:93:56:9e:fd:6e:24:0e:fb:92:8e:
1f:c3:91:b9:68:d3:12:47:d5:b0:07:bb:85:84:57:
0a:67:b2:04:99:b9:e9:14:14:7b:b6:3b:13:00:0d:
bf:69:bf:03:f7:51:79:00:74:31:8c:6a:e2:f3:3d:
d9:44:73:4f:59:36:0d:a1:9f:9f:20:99:e7:10:78:
c3:ae:75:b0:cd:11:e2:32:c5:6f:fc:cc:bb:09:f6:
4b:3f:79:e9:a7:9d:0d:77:2a:28:2e:ae:ae:52:d8:
b3:ba:9c:8d:e2:2d:5c:cf:30:a0:80:a7:8e:58:8a:
3e:8a:ce:f3:42:0d:34:7a:70:62:69:c4:0d:e7:b8:
a5:bd:40:b4:2a:94:5e:1b:dd:ce:4e:cd:39:a2:a8:
13:01:57:8d:3d:31:31:95:1f:21:af:2f:4f:fe:7b:
38:54:61:16:20:00:4c:36:19:d6:ca:58:fd:0d:ff:
4d:a6:5f:ab:71:7a:66:ac:27:f6:a7:db:c2:58:ba:
94:d2:b6:5d:59:b8:77:a7:f3:af:b0:43:48:1a:87:
60:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6D:8F:85:53:31:42:95:D4:8D:B6:16:7F:E2:0D:82:8D:E9:D6:30
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/jW2PhVMxQpXUjbYWf-INgo3p1jA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5b:69:27:1f:3b:f0:5f:53:28:5f:e8:fa:a6:86:e1:b2:4f:af:
9d:d5:19:4b:5e:0e:db:20:2f:55:b0:dc:a9:88:3c:6a:a7:5b:
63:3d:fc:b5:1a:e3:06:73:bc:e5:b2:06:99:e4:b5:13:f9:d1:
b8:5e:5b:19:f7:e3:05:a3:6d:31:2c:35:2b:d6:71:d9:0c:eb:
c6:14:13:30:48:c3:ad:af:ff:1f:b7:70:69:c7:5c:64:01:f1:
e3:cc:8b:0c:b0:80:b3:63:28:69:56:a4:33:4d:d6:80:2f:f0:
92:51:5c:e8:8a:52:db:5c:ee:e4:19:c9:a3:95:e7:d3:22:a7:
5f:4d:cc:ff:b0:f0:f0:0d:60:2d:9d:59:7e:0a:a4:f5:79:16:
bc:44:5c:ac:2f:fb:4c:22:39:2f:69:76:1f:15:cd:38:22:48:
d5:4f:85:7c:91:b4:f7:9c:ff:a7:48:99:ea:95:a6:0b:37:d7:
e6:0b:f8:76:6a:38:9e:a3:04:1c:49:87:e8:86:57:d7:a2:5d:
b8:53:c0:f1:65:03:89:62:d9:e6:31:5f:fe:3e:b8:e3:f8:aa:
01:e9:55:79:4b:03:c7:e2:26:99:74:48:63:76:96:e5:9d:7d:
ba:d7:6e:13:1d:d9:08:f8:4e:39:56:01:2e:8a:89:57:71:a9:
dc:cb:7f:b7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDU4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjQx
OTM4MzFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDhENkQ4Rjg1NTMzMTQy
OTVENDhEQjYxNjdGRTIwRDgyOERFOUQ2MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqUL52kyu7LOE98pTSsUCApii7IwuTM7p/HhKoKQVGoTr8gcFI
pNYOGowTw17vTdVUk1ae/W4kDvuSjh/Dkblo0xJH1bAHu4WEVwpnsgSZuekUFHu2
OxMADb9pvwP3UXkAdDGMauLzPdlEc09ZNg2hn58gmecQeMOudbDNEeIyxW/8zLsJ
9ks/eemnnQ13Kigurq5S2LO6nI3iLVzPMKCAp45Yij6KzvNCDTR6cGJpxA3nuKW9
QLQqlF4b3c5OzTmiqBMBV409MTGVHyGvL0/+ezhUYRYgAEw2GdbKWP0N/02mX6tx
emasJ/an28JYupTStl1ZuHen86+wQ0gah2CdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUjW2PhVMxQpXUjbYWf+INgo3p1jAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9qVzJQaFZNeFFwWFVqYllX
Zi1JTmdvM3AxakEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAFtpJx878F9TKF/o+qaG4bJPr53VGUteDtsg
L1Ww3KmIPGqnW2M9/LUa4wZzvOWyBpnktRP50bheWxn34wWjbTEsNSvWcdkM68YU
EzBIw62v/x+3cGnHXGQB8ePMiwywgLNjKGlWpDNN1oAv8JJRXOiKUttc7uQZyaOV
59Mip19NzP+w8PANYC2dWX4KpPV5FrxEXKwv+0wiOS9pdh8VzTgiSNVPhXyRtPec
/6dImeqVpgs31+YL+HZqOJ6jBBxJh+iGV9eiXbhTwPFlA4li2eYxX/4+uOP4qgHp
VXlLA8fiJpl0SGN2luWdfbrXbhMd2Qj4TjlWAS6KiVdxqdzLf7c=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:55:49 2025 by rpki-client