Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/l87GHwWlCAwIxgUYa1xrwEUaeaM.roa
File: l87GHwWlCAwIxgUYa1xrwEUaeaM.roa (raw, json)
Hash identifier: 0O/pbmpF0kuCevzwWEuBuDWn3y5w7a5ND/x8TvLquXs=
Subject key identifier: 97:CE:C6:1F:05:A5:08:0C:08:C6:05:18:6B:5C:6B:C0:45:1A:79:A3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 2372
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/l87GHwWlCAwIxgUYa1xrwEUaeaM.roa
Signing time: Mon 23 Jun 2025 19:41:56 +0000
ROA not before: Mon 23 Jun 2025 19:41:56 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9074 (0x2372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 23 19:41:56 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=97CEC61F05A5080C08C605186B5C6BC0451A79A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:51:e0:d3:b4:88:95:b0:1f:6e:57:bc:99:29:
8b:0f:18:c6:df:51:ac:03:b0:ee:11:fd:23:c4:e8:
00:41:07:6a:ab:c9:e5:6d:1e:b5:54:b8:e2:0a:49:
2d:a9:86:75:38:aa:c9:42:e9:f5:cf:06:49:19:a3:
e1:9d:d3:2a:9a:91:a8:50:5a:e8:f7:3c:63:33:86:
7f:f2:e3:e3:58:f2:a0:e5:45:29:e0:d2:99:91:7f:
f2:bb:a3:62:22:68:dc:b4:3a:db:3a:5f:ec:a3:f9:
a2:2f:1b:ec:b4:fe:ec:9a:5c:1a:b7:6d:cf:c9:2f:
d8:1e:ca:ea:c0:14:0d:f0:4e:6b:50:60:5a:0a:89:
e3:f1:98:ee:05:a0:97:4f:9f:4e:25:c1:27:9a:6b:
16:cd:cc:c4:8b:ad:10:e2:e4:4a:13:16:f6:20:19:
93:c2:2b:2a:60:bc:0d:1c:da:80:69:ed:24:20:52:
31:96:59:81:f4:d0:9c:02:b9:73:08:11:e0:44:1e:
bd:6f:9a:28:1b:ac:ae:06:ca:1d:73:4b:0f:6e:d8:
f3:0a:48:05:56:c3:8f:98:d9:96:d7:eb:6c:1e:e0:
31:63:90:62:2e:3a:25:b8:a0:36:3f:03:d6:a2:de:
b3:9a:ac:b0:62:7d:74:65:f0:52:29:a4:74:61:42:
cb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CE:C6:1F:05:A5:08:0C:08:C6:05:18:6B:5C:6B:C0:45:1A:79:A3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/l87GHwWlCAwIxgUYa1xrwEUaeaM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:85:2e:69:83:c8:cd:73:2d:af:00:02:20:c3:a0:79:62:2b:
cf:b4:a2:a1:de:ab:1d:33:f8:4a:c8:3f:12:3c:58:81:76:37:
e7:43:da:69:ff:f2:00:47:31:43:1b:44:f0:9f:b1:c8:8a:b5:
1c:e4:6e:68:78:bf:de:d9:70:9c:d1:d6:d9:6b:49:bc:52:dd:
10:1f:17:a4:b6:f7:ed:30:dd:fe:f7:3f:fa:0f:3c:67:f9:fe:
16:94:26:bb:74:77:1c:8d:e7:67:37:9c:92:a7:b2:4f:f4:9c:
66:ca:9e:db:c5:7b:62:06:7f:08:f0:2b:13:55:cc:8d:db:64:
33:c3:90:8d:a2:74:07:81:44:92:e1:ba:39:38:c9:46:a1:42:
14:9e:3c:b4:43:d1:5c:e9:47:1f:9d:4b:9c:3a:30:b1:1c:bf:
78:2a:3a:be:b9:cc:53:71:a1:a7:76:56:cc:8a:c3:02:25:08:
c7:59:54:d7:b0:2e:50:07:44:51:18:9e:b5:24:ed:af:64:e0:
86:fb:ed:31:3b:a7:76:3d:9d:00:6f:77:24:43:8f:6b:ad:a2:
04:18:1c:fb:ac:93:e1:fd:4c:2c:6b:87:e9:3e:c5:1c:73:6b:
9e:1a:ec:a9:28:5e:fd:aa:c8:89:86:86:7b:ff:17:13:14:f0:
46:7d:a2:96
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICI3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MjMx
OTQxNTZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDk3Q0VDNjFGMDVBNTA4
MEMwOEM2MDUxODZCNUM2QkMwNDUxQTc5QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD2UeDTtIiVsB9uV7yZKYsPGMbfUawDsO4R/SPE6ABBB2qryeVt
HrVUuOIKSS2phnU4qslC6fXPBkkZo+Gd0yqakahQWuj3PGMzhn/y4+NY8qDlRSng
0pmRf/K7o2IiaNy0Ots6X+yj+aIvG+y0/uyaXBq3bc/JL9geyurAFA3wTmtQYFoK
iePxmO4FoJdPn04lwSeaaxbNzMSLrRDi5EoTFvYgGZPCKypgvA0c2oBp7SQgUjGW
WYH00JwCuXMIEeBEHr1vmigbrK4Gyh1zSw9u2PMKSAVWw4+Y2ZbX62we4DFjkGIu
OiW4oDY/A9ai3rOarLBifXRl8FIppHRhQstZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUl87GHwWlCAwIxgUYa1xrwEUaeaMwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9sODdHSHdXbENBd0l4Z1VZ
YTF4cndFVWFlYU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAJ+FLmmDyM1zLa8AAiDDoHliK8+0oqHeqx0z
+ErIPxI8WIF2N+dD2mn/8gBHMUMbRPCfsciKtRzkbmh4v97ZcJzR1tlrSbxS3RAf
F6S29+0w3f73P/oPPGf5/haUJrt0dxyN52c3nJKnsk/0nGbKntvFe2IGfwjwKxNV
zI3bZDPDkI2idAeBRJLhujk4yUahQhSePLRD0VzpRx+dS5w6MLEcv3gqOr65zFNx
oad2VsyKwwIlCMdZVNewLlAHRFEYnrUk7a9k4Ib77TE7p3Y9nQBvdyRDj2utogQY
HPusk+H9TCxrh+k+xRxza54a7KkoXv2qyImGhnv/FxMU8EZ9opY=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:42:08 2025 by rpki-client