Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mWJ_fLlDtwnugsy4UANIidVIst8.roa
File: mWJ_fLlDtwnugsy4UANIidVIst8.roa (raw, json)
Hash identifier: 8rN7VbcU+pyzlRYasSbr0PWu3vssogx8/ufHGK2k+cU=
Subject key identifier: 99:62:7F:7C:B9:43:B7:09:EE:82:CC:B8:50:03:48:89:D5:48:B2:DF
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 02CE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mWJ_fLlDtwnugsy4UANIidVIst8.roa
Signing time: Sat 10 May 2025 19:38:03 +0000
ROA not before: Sat 10 May 2025 19:38:03 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 718 (0x2ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 19:38:03 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=99627F7CB943B709EE82CCB850034889D548B2DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:4d:a6:ed:48:77:71:3f:d2:5e:1e:75:e2:
53:c5:06:61:71:2e:7e:6a:01:e8:bf:d2:38:08:fc:
8d:ff:63:4f:25:56:f6:fa:a2:e2:e6:d0:85:5e:3b:
c6:52:ac:ec:c9:37:0b:84:ed:2b:15:a6:eb:14:68:
58:af:dc:3d:9e:e8:a0:fa:d5:b7:30:08:e9:56:99:
49:72:e8:a7:3e:5b:07:a7:2c:78:ce:bd:2d:9f:7d:
2d:82:4d:ed:00:27:d7:06:7e:28:e7:0e:55:88:2f:
83:fb:e0:11:ee:d0:06:f9:5c:61:08:39:5a:13:99:
64:e7:87:1a:dd:52:cf:d4:b9:58:e7:e2:6e:ea:e0:
9e:a2:f5:d8:1f:fa:e2:c1:19:6c:ed:db:2e:8b:9a:
35:63:c2:57:63:97:47:f6:bc:c8:00:82:89:10:1b:
81:ab:c9:9e:7d:9b:c0:08:88:b1:e7:31:5c:54:b0:
08:e1:75:a8:cc:22:d3:90:4a:4b:9e:b2:94:b1:a4:
7d:f5:45:a9:de:57:92:bb:f4:a2:77:d5:5e:ff:82:
3b:28:11:45:b3:94:35:6d:f3:7c:08:e8:74:cd:41:
fc:6f:78:05:67:89:97:be:56:05:16:7a:3a:6b:4e:
20:75:f0:ad:99:77:9d:8b:3b:75:2b:b5:f4:61:4b:
bf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:62:7F:7C:B9:43:B7:09:EE:82:CC:B8:50:03:48:89:D5:48:B2:DF
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mWJ_fLlDtwnugsy4UANIidVIst8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:1f:ef:a9:0c:be:a1:d3:52:6c:5e:52:c9:83:c0:bc:9d:f3:
2e:fe:5c:cf:a4:94:8b:e4:4c:b1:8d:f6:d1:83:e3:86:90:d2:
58:09:1f:03:7a:f7:63:1e:13:ee:de:e5:fc:2a:1e:bc:36:e5:
40:70:69:03:92:eb:f3:fe:83:b6:e1:7c:dd:10:27:e4:04:12:
57:f8:a3:ab:bc:85:d1:60:d2:4c:e9:d3:ad:b6:3c:ca:f3:9a:
88:d5:69:51:c3:13:0d:19:2e:4e:01:c0:2c:32:59:11:69:af:
12:15:7b:a0:57:e3:88:36:c2:36:d8:6a:a4:af:70:7c:24:c4:
2d:27:16:22:01:4c:71:ad:9a:22:d0:c1:ca:b8:b2:4f:a8:f5:
e2:6b:37:7c:9c:fe:e0:b5:c4:d4:87:e6:50:32:55:80:a8:2f:
28:e1:b3:8b:ae:9f:7e:6c:28:2b:5f:b7:9a:d5:44:ed:d0:e4:
57:67:12:5d:b6:1c:06:c0:fe:e3:79:d2:9a:ff:2f:ab:31:0e:
12:a8:d9:7a:1d:a0:35:26:cd:81:ad:3a:08:17:ca:af:da:ec:
38:f9:39:d1:64:19:de:11:ca:d5:a3:1b:c2:4b:0b:78:99:e9:
bb:3c:84:2b:ad:c2:f6:5e:2d:23:1e:23:92:6c:88:31:fd:6c:
cd:14:1d:c1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTAx
OTM4MDNaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDk5NjI3RjdDQjk0M0I3
MDlFRTgyQ0NCODUwMDM0ODg5RDU0OEIyREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQIU2m7Uh3cT/SXh514lPFBmFxLn5qAei/0jgI/I3/Y08lVvb6
ouLm0IVeO8ZSrOzJNwuE7SsVpusUaFiv3D2e6KD61bcwCOlWmUly6Kc+WwenLHjO
vS2ffS2CTe0AJ9cGfijnDlWIL4P74BHu0Ab5XGEIOVoTmWTnhxrdUs/UuVjn4m7q
4J6i9dgf+uLBGWzt2y6LmjVjwldjl0f2vMgAgokQG4GryZ59m8AIiLHnMVxUsAjh
dajMItOQSkuespSxpH31RaneV5K79KJ31V7/gjsoEUWzlDVt83wI6HTNQfxveAVn
iZe+VgUWejprTiB18K2Zd52LO3UrtfRhS7+DAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmWJ/fLlDtwnugsy4UANIidVIst8wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9tV0pfZkxsRHR3bnVnc3k0
VUFOSWlkVklzdDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBACIf76kMvqHTUmxeUsmDwLyd8y7+XM+klIvk
TLGN9tGD44aQ0lgJHwN692MeE+7e5fwqHrw25UBwaQOS6/P+g7bhfN0QJ+QEElf4
o6u8hdFg0kzp0622PMrzmojVaVHDEw0ZLk4BwCwyWRFprxIVe6BX44g2wjbYaqSv
cHwkxC0nFiIBTHGtmiLQwcq4sk+o9eJrN3yc/uC1xNSH5lAyVYCoLyjhs4uun35s
KCtft5rVRO3Q5FdnEl22HAbA/uN50pr/L6sxDhKo2XodoDUmzYGtOggXyq/a7Dj5
OdFkGd4RytWjG8JLC3iZ6bs8hCutwvZeLSMeI5JsiDH9bM0UHcE=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:46:30 2025 by rpki-client