Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/rGTZPrVTgZinwwlhqxj8_2-iUeA.roa
File: rGTZPrVTgZinwwlhqxj8_2-iUeA.roa (raw, json)
Hash identifier: 6ZQvBUS1UkWcxzvhtn8PZPwi8JGABMKQ5+tfPsOI6tI=
Subject key identifier: AC:64:D9:3E:B5:53:81:98:A7:C3:09:61:AB:18:FC:FF:6F:A2:51:E0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1EF6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rGTZPrVTgZinwwlhqxj8_2-iUeA.roa
Signing time: Tue 17 Jun 2025 08:40:04 +0000
ROA not before: Tue 17 Jun 2025 08:40:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7926 (0x1ef6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 08:40:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AC64D93EB5538198A7C30961AB18FCFF6FA251E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:88:5f:bc:45:e6:60:98:c3:47:a7:76:68:
4b:70:84:f8:e7:1d:b8:58:99:b8:bc:fb:05:7b:0e:
fc:e2:cd:b2:14:8f:5f:2a:f5:e9:6e:37:aa:ed:6e:
7a:2a:2b:a7:71:6e:5f:88:b6:5a:1d:25:ac:af:c7:
ff:d1:6d:7b:93:6e:2c:3e:9d:b0:03:3f:87:c4:78:
34:fc:2a:38:0d:e8:9a:16:73:7b:0d:4b:4c:4f:0d:
e4:f7:f0:71:3c:f5:d3:cd:b2:28:4c:25:e5:6d:d0:
6c:5e:92:0c:78:e2:3f:27:08:61:ea:13:94:ef:b8:
9c:8d:32:15:c2:e1:f6:ce:8f:be:f3:3c:88:02:54:
e5:94:8c:11:bf:ca:c7:03:71:53:90:f7:73:de:52:
5d:bb:2d:6b:13:eb:5c:2f:f1:f3:ae:8b:21:c0:52:
d3:ea:47:3a:8d:8a:d4:c6:9a:29:55:2f:5a:c9:98:
c6:84:c9:29:a2:73:b6:c0:51:9c:eb:f3:1b:ba:77:
60:eb:80:1c:fc:51:f5:1c:e5:e6:3e:00:b2:cc:67:
b6:a8:f8:65:fa:31:ef:99:5a:af:64:15:ab:11:89:
3f:3c:28:64:26:b7:77:1c:7e:a8:b5:e1:e5:18:31:
ea:c4:d3:c8:78:40:9d:7b:98:6f:58:64:fd:0d:f2:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:64:D9:3E:B5:53:81:98:A7:C3:09:61:AB:18:FC:FF:6F:A2:51:E0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/rGTZPrVTgZinwwlhqxj8_2-iUeA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:49:ac:5d:1d:f2:b5:37:f3:7a:5d:46:da:c5:fe:3f:02:7d:
d2:e4:5e:4e:e2:db:69:de:ea:2f:b6:9f:1a:69:a6:65:91:73:
fe:db:03:b6:8f:ee:f5:c5:7a:46:a1:12:07:ee:21:dc:54:98:
c3:8c:0f:2c:82:d3:dc:60:98:ae:87:d9:73:de:b0:5f:5d:be:
f6:1a:cd:3d:b6:cd:13:9a:66:83:28:49:d3:6c:c4:52:42:91:
7b:d5:10:ca:51:b1:9e:33:d8:20:a0:2a:1d:dc:20:7f:c3:90:
5a:9e:e3:5c:d8:fb:fc:bc:6c:f6:18:c8:d2:09:5c:77:bb:60:
3c:40:cc:44:ee:20:ba:8b:5e:50:a2:78:31:03:59:d0:29:c7:
5f:74:0b:5f:88:3e:8f:45:d9:58:37:f3:5e:02:6d:86:17:34:
d1:26:8b:a3:e2:f1:cd:cf:cf:c7:a3:a2:44:9a:d5:40:79:86:
b3:0a:40:3f:8b:f1:b9:45:d0:70:a6:1f:00:9e:11:33:24:30:
ee:fc:44:c4:b5:c7:b9:82:f2:58:f5:01:02:db:6c:01:a1:e0:
78:a7:08:d3:96:e3:62:2e:b4:05:2b:0a:5f:e3:ce:b6:24:a6:
69:41:22:dc:7b:86:4f:04:cf:e5:31:7a:95:af:7a:8c:51:c1:
4f:4c:4b:80
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHvYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTcw
ODQwMDRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEFDNjREOTNFQjU1Mzgx
OThBN0MzMDk2MUFCMThGQ0ZGNkZBMjUxRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCi/IhfvEXmYJjDR6d2aEtwhPjnHbhYmbi8+wV7DvzizbIUj18q
9eluN6rtbnoqK6dxbl+ItlodJayvx//RbXuTbiw+nbADP4fEeDT8KjgN6JoWc3sN
S0xPDeT38HE89dPNsihMJeVt0Gxekgx44j8nCGHqE5TvuJyNMhXC4fbOj77zPIgC
VOWUjBG/yscDcVOQ93PeUl27LWsT61wv8fOuiyHAUtPqRzqNitTGmilVL1rJmMaE
ySmic7bAUZzr8xu6d2DrgBz8UfUc5eY+ALLMZ7ao+GX6Me+ZWq9kFasRiT88KGQm
t3ccfqi14eUYMerE08h4QJ17mG9YZP0N8vTzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrGTZPrVTgZinwwlhqxj8/2+iUeAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9yR1RaUHJWVGdaaW53d2xo
cXhqOF8yLWlVZUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBADBJrF0d8rU383pdRtrF/j8CfdLkXk7i22ne
6i+2nxpppmWRc/7bA7aP7vXFekahEgfuIdxUmMOMDyyC09xgmK6H2XPesF9dvvYa
zT22zROaZoMoSdNsxFJCkXvVEMpRsZ4z2CCgKh3cIH/DkFqe41zY+/y8bPYYyNIJ
XHe7YDxAzETuILqLXlCieDEDWdApx190C1+IPo9F2Vg3814CbYYXNNEmi6Pi8c3P
z8ejokSa1UB5hrMKQD+L8blF0HCmHwCeETMkMO78RMS1x7mC8lj1AQLbbAGh4Hin
CNOW42IutAUrCl/jzrYkpmlBItx7hk8Ez+UxepWveoxRwU9MS4A=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:57:44 2025 by rpki-client