Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/xC6AgFAM5hZLiVrO8bSfij0NLJI.roa
File: xC6AgFAM5hZLiVrO8bSfij0NLJI.roa (raw, json)
Hash identifier: 2LQ5KlIPOBTb9uk6FSBFTDV/sbWSnlVXUCwd0ZfdE7s=
Subject key identifier: C4:2E:80:80:50:0C:E6:16:4B:89:5A:CE:F1:B4:9F:8A:3D:0D:2C:92
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 23D6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xC6AgFAM5hZLiVrO8bSfij0NLJI.roa
Signing time: Tue 24 Jun 2025 08:11:59 +0000
ROA not before: Tue 24 Jun 2025 08:11:59 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9174 (0x23d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 24 08:11:59 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C42E8080500CE6164B895ACEF1B49F8A3D0D2C92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:53:99:b8:6c:71:94:a3:6c:13:7a:37:15:a1:
57:e8:37:dd:b0:76:64:3b:01:03:1f:e8:32:3d:ab:
82:9d:d5:f3:98:2a:85:c8:fe:7d:da:6e:43:47:95:
a7:e4:80:f0:3c:f1:e8:9c:9b:96:06:26:90:04:cd:
ed:b7:46:03:82:12:45:24:0a:f5:d9:08:2f:9e:35:
c2:e8:86:17:2b:dd:f0:80:c8:5e:e7:1a:18:78:94:
7a:c4:0b:45:e5:99:80:47:2e:53:ca:6b:6a:6c:a7:
de:11:be:8c:26:7b:a1:72:a0:c9:7a:64:3b:a2:11:
41:cf:54:db:57:f0:13:26:bb:58:a8:57:ae:f6:2c:
90:38:1a:eb:92:45:f9:6c:6d:e7:08:ed:99:ac:2f:
32:08:73:0e:7d:3f:41:3b:ec:46:a4:fd:bd:ab:1e:
85:3e:2d:df:ae:e7:7e:b2:18:70:96:ae:06:ab:e7:
f6:1e:b6:6c:3a:04:02:ad:45:ec:44:5c:3a:31:36:
ba:aa:6b:d4:23:5e:36:d0:1d:c2:7d:21:b7:6f:4e:
52:0d:ff:67:77:bf:2d:d3:0f:41:a4:a9:79:7b:d8:
68:33:0b:8e:bd:0f:c6:c4:96:ae:9b:63:7f:af:3f:
73:a8:fb:aa:a7:a2:95:80:47:bc:2c:4c:70:55:33:
f8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2E:80:80:50:0C:E6:16:4B:89:5A:CE:F1:B4:9F:8A:3D:0D:2C:92
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/xC6AgFAM5hZLiVrO8bSfij0NLJI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:8c:5a:fb:47:0f:25:0b:f7:dc:24:d3:66:a8:28:b8:4f:99:
7e:0b:73:22:6c:6d:5f:92:58:76:79:d6:dc:e0:24:c2:73:da:
62:a2:50:34:42:f1:d1:30:ea:4c:7c:38:86:45:2d:d1:ef:a3:
00:d6:43:63:3f:41:29:12:ea:a1:10:45:bc:40:ab:e1:8e:97:
d4:58:b1:53:95:f6:c3:80:a6:cd:db:02:f6:b1:3e:a1:d2:59:
24:9a:1b:c4:4e:1a:2f:3d:f0:b3:f3:9e:55:57:42:ab:5a:0f:
04:c9:a5:bd:b4:32:8d:2c:9a:22:26:be:25:f1:9f:24:e1:02:
33:ef:b7:0b:89:5a:48:e8:79:ec:56:5f:2d:1e:45:0a:9d:b9:
10:8e:d2:3a:e9:a7:e0:75:d0:60:f7:30:dc:49:ac:b8:39:98:
2a:3f:47:0a:71:6e:3b:56:04:ac:9e:23:55:cf:40:a9:29:2a:
4f:54:b6:8b:9b:4b:3d:6c:1c:68:dc:39:b2:c0:ef:a9:66:21:
5f:87:d2:85:56:bb:f6:b3:8a:10:42:ca:40:b5:8b:c4:d3:f0:
a3:ab:a5:02:03:3f:ff:6e:3a:58:04:ab:0d:34:0d:65:55:71:
30:29:33:9e:82:77:57:a9:b5:c7:ac:7a:c8:b5:7b:38:4a:73:
cf:56:0e:e1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICI9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MjQw
ODExNTlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEM0MkU4MDgwNTAwQ0U2
MTY0Qjg5NUFDRUYxQjQ5RjhBM0QwRDJDOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrU5m4bHGUo2wTejcVoVfoN92wdmQ7AQMf6DI9q4Kd1fOYKoXI
/n3abkNHlafkgPA88eicm5YGJpAEze23RgOCEkUkCvXZCC+eNcLohhcr3fCAyF7n
Ghh4lHrEC0XlmYBHLlPKa2psp94Rvowme6FyoMl6ZDuiEUHPVNtX8BMmu1ioV672
LJA4GuuSRflsbecI7ZmsLzIIcw59P0E77Eak/b2rHoU+Ld+u536yGHCWrgar5/Ye
tmw6BAKtRexEXDoxNrqqa9QjXjbQHcJ9IbdvTlIN/2d3vy3TD0GkqXl72GgzC469
D8bElq6bY3+vP3Oo+6qnopWAR7wsTHBVM/iRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUxC6AgFAM5hZLiVrO8bSfij0NLJIwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni94QzZBZ0ZBTTVoWkxpVnJP
OGJTZmlqME5MSkkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAAqMWvtHDyUL99wk02aoKLhPmX4LcyJsbV+S
WHZ51tzgJMJz2mKiUDRC8dEw6kx8OIZFLdHvowDWQ2M/QSkS6qEQRbxAq+GOl9RY
sVOV9sOAps3bAvaxPqHSWSSaG8ROGi898LPznlVXQqtaDwTJpb20Mo0smiImviXx
nyThAjPvtwuJWkjoeexWXy0eRQqduRCO0jrpp+B10GD3MNxJrLg5mCo/RwpxbjtW
BKyeI1XPQKkpKk9UtoubSz1sHGjcObLA76lmIV+H0oVWu/azihBCykC1i8TT8KOr
pQIDP/9uOlgEqw00DWVVcTApM56Cd1eptcesesi1ezhKc89WDuE=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:42:07 2025 by rpki-client