Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/-tUPhsoFrxnC4Z3n9tIktzuifo0.roa
File: -tUPhsoFrxnC4Z3n9tIktzuifo0.roa (raw, json)
Hash identifier: Qwk5EtM6qKOCbW2XFMoFQTaz9aEBbj/EUJF+hlKRSjw=
Subject key identifier: FA:D5:0F:86:CA:05:AF:19:C2:E1:9D:E7:F6:D2:24:B7:3B:A2:7E:8D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0C66
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-tUPhsoFrxnC4Z3n9tIktzuifo0.roa
Signing time: Fri 23 May 2025 14:38:27 +0000
ROA not before: Fri 23 May 2025 14:38:27 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3174 (0xc66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 23 14:38:27 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=FAD50F86CA05AF19C2E19DE7F6D224B73BA27E8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:8a:54:52:43:55:f1:56:c2:bc:2c:49:78:
4d:06:50:d4:05:25:9c:4f:81:35:08:00:b6:58:1b:
6b:f4:01:d0:7f:95:ec:a5:9a:77:1f:c4:f0:65:74:
1c:0c:91:d7:0d:3c:09:f2:a4:36:10:f1:d5:58:14:
b0:c7:13:89:c1:1b:ae:bb:7b:9d:f2:c5:1f:ac:a1:
ff:28:a6:6d:82:4e:67:b0:ba:65:64:eb:2a:1e:60:
eb:a3:c0:f5:2c:a8:b8:19:fd:54:1c:3c:25:75:ae:
d2:e9:55:8c:98:24:54:03:ba:c8:43:4c:9c:e4:60:
ec:38:f7:0b:23:01:49:db:0b:49:8c:59:e1:4f:f9:
48:3c:53:3e:10:8d:81:8b:db:03:df:e8:09:37:c8:
c3:03:09:12:2c:f0:7d:91:1d:3c:20:79:e7:71:0f:
2f:36:0c:52:12:84:e9:4d:ea:76:76:de:e9:7d:d1:
14:6e:a9:64:15:0e:e3:bc:9e:a2:34:09:e0:bc:15:
a1:8e:3e:df:29:df:f8:8c:50:90:f1:55:e5:2c:5d:
0c:aa:d8:8b:ef:a7:77:51:35:ab:50:64:e5:64:2b:
c1:84:2a:69:22:25:a9:a7:da:48:00:af:f4:35:6a:
0a:d0:79:5b:65:33:f3:93:c1:c3:d7:bc:f0:45:9c:
5a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D5:0F:86:CA:05:AF:19:C2:E1:9D:E7:F6:D2:24:B7:3B:A2:7E:8D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/-tUPhsoFrxnC4Z3n9tIktzuifo0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:cd:fe:65:93:66:23:2b:07:e4:7d:8e:6b:c3:59:aa:d3:d4:
cf:43:18:47:fe:ed:68:da:76:c7:f0:99:d0:d9:74:45:89:a7:
41:46:c7:9b:86:b9:f9:49:cd:6e:aa:60:df:13:a2:6d:6a:29:
28:8e:5f:c7:d0:46:fb:08:7b:42:f5:e0:1e:1b:9d:86:0e:b7:
2a:e6:63:c5:bf:3b:20:cc:ec:9d:eb:c5:d2:74:81:eb:07:b0:
c4:9e:48:14:40:29:71:87:dc:19:86:9d:d9:e6:dc:4c:d1:d2:
41:59:02:0e:13:8f:c8:0d:6e:2c:96:1e:35:72:6d:9d:0e:2c:
f4:be:bc:e5:49:19:f5:14:9a:d1:49:8c:0f:47:53:e8:1c:f1:
59:44:a4:1e:9f:e9:69:b1:4e:9f:09:d8:1f:c3:9c:8b:12:94:
00:b7:49:1a:05:b4:57:2e:81:62:3e:a6:fe:2c:f1:c5:45:eb:
33:00:b1:46:74:a1:d0:d9:83:a7:f1:b5:9c:be:20:53:00:5e:
d0:93:ba:68:35:d1:f4:2c:b6:46:fc:8d:19:4a:18:22:88:86:
7c:9b:c0:ea:1a:dc:3c:54:23:01:97:6b:d5:43:59:9d:b9:19:
32:a7:2c:f4:5f:4d:92:ce:1e:5e:85:e5:27:a6:ff:5d:d8:db:
f7:3c:d1:01
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDGYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjMx
NDM4MjdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEZBRDUwRjg2Q0EwNUFG
MTlDMkUxOURFN0Y2RDIyNEI3M0JBMjdFOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDO1YpUUkNV8VbCvCxJeE0GUNQFJZxPgTUIALZYG2v0AdB/leyl
mncfxPBldBwMkdcNPAnypDYQ8dVYFLDHE4nBG667e53yxR+sof8opm2CTmewumVk
6yoeYOujwPUsqLgZ/VQcPCV1rtLpVYyYJFQDushDTJzkYOw49wsjAUnbC0mMWeFP
+Ug8Uz4QjYGL2wPf6Ak3yMMDCRIs8H2RHTwgeedxDy82DFIShOlN6nZ23ul90RRu
qWQVDuO8nqI0CeC8FaGOPt8p3/iMUJDxVeUsXQyq2Ivvp3dRNatQZOVkK8GEKmki
Jamn2kgAr/Q1agrQeVtlM/OTwcPXvPBFnFq1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+tUPhsoFrxnC4Z3n9tIktzuifo0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni8tdFVQaHNvRnJ4bkM0WjNu
OXRJa3R6dWlmbzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAJfN/mWTZiMrB+R9jmvDWarT1M9DGEf+7Wja
dsfwmdDZdEWJp0FGx5uGuflJzW6qYN8Tom1qKSiOX8fQRvsIe0L14B4bnYYOtyrm
Y8W/OyDM7J3rxdJ0gesHsMSeSBRAKXGH3BmGndnm3EzR0kFZAg4Tj8gNbiyWHjVy
bZ0OLPS+vOVJGfUUmtFJjA9HU+gc8VlEpB6f6WmxTp8J2B/DnIsSlAC3SRoFtFcu
gWI+pv4s8cVF6zMAsUZ0odDZg6fxtZy+IFMAXtCTumg10fQstkb8jRlKGCKIhnyb
wOoa3DxUIwGXa9VDWZ25GTKnLPRfTZLOHl6F5Sem/13Y2/c80QE=
-----END CERTIFICATE-----
Generated at Sun Jun 22 02:19:14 2025 by rpki-client