Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/4fSUYJKuIQuPTnxiDzeYijeyR_Q.roa
File: 4fSUYJKuIQuPTnxiDzeYijeyR_Q.roa (raw, json)
Hash identifier: rMhoxSTnjp5I4zqCKC2B+mlM7C+iBtHM0S9rrO4hHBk=
Subject key identifier: E1:F4:94:60:92:AE:21:0B:8F:4E:7C:62:0F:37:98:8A:37:B2:47:F4
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 147E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4fSUYJKuIQuPTnxiDzeYijeyR_Q.roa
Signing time: Tue 03 Jun 2025 09:39:15 +0000
ROA not before: Tue 03 Jun 2025 09:39:15 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5246 (0x147e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 3 09:39:15 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E1F4946092AE210B8F4E7C620F37988A37B247F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:89:78:af:1b:24:b4:3b:e0:18:68:87:60:
0f:3a:44:f7:65:4c:14:ee:cd:ef:82:ac:40:95:75:
b0:5c:71:33:3b:ac:d2:5a:9e:a4:dc:b3:8f:35:be:
5a:cd:9e:05:86:00:86:df:f3:17:86:78:46:44:37:
7e:e7:a9:e8:91:7b:06:d8:09:a3:30:1b:c6:87:d8:
67:94:b8:ce:1b:77:ce:a0:c2:bd:c5:3c:ae:c3:bd:
2c:0c:77:bd:37:70:06:62:5d:2d:b2:e4:13:71:4c:
f4:30:00:94:70:6a:2c:cb:dd:93:3d:15:45:78:17:
ba:09:65:5d:da:1f:8d:27:38:d1:06:e4:32:63:9d:
a8:3e:2b:6f:38:4f:6d:2c:60:78:96:3b:72:1b:5e:
de:22:2c:70:05:86:ea:a8:2d:b5:b6:a8:28:c4:05:
08:92:77:06:52:79:99:76:c8:81:f4:74:ff:e2:e0:
41:aa:8e:16:24:7f:5a:dc:ef:a7:64:8b:59:48:71:
f1:46:50:92:48:8e:7f:4a:69:0c:a2:49:a8:40:ae:
fb:9a:3b:a2:aa:a9:f2:8a:77:76:80:7d:72:bc:af:
88:f6:00:7c:0e:e4:c8:ba:39:50:cb:f8:a0:15:e1:
a6:ca:6b:6a:01:f5:c9:99:ec:99:ca:db:7a:7d:45:
00:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F4:94:60:92:AE:21:0B:8F:4E:7C:62:0F:37:98:8A:37:B2:47:F4
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/4fSUYJKuIQuPTnxiDzeYijeyR_Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:62:4a:f7:b9:7c:a5:47:0c:83:ad:42:3e:a9:2b:ac:c9:65:
30:6c:25:7c:09:e8:46:41:90:88:7c:11:f4:7b:66:ab:4e:1a:
2e:eb:57:0b:de:b0:68:35:de:be:14:5a:c3:bd:96:c2:7e:fd:
90:9c:2f:d3:b3:d0:dc:c1:46:d1:84:0c:fb:7b:0a:e0:cb:ee:
37:82:44:9b:f5:ae:0c:05:6b:e5:e1:49:3c:78:d9:b3:1f:f1:
12:3c:02:f2:b1:d1:cd:e2:59:d4:7d:2b:7f:be:bd:5c:84:53:
54:7a:6b:8e:3a:f7:67:c2:74:ee:d0:cb:dd:5b:ab:15:62:6d:
9b:47:52:99:22:44:65:ac:fc:6d:30:3b:c6:5b:15:a5:9d:40:
0e:04:2b:19:fd:09:3b:48:f2:de:79:84:f4:83:08:3f:8a:e8:
84:eb:d8:a5:2b:b5:57:75:c0:39:8d:11:b5:26:94:56:6d:f8:
c6:bc:ba:20:07:14:6e:38:b0:77:fc:a2:7c:91:9f:c6:60:f9:
74:3f:62:f1:01:32:db:86:1b:02:ea:4b:d8:d9:46:16:a7:e3:
b1:87:f6:50:5b:c5:ea:b3:67:4e:6e:cd:3b:29:42:8e:a7:dc:
36:95:10:11:08:48:88:bb:62:c7:4d:2d:9c:20:db:d1:d1:4c:
21:df:c7:a9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFH4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDMw
OTM5MTVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEUxRjQ5NDYwOTJBRTIx
MEI4RjRFN0M2MjBGMzc5ODhBMzdCMjQ3RjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJ1Yl4rxsktDvgGGiHYA86RPdlTBTuze+CrECVdbBccTM7rNJa
nqTcs481vlrNngWGAIbf8xeGeEZEN37nqeiRewbYCaMwG8aH2GeUuM4bd86gwr3F
PK7DvSwMd703cAZiXS2y5BNxTPQwAJRwaizL3ZM9FUV4F7oJZV3aH40nONEG5DJj
nag+K284T20sYHiWO3IbXt4iLHAFhuqoLbW2qCjEBQiSdwZSeZl2yIH0dP/i4EGq
jhYkf1rc76dki1lIcfFGUJJIjn9KaQyiSahArvuaO6KqqfKKd3aAfXK8r4j2AHwO
5Mi6OVDL+KAV4abKa2oB9cmZ7JnK23p9RQBpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU4fSUYJKuIQuPTnxiDzeYijeyR/QwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni80ZlNVWUpLdUlRdVBUbnhp
RHplWWlqZXlSX1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAFJiSve5fKVHDIOtQj6pK6zJZTBsJXwJ6EZB
kIh8EfR7ZqtOGi7rVwvesGg13r4UWsO9lsJ+/ZCcL9Oz0NzBRtGEDPt7CuDL7jeC
RJv1rgwFa+XhSTx42bMf8RI8AvKx0c3iWdR9K3++vVyEU1R6a44692fCdO7Qy91b
qxVibZtHUpkiRGWs/G0wO8ZbFaWdQA4EKxn9CTtI8t55hPSDCD+K6ITr2KUrtVd1
wDmNEbUmlFZt+Ma8uiAHFG44sHf8onyRn8Zg+XQ/YvEBMtuGGwLqS9jZRhan47GH
9lBbxeqzZ05uzTspQo6n3DaVEBEISIi7YsdNLZwg29HRTCHfx6k=
-----END CERTIFICATE-----
Generated at Sat Jun 21 23:20:30 2025 by rpki-client