Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/BxfFmVFOOBSGuE_BL5iVXWENwu0.roa
File: BxfFmVFOOBSGuE_BL5iVXWENwu0.roa (raw, json)
Hash identifier: 1zcVkobqq9TOyhFSuzVai8FXM94NHE5mOzo4Tn6g1H8=
Subject key identifier: 07:17:C5:99:51:4E:38:14:86:B8:4F:C1:2F:98:95:5D:61:0D:C2:ED
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0EA2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/BxfFmVFOOBSGuE_BL5iVXWENwu0.roa
Signing time: Mon 26 May 2025 14:09:29 +0000
ROA not before: Mon 26 May 2025 14:09:29 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3746 (0xea2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 14:09:29 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=0717C599514E381486B84FC12F98955D610DC2ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c2:b2:ed:d4:50:14:bd:07:b9:a0:68:47:cf:
92:3d:5e:6a:cf:ca:10:fc:9b:32:7f:52:2e:d5:a0:
0b:66:e5:16:fc:27:0c:19:31:37:c9:2a:d6:87:4f:
67:8a:2d:74:fa:61:aa:38:47:e0:c1:3d:ff:10:a6:
ba:d6:b1:f3:ae:28:e7:9c:38:c5:76:66:84:4b:ea:
51:94:e6:ec:59:4d:6e:80:32:99:38:4c:49:e7:2c:
7a:7b:be:ca:12:eb:38:4e:18:59:16:4a:aa:4a:c7:
4f:5d:dc:95:29:9f:d5:c5:87:ea:35:09:27:71:57:
6d:a8:16:35:63:bf:28:5e:df:fc:1a:1b:8b:2e:e3:
2d:6c:93:14:96:dc:03:6e:13:12:8e:13:43:7b:86:
0d:b8:d6:6e:ce:0e:dd:9d:9a:37:2f:b2:fb:f6:a6:
0a:ea:01:19:60:8f:7a:28:40:61:ed:c2:f1:a0:e1:
3d:e1:bc:72:f9:69:2c:12:dc:33:8f:b1:f3:92:1c:
97:79:c4:ad:45:74:35:8a:34:7d:85:31:ba:fb:0a:
6b:fc:90:73:ae:76:38:06:a1:21:71:51:67:1c:dc:
ac:48:9d:b4:a6:60:2e:f8:ab:75:0b:da:15:38:d4:
58:aa:8f:2b:b9:71:59:1e:0f:0b:cb:0e:cd:02:29:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:17:C5:99:51:4E:38:14:86:B8:4F:C1:2F:98:95:5D:61:0D:C2:ED
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/BxfFmVFOOBSGuE_BL5iVXWENwu0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:6f:02:15:ed:36:bf:17:00:71:79:63:f2:3d:79:1b:99:00:
61:11:34:16:fc:56:ff:03:09:c4:fe:55:9c:54:26:a2:fa:4f:
35:75:13:e4:ff:3d:68:60:0d:ea:58:4f:6b:aa:48:4e:ea:6e:
6c:83:b9:7a:33:fe:f5:bf:f7:c0:a7:14:aa:64:3b:23:fd:7a:
a5:d7:d7:bc:99:8e:41:80:1c:05:67:60:77:28:e9:c4:b2:85:
c9:0b:91:1e:7b:3e:29:73:cc:ad:bc:19:1d:d0:e6:ed:b0:3a:
00:75:bd:f6:90:43:62:75:4f:0a:30:d5:ed:09:26:a3:dd:40:
d3:25:4c:33:30:bd:d8:b6:61:1b:8d:d9:e4:94:d4:9d:6f:b9:
3c:4d:dd:87:80:0f:95:3d:36:f3:11:14:e5:aa:03:12:45:f9:
c4:c3:61:b2:b4:77:f8:f8:39:23:b1:3c:b8:40:26:7d:05:1a:
0c:96:48:f0:87:6c:05:81:e4:1d:ff:74:9a:c9:2c:4a:76:39:
cd:7e:fd:e7:da:ec:07:fb:db:f9:48:84:e9:b5:59:ac:ad:20:
c7:28:2a:79:ef:a8:a2:29:0a:6d:5b:84:d7:a5:d9:cc:20:1b:
ca:70:82:4a:89:c9:77:cc:8e:11:77:14:0c:94:21:d7:3e:89:
5e:1c:ec:02
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDqIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjYx
NDA5MjlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDA3MTdDNTk5NTE0RTM4
MTQ4NkI4NEZDMTJGOTg5NTVENjEwREMyRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPwrLt1FAUvQe5oGhHz5I9XmrPyhD8mzJ/Ui7VoAtm5Rb8JwwZ
MTfJKtaHT2eKLXT6Yao4R+DBPf8QprrWsfOuKOecOMV2ZoRL6lGU5uxZTW6AMpk4
TEnnLHp7vsoS6zhOGFkWSqpKx09d3JUpn9XFh+o1CSdxV22oFjVjvyhe3/waG4su
4y1skxSW3ANuExKOE0N7hg241m7ODt2dmjcvsvv2pgrqARlgj3ooQGHtwvGg4T3h
vHL5aSwS3DOPsfOSHJd5xK1FdDWKNH2FMbr7Cmv8kHOudjgGoSFxUWcc3KxInbSm
YC74q3UL2hU41Fiqjyu5cVkeDwvLDs0CKRHNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUBxfFmVFOOBSGuE/BL5iVXWENwu0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9CeGZGbVZGT09CU0d1RV9C
TDVpVlhXRU53dTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAHRvAhXtNr8XAHF5Y/I9eRuZAGERNBb8Vv8D
CcT+VZxUJqL6TzV1E+T/PWhgDepYT2uqSE7qbmyDuXoz/vW/98CnFKpkOyP9eqXX
17yZjkGAHAVnYHco6cSyhckLkR57PilzzK28GR3Q5u2wOgB1vfaQQ2J1Twow1e0J
JqPdQNMlTDMwvdi2YRuN2eSU1J1vuTxN3YeAD5U9NvMRFOWqAxJF+cTDYbK0d/j4
OSOxPLhAJn0FGgyWSPCHbAWB5B3/dJrJLEp2Oc1+/efa7Af72/lIhOm1WaytIMco
KnnvqKIpCm1bhNel2cwgG8pwgkqJyXfMjhF3FAyUIdc+iV4c7AI=
-----END CERTIFICATE-----
Generated at Sun Jun 22 03:13:37 2025 by rpki-client