Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/HOrKL4ham0GhVwW6zNz99s2-TA8.roa
File: HOrKL4ham0GhVwW6zNz99s2-TA8.roa (raw, json)
Hash identifier: fUyji5MtKuavgLZTdbAZZsw83KjsEcRVCmK9nL9L2Qo=
Subject key identifier: 1C:EA:CA:2F:88:5A:9B:41:A1:57:05:BA:CC:DC:FD:F6:CD:BE:4C:0F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 16E6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HOrKL4ham0GhVwW6zNz99s2-TA8.roa
Signing time: Fri 06 Jun 2025 14:39:29 +0000
ROA not before: Fri 06 Jun 2025 14:39:29 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5862 (0x16e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 6 14:39:29 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=1CEACA2F885A9B41A15705BACCDCFDF6CDBE4C0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:08:9c:a4:b1:9c:56:fd:bd:6a:3d:90:e7:
54:cd:48:d8:7e:7a:9c:f5:4e:cb:83:33:69:23:37:
9b:0c:21:7e:6c:f4:aa:ec:52:00:53:ac:32:73:a6:
be:e5:55:44:69:9a:e6:5e:d4:29:6e:02:ba:da:89:
d3:46:43:9a:6b:68:15:90:48:90:46:4e:7c:48:6f:
cd:94:a9:16:0c:57:09:51:aa:e1:4e:b3:9b:b8:f1:
f2:a1:31:c7:3f:06:ee:3b:68:de:09:fa:93:e1:34:
da:f0:db:69:35:43:f8:5d:79:18:b6:0d:63:e7:81:
8f:5b:72:3e:63:2f:38:ce:08:2c:44:eb:4d:95:b6:
fc:9f:42:5d:2f:40:e6:b4:19:e8:6b:a1:10:61:20:
52:aa:04:02:02:80:0c:4b:0b:f6:4b:ba:01:58:47:
32:78:96:34:67:09:4f:d6:6d:4b:dc:bc:50:06:1e:
f3:e4:d0:18:ec:a8:50:71:45:ee:4b:bc:69:4b:18:
c3:61:23:21:23:a7:1c:36:a2:c7:d0:00:45:93:9a:
7f:f0:ce:f8:c7:14:e9:35:67:1b:44:bc:fb:96:4c:
70:cf:03:eb:44:7e:92:e7:a1:14:40:87:4d:17:2f:
60:05:e5:ce:cf:3a:40:be:18:27:96:bf:9e:e6:c3:
12:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EA:CA:2F:88:5A:9B:41:A1:57:05:BA:CC:DC:FD:F6:CD:BE:4C:0F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/HOrKL4ham0GhVwW6zNz99s2-TA8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:96:09:13:1a:22:5f:05:cf:ae:c4:64:82:37:23:ff:a8:bd:
4e:52:48:31:f3:fc:a9:ac:93:c2:f9:ca:a9:0a:73:41:ab:6c:
bc:f5:1a:24:b7:c1:33:20:5c:e7:76:7a:7f:28:fc:01:87:dc:
83:8c:1f:db:89:7b:ed:21:5a:49:45:3a:95:29:d8:28:9c:91:
38:40:5e:16:0b:e6:13:94:35:67:cd:7a:75:ed:fd:24:1a:bf:
5b:ae:f7:64:df:86:f5:da:b8:cc:d4:44:8c:e8:df:1d:5e:40:
40:bd:82:0a:36:99:88:a9:76:ce:fc:99:60:1d:0f:91:1e:18:
48:47:87:5e:d4:ae:c5:3b:b3:9a:6b:b6:50:96:d3:f5:86:73:
7a:a8:50:4f:2b:f5:52:3f:0b:ab:da:c8:b0:69:a9:59:d5:69:
56:21:3e:3c:66:9f:27:eb:4b:7b:22:d7:7c:c2:25:74:4e:64:
52:8c:f6:80:17:3b:69:4f:d2:f8:ec:c2:37:42:eb:ee:6b:9a:
e9:24:ea:30:0e:8f:af:be:a3:a3:2f:a0:94:5c:d8:48:08:7d:
1b:1e:ed:31:71:66:3f:08:60:a5:56:ee:82:9e:fc:2f:76:7d:
d4:0b:b9:57:e6:7b:ef:c3:e4:3a:54:c4:21:74:cc:92:6a:cd:
3b:1b:75:d4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFuYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDYx
NDM5MjlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDFDRUFDQTJGODg1QTlC
NDFBMTU3MDVCQUNDRENGREY2Q0RCRTRDMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEUAicpLGcVv29aj2Q51TNSNh+epz1TsuDM2kjN5sMIX5s9Krs
UgBTrDJzpr7lVURpmuZe1CluArraidNGQ5praBWQSJBGTnxIb82UqRYMVwlRquFO
s5u48fKhMcc/Bu47aN4J+pPhNNrw22k1Q/hdeRi2DWPngY9bcj5jLzjOCCxE602V
tvyfQl0vQOa0GehroRBhIFKqBAICgAxLC/ZLugFYRzJ4ljRnCU/WbUvcvFAGHvPk
0BjsqFBxRe5LvGlLGMNhIyEjpxw2osfQAEWTmn/wzvjHFOk1ZxtEvPuWTHDPA+tE
fpLnoRRAh00XL2AF5c7POkC+GCeWv57mwxL7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUHOrKL4ham0GhVwW6zNz99s2+TA8wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9IT3JLTDRoYW0wR2hWd1c2
ek56OTlzMi1UQTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAGuWCRMaIl8Fz67EZII3I/+ovU5SSDHz/Kms
k8L5yqkKc0GrbLz1GiS3wTMgXOd2en8o/AGH3IOMH9uJe+0hWklFOpUp2CickThA
XhYL5hOUNWfNenXt/SQav1uu92TfhvXauMzURIzo3x1eQEC9ggo2mYipds78mWAd
D5EeGEhHh17UrsU7s5prtlCW0/WGc3qoUE8r9VI/C6vayLBpqVnVaVYhPjxmnyfr
S3si13zCJXROZFKM9oAXO2lP0vjswjdC6+5rmukk6jAOj6++o6MvoJRc2EgIfRse
7TFxZj8IYKVW7oKe/C92fdQLuVfme+/D5DpUxCF0zJJqzTsbddQ=
-----END CERTIFICATE-----
Generated at Sun Jun 22 01:59:16 2025 by rpki-client