Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/IFh0_dGD4hfcIFtzZ50rhaf3FG4.roa
File: IFh0_dGD4hfcIFtzZ50rhaf3FG4.roa (raw, json)
Hash identifier: VOfBERCDATiywb90oz76GvnTkMo3EgJ3+yteYL/yzhM=
Subject key identifier: 20:58:74:FD:D1:83:E2:17:DC:20:5B:73:67:9D:2B:85:A7:F7:14:6E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1646
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IFh0_dGD4hfcIFtzZ50rhaf3FG4.roa
Signing time: Thu 05 Jun 2025 18:39:34 +0000
ROA not before: Thu 05 Jun 2025 18:39:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5702 (0x1646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 5 18:39:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=205874FDD183E217DC205B73679D2B85A7F7146E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:18:ac:7e:e0:bd:b3:eb:16:47:d2:81:cc:
81:8e:39:61:d4:cc:29:ad:27:f9:f7:0c:a2:82:a7:
09:69:ad:2a:60:94:ea:b2:41:d8:62:0a:ea:59:da:
04:41:65:fe:df:7f:d2:c0:1a:d8:f9:66:b4:25:8c:
12:b9:64:fa:c0:30:1c:72:49:8a:19:3c:c1:d1:b5:
7d:12:48:54:e0:5e:5f:90:80:fa:37:a6:a2:4a:23:
cc:88:48:65:1c:3b:b0:3c:d7:f2:12:55:5b:1a:6a:
89:59:16:fa:1b:d5:eb:a3:58:54:02:ab:12:a2:15:
67:6f:28:d6:5e:c3:0b:e0:d1:d8:e5:eb:dc:f4:10:
76:2f:a3:d9:4f:cd:45:ab:b0:b9:eb:2e:64:6a:cf:
50:4b:eb:0d:9a:62:83:11:6e:26:f4:57:1e:29:13:
d0:e4:e6:52:52:e9:2d:7d:c3:73:c6:e0:ec:b3:d2:
13:a5:f7:1d:65:32:41:4d:aa:16:4d:ad:c2:5f:89:
d3:d1:ea:9d:90:32:44:61:c4:67:b8:af:60:75:a7:
03:cf:25:07:13:16:de:71:60:f2:b5:bf:f4:1d:65:
28:23:da:91:05:5b:67:31:ab:2c:f5:07:57:57:fb:
65:6e:da:23:80:f7:77:46:70:d9:92:08:af:09:1f:
c9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:58:74:FD:D1:83:E2:17:DC:20:5B:73:67:9D:2B:85:A7:F7:14:6E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/IFh0_dGD4hfcIFtzZ50rhaf3FG4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:92:63:8b:d5:8f:79:ab:54:f0:a5:a2:00:05:4f:4d:be:df:
d8:36:9c:74:a0:64:9b:21:bc:ad:73:93:7c:d9:28:83:6b:98:
84:ec:73:09:22:3f:e5:0f:57:c6:56:5d:4b:1a:4c:9c:d6:b1:
20:91:7a:54:d3:19:5b:41:12:69:6c:a7:cc:08:e7:ea:de:07:
58:c0:ed:68:52:38:31:98:32:a4:2f:55:fa:68:19:76:11:28:
db:8f:a0:46:d8:22:0b:52:9e:c7:66:41:2a:eb:cb:ec:b6:7e:
c0:5e:75:1a:76:80:04:11:ef:48:72:7b:cf:11:1f:d3:e3:4e:
5b:ef:ff:c7:9c:4a:f6:96:98:02:ad:56:a4:85:cc:d7:5e:17:
b4:11:2c:bb:f4:c1:12:5f:67:3a:15:49:a3:0c:ad:48:0c:76:
5c:ec:f1:b7:f7:3f:c8:8f:52:f1:7f:8c:55:12:0e:61:53:11:
68:95:ee:91:a0:82:21:0a:0b:3d:bb:b8:15:dc:ad:c6:90:6a:
cf:91:58:86:3d:9b:3b:06:7b:60:20:38:2b:24:67:bb:f9:e2:
4f:14:1c:1c:fa:87:ed:6a:eb:7f:dd:b6:10:50:32:4a:30:45:
1e:2f:d1:dc:8e:7e:9e:e5:3d:2a:f3:1b:c5:1d:ee:7e:2a:7e:
ec:8e:4f:57
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFkYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDUx
ODM5MzRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDIwNTg3NEZERDE4M0Uy
MTdEQzIwNUI3MzY3OUQyQjg1QTdGNzE0NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8xRisfuC9s+sWR9KBzIGOOWHUzCmtJ/n3DKKCpwlprSpglOqy
QdhiCupZ2gRBZf7ff9LAGtj5ZrQljBK5ZPrAMBxySYoZPMHRtX0SSFTgXl+QgPo3
pqJKI8yISGUcO7A81/ISVVsaaolZFvob1eujWFQCqxKiFWdvKNZewwvg0djl69z0
EHYvo9lPzUWrsLnrLmRqz1BL6w2aYoMRbib0Vx4pE9Dk5lJS6S19w3PG4Oyz0hOl
9x1lMkFNqhZNrcJfidPR6p2QMkRhxGe4r2B1pwPPJQcTFt5xYPK1v/QdZSgj2pEF
W2cxqyz1B1dX+2Vu2iOA93dGcNmSCK8JH8nVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUIFh0/dGD4hfcIFtzZ50rhaf3FG4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9JRmgwX2RHRDRoZmNJRnR6
WjUwcmhhZjNGRzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAJ6SY4vVj3mrVPClogAFT02+39g2nHSgZJsh
vK1zk3zZKINrmITscwkiP+UPV8ZWXUsaTJzWsSCRelTTGVtBEmlsp8wI5+reB1jA
7WhSODGYMqQvVfpoGXYRKNuPoEbYIgtSnsdmQSrry+y2fsBedRp2gAQR70hye88R
H9PjTlvv/8ecSvaWmAKtVqSFzNdeF7QRLLv0wRJfZzoVSaMMrUgMdlzs8bf3P8iP
UvF/jFUSDmFTEWiV7pGggiEKCz27uBXcrcaQas+RWIY9mzsGe2AgOCskZ7v54k8U
HBz6h+1q63/dthBQMkowRR4v0dyOfp7lPSrzG8Ud7n4qfuyOT1c=
-----END CERTIFICATE-----
Generated at Sat Jun 21 22:23:42 2025 by rpki-client