Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/KjbcAQU93611mXYt42Eqm9gDlcs.roa
File: KjbcAQU93611mXYt42Eqm9gDlcs.roa (raw, json)
Hash identifier: +NIfVVz9M6po5tnweWHSahEA6emTuFxfkauiGbM8j34=
Subject key identifier: 2A:36:DC:01:05:3D:DF:AD:75:99:76:2D:E3:61:2A:9B:D8:03:95:CB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0722
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KjbcAQU93611mXYt42Eqm9gDlcs.roa
Signing time: Fri 16 May 2025 14:08:06 +0000
ROA not before: Fri 16 May 2025 14:08:06 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1826 (0x722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 16 14:08:06 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=2A36DC01053DDFAD7599762DE3612A9BD80395CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:37:5d:ae:d8:91:67:e9:71:40:4b:38:7a:
4f:78:09:85:1a:41:23:50:80:9c:00:d6:5f:1f:8f:
67:7c:b3:d0:3e:6a:15:54:73:73:54:29:c8:17:f6:
1c:3f:dc:0f:c4:a5:e4:9f:2f:dc:6c:c5:7d:65:03:
11:b5:03:08:fc:3b:5a:fb:a3:40:c0:03:c0:94:26:
69:28:ca:4f:22:26:e2:7e:62:23:ba:5b:01:7f:67:
82:69:41:e8:b7:53:46:56:46:35:49:ab:a5:87:8c:
4d:2d:65:8f:f2:49:47:3b:26:39:3b:42:ef:48:62:
04:8c:b7:c6:06:33:01:46:90:ca:1b:40:3a:d2:c0:
71:a7:00:08:e4:84:5e:91:c4:eb:68:3f:91:14:aa:
95:ff:c1:1b:dc:02:0f:54:e0:64:ba:a5:49:1a:ae:
5c:dc:a7:f6:6d:6b:58:fa:2e:ed:22:b6:fa:24:c9:
0e:12:ef:08:6b:12:11:54:14:3e:04:5b:67:d3:17:
38:7d:67:9b:40:b2:bb:b1:91:35:c0:ee:77:0f:f5:
f4:30:da:63:46:42:73:fb:52:b0:20:5c:03:53:db:
f0:82:1e:8c:89:70:16:14:7e:fa:3a:ea:2d:5f:3d:
d7:f0:01:2a:92:8f:a6:24:b9:c9:10:75:3a:8f:33:
91:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:36:DC:01:05:3D:DF:AD:75:99:76:2D:E3:61:2A:9B:D8:03:95:CB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/KjbcAQU93611mXYt42Eqm9gDlcs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a8:6c:19:98:4e:18:1f:66:27:45:e5:d9:9a:5d:db:f2:a3:33:
a8:e9:3f:0f:b7:f5:b3:ca:97:46:63:54:83:6f:2e:53:22:96:
f4:48:39:7c:2c:1c:80:3a:e2:e8:05:f4:04:a2:3a:46:58:c6:
cf:95:b3:bb:ac:8d:4a:c6:04:df:1c:e0:2a:2d:7c:12:ca:a0:
dc:3a:16:6d:3a:3b:e6:77:45:7f:d0:d8:03:06:8a:9f:01:a1:
60:14:14:ea:8b:f8:69:62:ba:87:8f:d3:8e:dd:4e:d6:da:86:
2c:10:be:85:f2:5c:85:7c:16:e0:c8:2e:6a:92:cd:59:d8:e1:
a2:09:5c:95:bd:35:b6:40:c9:c6:4d:28:a8:a4:12:86:34:fe:
d4:48:30:28:ee:b5:39:9a:f1:5e:e7:f2:66:d0:03:8c:19:da:
57:c4:72:03:9e:6a:da:3f:13:85:06:39:32:d4:80:48:a5:43:
24:77:7d:40:83:72:42:92:fa:50:75:5d:cc:a7:16:b1:90:62:
bf:dc:65:39:3a:13:fa:b4:47:b1:fb:1f:6f:d4:36:9b:ad:46:
57:b5:26:85:e4:63:e1:2a:b2:2f:d8:0f:6c:4d:af:cd:91:ef:
9e:c6:4f:bf:4f:42:69:1b:f1:3a:9c:bb:07:15:91:5f:58:c7:
09:71:c5:53
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICByIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTYx
NDA4MDZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDJBMzZEQzAxMDUzRERG
QUQ3NTk5NzYyREUzNjEyQTlCRDgwMzk1Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCa1zddrtiRZ+lxQEs4ek94CYUaQSNQgJwA1l8fj2d8s9A+ahVU
c3NUKcgX9hw/3A/EpeSfL9xsxX1lAxG1Awj8O1r7o0DAA8CUJmkoyk8iJuJ+YiO6
WwF/Z4JpQei3U0ZWRjVJq6WHjE0tZY/ySUc7Jjk7Qu9IYgSMt8YGMwFGkMobQDrS
wHGnAAjkhF6RxOtoP5EUqpX/wRvcAg9U4GS6pUkarlzcp/Zta1j6Lu0itvokyQ4S
7whrEhFUFD4EW2fTFzh9Z5tAsruxkTXA7ncP9fQw2mNGQnP7UrAgXANT2/CCHoyJ
cBYUfvo66i1fPdfwASqSj6YkuckQdTqPM5ErAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKjbcAQU93611mXYt42Eqm9gDlcswHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9LamJjQVFVOTM2MTFtWFl0
NDJFcW05Z0RsY3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAKhsGZhOGB9mJ0Xl2Zpd2/KjM6jpPw+39bPK
l0ZjVINvLlMilvRIOXwsHIA64ugF9ASiOkZYxs+Vs7usjUrGBN8c4CotfBLKoNw6
Fm06O+Z3RX/Q2AMGip8BoWAUFOqL+GliuoeP047dTtbahiwQvoXyXIV8FuDILmqS
zVnY4aIJXJW9NbZAycZNKKikEoY0/tRIMCjutTma8V7n8mbQA4wZ2lfEcgOeato/
E4UGOTLUgEilQyR3fUCDckKS+lB1XcynFrGQYr/cZTk6E/q0R7H7H2/UNputRle1
JoXkY+Eqsi/YD2xNr82R757GT79PQmkb8TqcuwcVkV9YxwlxxVM=
-----END CERTIFICATE-----
Generated at Sun Jun 22 08:23:03 2025 by rpki-client