Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/bEC8L2UmlAYXP28lZrRPJoieVOA.roa
File: bEC8L2UmlAYXP28lZrRPJoieVOA.roa (raw, json)
Hash identifier: ciTD0v+nC2i0sEIEnBfZfQQkZmtjR7q4QDmn92Q0zME=
Subject key identifier: 6C:40:BC:2F:65:26:94:06:17:3F:6F:25:66:B4:4F:26:88:9E:54:E0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 036E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bEC8L2UmlAYXP28lZrRPJoieVOA.roa
Signing time: Sun 11 May 2025 15:37:52 +0000
ROA not before: Sun 11 May 2025 15:37:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 878 (0x36e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 11 15:37:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6C40BC2F65269406173F6F2566B44F26889E54E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:28:f1:af:b4:eb:23:05:a1:57:e3:14:20:
22:0d:85:24:4f:05:59:32:6b:e4:b6:8d:6c:30:b3:
c2:d0:6e:c6:cc:ac:d3:ee:b2:b3:35:b2:50:5c:96:
1c:d7:ba:82:d3:2f:bd:4e:69:0d:7d:36:44:4b:e4:
32:b5:ac:63:87:1c:84:82:d3:4b:fb:ed:60:66:a5:
3e:7f:aa:f9:df:ad:4c:0f:f0:70:9f:a3:42:28:7a:
57:97:a7:81:f2:1d:77:d1:c8:81:68:d7:fb:f1:b3:
ff:c1:a3:01:32:47:81:40:16:38:b8:ea:28:93:cf:
87:fd:88:97:63:63:42:8b:da:eb:07:89:d9:71:8a:
be:ea:47:23:45:dc:32:c5:eb:67:0f:c7:90:7c:8c:
a1:56:81:52:6d:66:26:67:f5:8f:3f:c9:27:42:12:
07:a2:9c:08:08:35:5e:65:66:3b:a5:d6:8f:ae:63:
d3:bd:de:5a:6f:cc:47:ac:4a:9b:c8:4b:a0:b4:aa:
7c:25:5a:3b:80:fe:da:e3:6c:b2:ef:0f:7f:db:38:
d8:e6:0e:6c:19:73:05:9a:20:71:ec:43:e9:eb:a5:
7e:92:b8:e1:39:a1:b4:25:44:2e:e9:e3:45:9a:fd:
81:cd:ea:ab:f7:a2:34:7c:b3:c2:ab:db:6a:d9:11:
c8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:40:BC:2F:65:26:94:06:17:3F:6F:25:66:B4:4F:26:88:9E:54:E0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/bEC8L2UmlAYXP28lZrRPJoieVOA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:68:6f:82:88:91:d7:ac:32:5b:a2:55:6b:ea:f2:0d:b7:de:
1d:f3:b3:07:7a:87:64:91:41:a5:bb:88:97:3b:12:89:e6:e9:
93:a0:59:7c:13:9e:2d:dd:0c:bb:2b:3d:89:d8:75:19:9d:3a:
9f:bd:81:1e:a0:d9:4b:16:e3:8c:8a:1a:87:60:6b:e2:c1:5e:
e6:31:57:1c:0a:25:24:db:1a:b2:06:53:d6:d6:49:59:d6:ed:
18:ba:c8:b6:47:81:af:2d:2d:f1:0a:06:ab:7d:ac:a3:84:56:
7c:d1:0c:6a:d0:27:71:22:73:15:34:dd:62:e9:ae:62:fd:86:
30:fa:e4:04:e5:1c:21:70:b6:f4:de:d9:eb:bf:6c:f1:47:6b:
69:f9:dd:a1:3e:82:dd:43:71:ec:eb:57:5b:0e:e0:c6:14:68:
70:f6:97:81:73:a1:c8:dd:1b:21:eb:44:75:1a:a0:bd:2d:e7:
c1:54:33:13:c5:02:72:d8:99:57:ff:fc:78:33:ac:ee:ea:bb:
60:54:ee:8d:90:9b:c4:e5:8f:b9:20:82:a5:d7:dd:57:36:63:
1f:05:ed:0e:79:20:e1:45:fb:bb:c6:4c:b2:0a:67:17:db:90:
b9:b1:76:99:02:aa:2b:a1:9f:80:e6:3b:b4:61:42:1c:d0:cc:
10:d5:12:cc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICA24wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTEx
NTM3NTJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDZDNDBCQzJGNjUyNjk0
MDYxNzNGNkYyNTY2QjQ0RjI2ODg5RTU0RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCGijxr7TrIwWhV+MUICINhSRPBVkya+S2jWwws8LQbsbMrNPu
srM1slBclhzXuoLTL71OaQ19NkRL5DK1rGOHHISC00v77WBmpT5/qvnfrUwP8HCf
o0IoeleXp4HyHXfRyIFo1/vxs//BowEyR4FAFji46iiTz4f9iJdjY0KL2usHidlx
ir7qRyNF3DLF62cPx5B8jKFWgVJtZiZn9Y8/ySdCEgeinAgINV5lZjul1o+uY9O9
3lpvzEesSpvIS6C0qnwlWjuA/trjbLLvD3/bONjmDmwZcwWaIHHsQ+nrpX6SuOE5
obQlRC7p40Wa/YHN6qv3ojR8s8Kr22rZEciJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUbEC8L2UmlAYXP28lZrRPJoieVOAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9iRUM4TDJVbWxBWVhQMjhs
WnJSUEpvaWVWT0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAFJob4KIkdesMluiVWvq8g233h3zswd6h2SR
QaW7iJc7Eonm6ZOgWXwTni3dDLsrPYnYdRmdOp+9gR6g2UsW44yKGodga+LBXuYx
VxwKJSTbGrIGU9bWSVnW7Ri6yLZHga8tLfEKBqt9rKOEVnzRDGrQJ3EicxU03WLp
rmL9hjD65ATlHCFwtvTe2eu/bPFHa2n53aE+gt1DcezrV1sO4MYUaHD2l4Fzocjd
GyHrRHUaoL0t58FUMxPFAnLYmVf//HgzrO7qu2BU7o2Qm8Tlj7kggqXX3Vc2Yx8F
7Q55IOFF+7vGTLIKZxfbkLmxdpkCqiuhn4DmO7RhQhzQzBDVEsw=
-----END CERTIFICATE-----
Generated at Sat Jun 21 16:53:17 2025 by rpki-client