Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/hfoFtl-yk7LGaxz_ZMl_W7ErBuA.roa
File: hfoFtl-yk7LGaxz_ZMl_W7ErBuA.roa (raw, json)
Hash identifier: 3OFMPZyYwmXiuG5A0DEzo085qNg+B7JXcko17ApKm0o=
Subject key identifier: 85:FA:05:B6:5F:B2:93:B2:C6:6B:1C:FF:64:C9:7F:5B:B1:2B:06:E0
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0542
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/hfoFtl-yk7LGaxz_ZMl_W7ErBuA.roa
Signing time: Wed 14 May 2025 02:08:01 +0000
ROA not before: Wed 14 May 2025 02:08:01 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1346 (0x542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 14 02:08:01 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=85FA05B65FB293B2C66B1CFF64C97F5BB12B06E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3f:d1:38:59:70:92:fb:3b:57:ca:3e:4c:96:
ec:32:df:84:05:3a:f1:3c:73:1e:07:de:55:ef:24:
c0:37:a0:de:fa:5b:70:a7:88:6f:85:7e:c3:d7:fb:
c1:38:1e:c0:6d:78:02:03:94:77:cc:c6:5a:1a:19:
d3:b9:06:ab:2a:c9:56:41:db:59:75:16:ab:c9:2f:
67:df:cd:64:ec:36:f6:9b:b0:e9:12:c5:68:c1:84:
c5:60:15:ac:91:4a:21:4e:f2:56:3d:c4:9d:d9:ac:
1e:93:ac:04:c3:f1:5e:09:be:8c:a3:39:b5:3c:da:
a9:97:4e:f3:a2:fe:3c:2b:b3:64:73:3a:2f:af:4b:
c2:00:b8:c7:59:d0:7c:9d:18:f9:e1:83:b9:f5:90:
73:78:98:8e:6c:b2:4c:eb:ea:ea:29:be:03:75:20:
70:9d:da:3e:f3:9f:6b:3b:ea:c1:46:21:9d:dc:e4:
88:91:ab:5f:33:c4:f2:0a:35:24:48:79:46:62:f1:
83:0a:23:1a:5f:ed:f3:41:22:e4:a9:0a:13:a4:78:
4f:49:66:5c:21:72:30:04:fa:28:eb:ba:5a:4c:42:
d8:ca:94:02:ab:06:44:6c:02:ff:ef:b7:8f:df:fb:
f7:bb:bb:2e:af:e8:69:87:65:49:e1:bb:0f:02:e2:
af:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FA:05:B6:5F:B2:93:B2:C6:6B:1C:FF:64:C9:7F:5B:B1:2B:06:E0
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/hfoFtl-yk7LGaxz_ZMl_W7ErBuA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:87:7c:0c:19:7a:e1:cb:86:9c:4a:d1:df:5d:1a:0d:96:19:
0a:52:64:b3:68:ce:b9:c2:5d:56:32:0a:16:cb:ef:df:46:57:
47:8b:16:7f:08:54:27:de:98:ba:56:8d:72:aa:e4:d9:4e:b8:
9f:a9:30:68:25:ec:4c:1b:e4:71:6a:4c:3f:69:d6:67:b4:2d:
9e:97:99:f9:11:fc:5f:50:fe:d8:8e:32:f6:f7:6e:24:f1:1e:
9b:f5:86:1c:6e:5f:1d:9a:62:01:61:d3:2a:b0:8f:1d:fd:b2:
fe:e0:90:2d:fb:b1:3c:ae:78:8d:de:29:27:44:30:e4:2e:69:
c8:2a:93:e2:86:a9:cf:4b:78:2d:19:04:a8:0d:71:3e:1a:09:
dd:86:24:86:f2:cd:e8:cf:69:73:1e:99:51:98:10:2e:6d:90:
ef:c2:93:ad:a5:17:e1:41:da:b0:3f:6a:18:97:c9:36:2d:1b:
e4:9a:30:43:df:56:22:32:ee:1c:2c:9b:14:c1:bf:c3:af:64:
b9:de:3e:b0:26:73:25:76:d7:fd:4b:5e:75:8f:57:c9:48:94:
f6:85:b1:d9:cc:72:4e:0b:38:f9:6f:60:81:36:79:2a:11:ab:
af:79:b7:0f:b7:f1:69:48:15:47:3d:44:ef:14:84:d4:8d:5d:
51:ec:e6:78
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTQw
MjA4MDFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDg1RkEwNUI2NUZCMjkz
QjJDNjZCMUNGRjY0Qzk3RjVCQjEyQjA2RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDoP9E4WXCS+ztXyj5Mluwy34QFOvE8cx4H3lXvJMA3oN76W3Cn
iG+FfsPX+8E4HsBteAIDlHfMxloaGdO5BqsqyVZB21l1FqvJL2ffzWTsNvabsOkS
xWjBhMVgFayRSiFO8lY9xJ3ZrB6TrATD8V4JvoyjObU82qmXTvOi/jwrs2RzOi+v
S8IAuMdZ0HydGPnhg7n1kHN4mI5sskzr6uopvgN1IHCd2j7zn2s76sFGIZ3c5IiR
q18zxPIKNSRIeUZi8YMKIxpf7fNBIuSpChOkeE9JZlwhcjAE+ijrulpMQtjKlAKr
BkRsAv/vt4/f+/e7uy6v6GmHZUnhuw8C4q8FAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUhfoFtl+yk7LGaxz/ZMl/W7ErBuAwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9oZm9GdGwteWs3TEdheHpf
Wk1sX1c3RXJCdUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBACmHfAwZeuHLhpxK0d9dGg2WGQpSZLNozrnC
XVYyChbL799GV0eLFn8IVCfemLpWjXKq5NlOuJ+pMGgl7Ewb5HFqTD9p1me0LZ6X
mfkR/F9Q/tiOMvb3biTxHpv1hhxuXx2aYgFh0yqwjx39sv7gkC37sTyueI3eKSdE
MOQuacgqk+KGqc9LeC0ZBKgNcT4aCd2GJIbyzejPaXMemVGYEC5tkO/Ck62lF+FB
2rA/ahiXyTYtG+SaMEPfViIy7hwsmxTBv8OvZLnePrAmcyV21/1LXnWPV8lIlPaF
sdnMck4LOPlvYIE2eSoRq695tw+38WlIFUc9RO8UhNSNXVHs5ng=
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:23:34 2025 by rpki-client