Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/kBC9bjQV3gP7U5wrLu1OopzrO48.roa
File: kBC9bjQV3gP7U5wrLu1OopzrO48.roa (raw, json)
Hash identifier: 8mmJjo+paK5WZoQc95oFzUbB10WbOcRHl8Muh/pjlpg=
Subject key identifier: 90:10:BD:6E:34:15:DE:03:FB:53:9C:2B:2E:ED:4E:A2:9C:EB:3B:8F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 155A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kBC9bjQV3gP7U5wrLu1OopzrO48.roa
Signing time: Wed 04 Jun 2025 13:09:30 +0000
ROA not before: Wed 04 Jun 2025 13:09:30 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5466 (0x155a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 13:09:30 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9010BD6E3415DE03FB539C2B2EED4EA29CEB3B8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:d1:84:ad:29:15:39:b7:b6:06:d1:b0:a9:
8b:3b:e7:8e:0d:7a:63:00:d5:72:29:c8:2a:77:99:
30:4d:2a:55:c2:fd:59:b1:b9:2c:dc:68:84:ae:0a:
d7:32:c2:2e:21:d1:37:61:26:2a:e1:ae:a4:b6:1e:
30:67:fc:b0:97:a1:72:68:01:c3:66:d9:41:18:bd:
82:fb:ed:84:a3:16:97:9a:7e:f8:28:9b:54:d3:f6:
b1:57:2b:da:a3:3d:08:a6:ed:23:9c:ed:51:87:31:
b4:90:e2:7b:f2:68:ec:9b:97:98:13:cc:56:9f:fb:
63:7b:f1:ff:cf:23:18:fb:b1:68:25:2f:55:2d:d6:
42:6c:72:ec:e6:aa:34:86:42:52:2f:f9:10:6a:85:
e5:a2:6c:be:4b:ef:23:47:0b:d0:93:b5:95:5b:a9:
f5:49:7e:2b:de:d3:60:8a:b7:05:4b:9b:e3:24:a1:
a9:a3:c7:81:b5:54:4a:7c:e7:4d:1c:35:f9:a6:b9:
d2:0d:d1:2d:b4:f3:02:42:a2:48:72:04:ee:76:4a:
46:26:27:4e:04:8e:76:46:60:63:ef:f2:25:37:df:
be:75:a9:a7:b8:0c:4e:68:1e:dd:78:7b:92:7a:20:
5c:8c:94:d8:30:2d:4b:7f:4e:9b:84:dd:36:e5:66:
c2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:10:BD:6E:34:15:DE:03:FB:53:9C:2B:2E:ED:4E:A2:9C:EB:3B:8F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kBC9bjQV3gP7U5wrLu1OopzrO48.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:fd:fe:c1:35:63:88:a9:3d:14:bf:e0:6f:c6:5a:0c:79:d0:
a0:1c:5d:ff:8d:dc:18:91:fa:99:cb:f9:b0:44:80:f2:46:32:
3e:65:1e:da:09:d4:31:dd:71:03:52:de:04:8f:e4:c1:ad:8b:
e8:95:98:90:20:2b:98:c7:d0:33:10:45:7d:70:7b:70:48:c1:
fc:21:3b:19:89:75:3d:55:19:eb:b0:16:9d:c4:e1:68:ed:ff:
57:dd:14:67:0c:a9:53:e3:52:09:0b:06:99:2e:3b:df:e5:95:
ad:28:ae:38:c0:8e:a2:8f:5b:50:63:45:37:5a:49:07:9f:95:
56:39:1b:3a:2d:b2:68:26:03:2a:89:70:b5:75:13:76:3a:53:
4f:38:71:b9:73:f5:fe:b7:42:cf:73:fe:87:de:71:0d:8f:11:
56:79:a6:72:52:f7:b4:19:b8:19:84:e7:a9:f8:ad:c2:c7:09:
af:ed:97:01:30:d4:75:e5:4d:ff:0f:b9:a4:35:c3:e5:01:73:
c0:da:0d:3b:23:97:46:3e:0f:7f:6d:8c:bf:23:a0:a6:3f:9c:
cb:67:54:e8:44:59:1c:04:c5:48:4d:a6:e7:a1:4d:92:8c:ad:
22:ad:d7:4d:7d:29:d3:84:45:5a:fb:0e:78:6f:a1:50:1a:78:
dd:53:ad:a8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFVowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDQx
MzA5MzBaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDkwMTBCRDZFMzQxNURF
MDNGQjUzOUMyQjJFRUQ0RUEyOUNFQjNCOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC10tGErSkVObe2BtGwqYs7544NemMA1XIpyCp3mTBNKlXC/Vmx
uSzcaISuCtcywi4h0TdhJirhrqS2HjBn/LCXoXJoAcNm2UEYvYL77YSjFpeafvgo
m1TT9rFXK9qjPQim7SOc7VGHMbSQ4nvyaOybl5gTzFaf+2N78f/PIxj7sWglL1Ut
1kJscuzmqjSGQlIv+RBqheWibL5L7yNHC9CTtZVbqfVJfive02CKtwVLm+Mkoamj
x4G1VEp8500cNfmmudIN0S208wJCokhyBO52SkYmJ04EjnZGYGPv8iU33751qae4
DE5oHt14e5J6IFyMlNgwLUt/TpuE3TblZsKhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUkBC9bjQV3gP7U5wrLu1OopzrO48wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9rQkM5YmpRVjNnUDdVNXdy
THUxT29wenJPNDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAAz9/sE1Y4ipPRS/4G/GWgx50KAcXf+N3BiR
+pnL+bBEgPJGMj5lHtoJ1DHdcQNS3gSP5MGti+iVmJAgK5jH0DMQRX1we3BIwfwh
OxmJdT1VGeuwFp3E4Wjt/1fdFGcMqVPjUgkLBpkuO9/lla0orjjAjqKPW1BjRTda
SQeflVY5GzotsmgmAyqJcLV1E3Y6U084cblz9f63Qs9z/ofecQ2PEVZ5pnJS97QZ
uBmE56n4rcLHCa/tlwEw1HXlTf8PuaQ1w+UBc8DaDTsjl0Y+D39tjL8joKY/nMtn
VOhEWRwExUhNpuehTZKMrSKt1019KdOERVr7DnhvoVAaeN1Trag=
-----END CERTIFICATE-----
Generated at Sun Jun 22 18:13:22 2025 by rpki-client