Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/mvrnAax21iEspLeQ9SkuXH3JeyI.roa
File: mvrnAax21iEspLeQ9SkuXH3JeyI.roa (raw, json)
Hash identifier: vlcOSwOpswxAv0x5aFhGJHPMy31GOS+bSxoRPCWaAHg=
Subject key identifier: 9A:FA:E7:01:AC:76:D6:21:2C:A4:B7:90:F5:29:2E:5C:7D:C9:7B:22
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 19E2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mvrnAax21iEspLeQ9SkuXH3JeyI.roa
Signing time: Tue 10 Jun 2025 14:09:52 +0000
ROA not before: Tue 10 Jun 2025 14:09:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6626 (0x19e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 10 14:09:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=9AFAE701AC76D6212CA4B790F5292E5C7DC97B22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:c2:4a:3e:fb:4f:f3:ac:ad:25:c3:9d:ff:
43:d8:ce:16:31:97:46:4b:82:97:d3:57:d3:7c:6f:
4c:69:14:c0:1a:cb:5c:63:15:d8:aa:15:90:98:dd:
6a:bf:4b:68:fe:0f:60:69:02:3a:60:9c:10:3c:6c:
dc:0c:af:a7:70:e6:25:be:07:89:bf:7a:93:91:d4:
ef:f4:bb:2b:7c:e7:40:3e:1c:51:c1:19:2c:fc:94:
61:0d:6c:07:a2:b0:23:00:a9:b0:e7:7d:e7:65:c7:
35:6f:0f:d8:b7:72:4a:8e:bd:f1:e4:af:c3:82:99:
ae:07:cf:86:05:93:54:9a:70:bd:cd:f8:03:69:99:
e0:cf:d6:d6:a7:9c:24:43:ff:80:ef:6f:a3:db:13:
de:0f:2b:3e:b1:cc:e6:2e:b5:85:f6:52:ed:da:50:
b8:84:55:45:3a:0d:0b:69:8b:82:ca:1c:ef:0f:b5:
2b:5d:9a:b6:96:7c:30:e8:65:0c:3c:44:73:39:31:
35:4d:53:e6:04:5b:f3:e1:02:a7:8c:61:c3:f9:fc:
70:8a:3b:33:9b:7e:26:4e:ae:14:22:cd:3c:ac:ed:
1b:34:27:93:b7:80:6a:ec:57:04:e7:62:b2:0b:35:
3a:63:40:aa:33:d9:cb:d4:d0:39:6d:4d:f5:2d:f3:
83:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FA:E7:01:AC:76:D6:21:2C:A4:B7:90:F5:29:2E:5C:7D:C9:7B:22
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/mvrnAax21iEspLeQ9SkuXH3JeyI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:8e:7e:e0:26:82:c4:90:0d:3e:20:35:ec:6e:c7:72:99:5b:
26:16:c4:0a:32:84:8e:30:c7:82:f7:2e:fb:87:49:1d:2c:03:
bf:d0:bc:c7:5c:56:75:f2:59:5e:cc:0d:df:60:42:3c:70:70:
73:52:e8:ee:2a:dc:94:31:34:4e:55:3e:1e:c7:99:e5:8b:b3:
7c:23:4f:a6:98:96:2e:05:a8:ca:67:8f:9e:a4:94:0b:a8:94:
c1:bc:1a:73:e4:c7:90:74:f5:f2:95:0c:b2:a0:58:08:29:7a:
42:92:c9:0a:d2:2b:43:fc:2b:f2:d1:98:91:c5:e5:84:57:c0:
89:80:75:f9:92:55:4f:9b:db:7c:47:82:58:ce:8a:bc:1d:98:
99:55:52:f7:22:bd:b6:14:7e:28:64:3d:e5:f0:ee:99:ae:66:
70:c8:75:91:fa:06:67:01:bf:a2:13:27:f0:53:48:de:47:e0:
90:5e:fd:27:b6:c7:78:74:9d:de:8b:b6:8c:51:0e:dd:b9:b8:
37:5e:ef:27:55:d5:fd:fa:91:c2:4a:07:27:1e:20:24:ed:e6:
15:f6:77:0c:f4:e3:d6:af:1a:c9:08:74:18:dd:d3:f8:4f:51:
af:65:c4:c0:c9:53:44:f5:92:af:4a:77:79:07:c9:49:2a:9f:
32:0c:34:8d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGeIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTAx
NDA5NTJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDlBRkFFNzAxQUM3NkQ2
MjEyQ0E0Qjc5MEY1MjkyRTVDN0RDOTdCMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAwsJKPvtP86ytJcOd/0PYzhYxl0ZLgpfTV9N8b0xpFMAay1xj
FdiqFZCY3Wq/S2j+D2BpAjpgnBA8bNwMr6dw5iW+B4m/epOR1O/0uyt850A+HFHB
GSz8lGENbAeisCMAqbDnfedlxzVvD9i3ckqOvfHkr8OCma4Hz4YFk1SacL3N+ANp
meDP1tannCRD/4Dvb6PbE94PKz6xzOYutYX2Uu3aULiEVUU6DQtpi4LKHO8PtStd
mraWfDDoZQw8RHM5MTVNU+YEW/PhAqeMYcP5/HCKOzObfiZOrhQizTys7Rs0J5O3
gGrsVwTnYrILNTpjQKoz2cvU0DltTfUt84PPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmvrnAax21iEspLeQ9SkuXH3JeyIwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9tdnJuQWF4MjFpRXNwTGVR
OVNrdVhIM0pleUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBABeOfuAmgsSQDT4gNexux3KZWyYWxAoyhI4w
x4L3LvuHSR0sA7/QvMdcVnXyWV7MDd9gQjxwcHNS6O4q3JQxNE5VPh7HmeWLs3wj
T6aYli4FqMpnj56klAuolMG8GnPkx5B09fKVDLKgWAgpekKSyQrSK0P8K/LRmJHF
5YRXwImAdfmSVU+b23xHgljOirwdmJlVUvcivbYUfihkPeXw7pmuZnDIdZH6BmcB
v6ITJ/BTSN5H4JBe/Se2x3h0nd6LtoxRDt25uDde7ydV1f36kcJKByceICTt5hX2
dwz049avGskIdBjd0/hPUa9lxMDJU0T1kq9Kd3kHyUkqnzIMNI0=
-----END CERTIFICATE-----
Generated at Sun Jun 22 17:50:09 2025 by rpki-client