Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/tHjqHi8y67xVIAc5xZhn4ymkOg0.roa
File: tHjqHi8y67xVIAc5xZhn4ymkOg0.roa (raw, json)
Hash identifier: W4sHTVlorlIW8aImo+p86VA0jVE3DBHJnp2J2SHy3FQ=
Subject key identifier: B4:78:EA:1E:2F:32:EB:BC:55:20:07:39:C5:98:67:E3:29:A4:3A:0D
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 179E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/tHjqHi8y67xVIAc5xZhn4ymkOg0.roa
Signing time: Sat 07 Jun 2025 13:39:38 +0000
ROA not before: Sat 07 Jun 2025 13:39:38 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6046 (0x179e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 7 13:39:38 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B478EA1E2F32EBBC55200739C59867E329A43A0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:a7:a4:0c:6e:30:cb:0c:28:c0:c7:44:35:
a4:61:78:c5:06:bb:81:70:ab:17:2d:82:9c:b6:de:
66:c1:c5:21:96:48:97:d3:a3:28:f7:8f:10:58:2b:
7e:72:0c:a7:18:c9:f8:d0:37:55:a0:d4:14:f1:1e:
9d:ed:bb:5a:f2:9b:13:ec:d2:2e:b9:6f:e5:c5:c1:
5e:2f:e4:c0:91:f4:24:3b:68:0d:62:31:47:b3:e3:
08:7d:2a:c7:01:e3:06:13:58:6b:a8:26:af:e3:67:
d2:de:62:8a:10:62:7a:42:12:3b:8d:d3:11:9f:b6:
32:83:25:85:00:7b:91:d2:fb:31:e4:36:5a:55:95:
c3:6c:54:39:40:20:1e:ea:ee:64:66:fa:4b:5d:61:
66:4d:96:fe:20:55:47:23:bd:69:df:d6:32:1b:d5:
56:b9:c6:37:a1:5f:ec:b6:62:fc:97:fc:a1:db:25:
e8:78:a4:67:3c:70:3b:c2:7a:b9:ce:0b:10:d1:eb:
45:8d:a8:7d:3b:01:04:c4:72:0b:a0:1e:71:99:78:
ea:df:32:05:7f:01:b4:02:2d:0a:5a:e8:65:b2:93:
d0:f0:ae:ca:a5:a2:15:57:ff:bf:ff:d0:8a:8d:e4:
f4:0a:b3:5c:21:5f:f6:94:62:69:d1:63:f0:0d:02:
5a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:78:EA:1E:2F:32:EB:BC:55:20:07:39:C5:98:67:E3:29:A4:3A:0D
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/tHjqHi8y67xVIAc5xZhn4ymkOg0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:ff:82:23:eb:88:56:2c:cb:d6:34:1c:0d:bb:fc:11:0f:fa:
34:e8:ce:92:59:29:c4:0b:ac:82:a9:9b:54:e1:ce:fb:88:23:
b7:21:4e:34:1e:36:99:9b:e0:f4:a4:cb:8a:c1:3f:15:33:7c:
27:ac:b3:c3:08:23:af:05:60:dc:d9:c8:1b:1f:bc:f2:ea:9f:
05:c4:ef:85:38:c9:56:75:63:e7:fd:40:9c:c5:4d:07:0a:71:
6b:2e:e9:c4:f8:92:68:5c:86:32:88:dc:91:39:30:af:c9:6f:
92:ae:f7:35:5d:96:dd:3f:d7:c0:db:f7:51:bc:97:de:85:f1:
47:99:6e:97:3b:f5:cd:27:9d:ab:53:ce:47:76:47:8d:32:53:
85:ad:d2:67:5c:69:35:9d:6a:ca:ef:14:63:f0:9a:87:d3:d2:
90:0c:06:d1:2f:25:01:4d:a4:c6:18:7d:23:54:d7:06:34:ff:
5c:3e:35:82:0b:2d:61:64:cc:87:03:e1:af:69:00:a6:cd:cb:
d8:3b:b8:dc:46:cc:b3:96:e8:c4:e1:8c:72:5f:3c:d3:62:26:
33:91:a8:4f:ee:65:30:a6:52:df:a7:27:67:da:81:69:1a:78:
a5:3e:de:79:3f:29:75:45:30:2e:45:a9:58:15:3c:4f:60:74:
2c:c0:e6:39
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF54wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDcx
MzM5MzhaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEI0NzhFQTFFMkYzMkVC
QkM1NTIwMDczOUM1OTg2N0UzMjlBNDNBMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCYqekDG4wywwowMdENaRheMUGu4Fwqxctgpy23mbBxSGWSJfT
oyj3jxBYK35yDKcYyfjQN1Wg1BTxHp3tu1rymxPs0i65b+XFwV4v5MCR9CQ7aA1i
MUez4wh9KscB4wYTWGuoJq/jZ9LeYooQYnpCEjuN0xGftjKDJYUAe5HS+zHkNlpV
lcNsVDlAIB7q7mRm+ktdYWZNlv4gVUcjvWnf1jIb1Va5xjehX+y2YvyX/KHbJeh4
pGc8cDvCernOCxDR60WNqH07AQTEcgugHnGZeOrfMgV/AbQCLQpa6GWyk9Dwrsql
ohVX/7//0IqN5PQKs1whX/aUYmnRY/ANAlopAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUtHjqHi8y67xVIAc5xZhn4ymkOg0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni90SGpxSGk4eTY3eFZJQWM1
eFpobjR5bWtPZzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBADv/giPriFYsy9Y0HA27/BEP+jTozpJZKcQL
rIKpm1ThzvuII7chTjQeNpmb4PSky4rBPxUzfCess8MII68FYNzZyBsfvPLqnwXE
74U4yVZ1Y+f9QJzFTQcKcWsu6cT4kmhchjKI3JE5MK/Jb5Ku9zVdlt0/18Db91G8
l96F8UeZbpc79c0nnatTzkd2R40yU4Wt0mdcaTWdasrvFGPwmofT0pAMBtEvJQFN
pMYYfSNU1wY0/1w+NYILLWFkzIcD4a9pAKbNy9g7uNxGzLOW6MThjHJfPNNiJjOR
qE/uZTCmUt+nJ2fagWkaeKU+3nk/KXVFMC5FqVgVPE9gdCzA5jk=
-----END CERTIFICATE-----
Generated at Sat Jun 21 16:55:08 2025 by rpki-client