Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ugvA_65tfIH8LZTdbN5ObSIGiVE.roa
File: ugvA_65tfIH8LZTdbN5ObSIGiVE.roa (raw, json)
Hash identifier: nanLbW3GUMRHKkjAXoJPgvlPTWyKwz7BCouKiHz6A7s=
Subject key identifier: BA:0B:C0:FF:AE:6D:7C:81:FC:2D:94:DD:6C:DE:4E:6D:22:06:89:51
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 18B6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ugvA_65tfIH8LZTdbN5ObSIGiVE.roa
Signing time: Mon 09 Jun 2025 00:39:35 +0000
ROA not before: Mon 09 Jun 2025 00:39:35 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6326 (0x18b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 9 00:39:35 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BA0BC0FFAE6D7C81FC2D94DD6CDE4E6D22068951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6b:fd:2e:f6:b0:85:12:bf:19:87:fa:38:0c:
05:7e:0b:3f:3d:18:5c:5c:fa:ad:80:95:3f:e3:ea:
26:17:d5:83:bb:b1:e1:d7:40:d7:af:15:59:5d:42:
41:8f:ea:ec:bc:ef:75:53:80:1a:37:9f:c5:18:fb:
76:72:1a:6d:58:7c:f9:eb:fa:7b:e8:14:27:78:67:
5e:77:c9:6d:93:72:e4:51:9b:ef:15:02:de:3b:47:
46:e1:8c:7b:8c:73:24:3b:b7:ce:44:14:95:bc:49:
f3:3e:fd:e6:ec:c3:cb:f5:d9:24:df:09:6e:f9:91:
c6:b9:2d:e3:c7:1d:f4:40:9d:ae:94:28:a4:39:4e:
c0:c3:96:f0:d9:ac:f6:b6:12:fe:a3:fa:87:7c:5c:
ea:c7:21:cf:60:c8:a9:e3:c9:0b:2a:07:95:a3:ed:
f7:64:22:f6:80:45:c2:40:6a:16:b1:7b:40:89:85:
03:f9:00:4b:e5:6d:b6:77:86:86:1a:73:92:06:15:
96:cd:5f:73:28:08:83:31:e5:ba:4b:a6:5e:4d:11:
48:e0:28:0d:4b:47:16:77:93:4d:02:26:1a:ef:09:
46:04:7e:23:f7:ab:d9:f1:0f:24:7d:99:2e:52:67:
60:94:c6:96:6d:f8:cb:0b:95:1d:74:25:5d:38:8c:
39:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0B:C0:FF:AE:6D:7C:81:FC:2D:94:DD:6C:DE:4E:6D:22:06:89:51
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ugvA_65tfIH8LZTdbN5ObSIGiVE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:92:52:12:e3:a8:1d:f2:c9:b6:b7:a2:47:d5:ed:ee:9d:c7:
f5:75:7f:5d:ba:ee:60:b9:eb:fb:3f:57:47:cc:22:3f:4a:71:
f2:4a:c1:d9:ea:df:ad:b1:33:c0:6e:4d:b7:de:19:b5:62:e5:
7f:fc:dd:58:bc:33:5a:16:ee:92:17:21:14:71:8b:ca:44:10:
fc:c9:71:cf:75:32:72:9f:b1:59:88:ca:51:28:76:42:e6:d9:
b8:18:8e:cc:34:23:ff:18:9b:b1:95:a3:e5:5e:ba:a5:c9:e9:
04:a9:48:79:08:29:3b:f1:08:fe:48:f5:98:f9:57:b5:dd:cc:
32:e5:55:ea:4c:50:e2:99:a3:fa:43:21:c6:f7:83:e0:dc:c0:
e5:e9:6a:14:41:5e:3b:49:02:e3:37:b5:19:94:ae:46:56:f8:
92:ec:d6:5e:c8:0e:85:99:35:d7:c5:26:31:f8:f6:e8:4f:65:
95:cd:e9:ca:49:c0:94:92:fe:b4:0e:41:d4:d4:50:61:cf:9d:
82:af:bd:84:17:c2:14:9c:b1:8b:d7:a3:16:fa:ce:e6:5a:6d:
be:36:0c:16:31:99:f3:3d:6c:7b:a6:04:ed:02:a8:40:b4:b5:
76:fa:79:ef:c6:f8:b2:7a:da:98:89:a6:f1:c6:97:3f:a8:6b:
bb:45:b8:f3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGLYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDkw
MDM5MzVaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEJBMEJDMEZGQUU2RDdD
ODFGQzJEOTRERDZDREU0RTZEMjIwNjg5NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDea/0u9rCFEr8Zh/o4DAV+Cz89GFxc+q2AlT/j6iYX1YO7seHX
QNevFVldQkGP6uy873VTgBo3n8UY+3ZyGm1YfPnr+nvoFCd4Z153yW2TcuRRm+8V
At47R0bhjHuMcyQ7t85EFJW8SfM+/ebsw8v12STfCW75kca5LePHHfRAna6UKKQ5
TsDDlvDZrPa2Ev6j+od8XOrHIc9gyKnjyQsqB5Wj7fdkIvaARcJAahaxe0CJhQP5
AEvlbbZ3hoYac5IGFZbNX3MoCIMx5bpLpl5NEUjgKA1LRxZ3k00CJhrvCUYEfiP3
q9nxDyR9mS5SZ2CUxpZt+MsLlR10JV04jDnZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUugvA/65tfIH8LZTdbN5ObSIGiVEwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni91Z3ZBXzY1dGZJSDhMWlRk
Yk41T2JTSUdpVkUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAB+SUhLjqB3yyba3okfV7e6dx/V1f1267mC5
6/s/V0fMIj9KcfJKwdnq362xM8BuTbfeGbVi5X/83Vi8M1oW7pIXIRRxi8pEEPzJ
cc91MnKfsVmIylEodkLm2bgYjsw0I/8Ym7GVo+VeuqXJ6QSpSHkIKTvxCP5I9Zj5
V7XdzDLlVepMUOKZo/pDIcb3g+DcwOXpahRBXjtJAuM3tRmUrkZW+JLs1l7IDoWZ
NdfFJjH49uhPZZXN6cpJwJSS/rQOQdTUUGHPnYKvvYQXwhScsYvXoxb6zuZabb42
DBYxmfM9bHumBO0CqEC0tXb6ee/G+LJ62piJpvHGlz+oa7tFuPM=
-----END CERTIFICATE-----
Generated at Fri Jun 20 23:05:12 2025 by rpki-client