Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/w112lI_eNJm9ctB4TRQPWO_bMY4.roa
File: w112lI_eNJm9ctB4TRQPWO_bMY4.roa (raw, json)
Hash identifier: kqJf+q1E734ZNeuZcQmfocCEhrE0MuhDdEgSQfa+h3o=
Subject key identifier: C3:5D:76:94:8F:DE:34:99:BD:72:D0:78:4D:14:0F:58:EF:DB:31:8E
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0CE6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/w112lI_eNJm9ctB4TRQPWO_bMY4.roa
Signing time: Sat 24 May 2025 06:38:31 +0000
ROA not before: Sat 24 May 2025 06:38:31 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3302 (0xce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 24 06:38:31 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=C35D76948FDE3499BD72D0784D140F58EFDB318E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b7:14:27:12:e8:8e:00:0e:56:7d:94:d1:43:
43:cd:f9:0c:41:a6:ce:a9:04:17:61:47:3f:c3:92:
bc:41:eb:2c:31:81:d6:0d:9f:96:4d:9a:60:46:e4:
a8:48:99:05:4c:d6:5f:99:7a:0e:d7:e9:3d:9c:46:
9e:73:37:8a:e6:e1:f8:45:b1:fc:ad:60:20:8a:b5:
6b:c0:88:ca:51:1e:56:2c:4c:a3:a8:4f:f3:71:cc:
9a:a5:00:06:07:b5:9e:51:9e:7f:2e:0a:71:52:c7:
3a:99:af:5f:85:02:c9:ef:b3:05:0f:c8:13:c8:41:
9e:24:ca:41:e2:51:9f:06:76:d1:a8:53:77:56:6e:
c1:00:30:bc:5a:04:8e:82:b5:bb:99:15:b0:c3:50:
fb:b7:b4:0e:9a:a2:33:81:71:f9:81:39:df:4d:e6:
f4:c1:d4:a2:03:79:be:11:95:4f:83:e8:9d:94:88:
07:f8:af:17:78:0d:89:50:80:79:ac:18:d8:73:b5:
f2:3d:dd:96:cd:99:62:e1:1f:30:cd:ca:25:55:9c:
ef:9a:53:77:89:57:54:58:94:01:15:d0:14:a5:5c:
23:f8:8d:61:b3:d8:f0:e9:b5:00:07:6b:32:4f:5f:
34:27:6f:13:fb:7e:39:af:1c:df:4e:ec:94:11:53:
d0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5D:76:94:8F:DE:34:99:BD:72:D0:78:4D:14:0F:58:EF:DB:31:8E
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/w112lI_eNJm9ctB4TRQPWO_bMY4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:05:32:dd:dd:bd:ad:14:6c:70:fd:1c:7b:3a:74:32:e1:35:
49:a5:f5:6d:bb:59:90:3a:1c:b0:b9:02:87:db:4e:66:00:8c:
50:67:ef:56:52:45:d0:86:57:40:a4:f5:2f:c8:29:e1:1e:8c:
66:c3:cc:8f:c2:b2:82:07:6b:3b:b2:45:6b:8a:68:a6:83:ff:
7f:b3:06:85:eb:f0:ef:84:4b:0f:4e:94:06:ba:8d:3b:3a:4d:
27:26:9d:dc:77:11:bf:f6:88:f4:4c:b6:ba:14:8a:66:c7:de:
cb:f4:80:e6:9b:44:83:20:75:5f:25:e9:fb:7d:1f:71:ad:7c:
a2:74:7c:d8:d5:dc:d3:15:33:f5:f3:d6:04:10:00:42:4a:24:
60:de:94:10:b7:dc:db:76:73:25:48:bd:1a:e2:e4:48:a2:bb:
8b:81:49:d3:e1:ef:11:e0:1a:26:07:c2:91:74:77:30:34:ed:
aa:f2:d6:63:44:f6:dd:c3:be:af:23:57:97:9e:f9:6a:25:87:
4e:b0:67:c1:a8:63:6d:6d:ac:94:c1:89:4f:fc:02:bd:28:a0:
db:05:a0:2a:c0:70:a7:6c:ca:2b:30:76:73:31:1f:ea:99:a6:
b2:85:8d:86:35:90:d6:a5:1d:4c:14:5e:3b:51:c4:be:7e:b3:
de:e5:36:e1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDOYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjQw
NjM4MzFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEMzNUQ3Njk0OEZERTM0
OTlCRDcyRDA3ODREMTQwRjU4RUZEQjMxOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDatxQnEuiOAA5WfZTRQ0PN+QxBps6pBBdhRz/DkrxB6ywxgdYN
n5ZNmmBG5KhImQVM1l+Zeg7X6T2cRp5zN4rm4fhFsfytYCCKtWvAiMpRHlYsTKOo
T/NxzJqlAAYHtZ5Rnn8uCnFSxzqZr1+FAsnvswUPyBPIQZ4kykHiUZ8GdtGoU3dW
bsEAMLxaBI6CtbuZFbDDUPu3tA6aojOBcfmBOd9N5vTB1KIDeb4RlU+D6J2UiAf4
rxd4DYlQgHmsGNhztfI93ZbNmWLhHzDNyiVVnO+aU3eJV1RYlAEV0BSlXCP4jWGz
2PDptQAHazJPXzQnbxP7fjmvHN9O7JQRU9D1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUw112lI/eNJm9ctB4TRQPWO/bMY4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni93MTEybElfZU5KbTljdEI0
VFJRUFdPX2JNWTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAGMFMt3dva0UbHD9HHs6dDLhNUml9W27WZA6
HLC5AofbTmYAjFBn71ZSRdCGV0Ck9S/IKeEejGbDzI/CsoIHazuyRWuKaKaD/3+z
BoXr8O+ESw9OlAa6jTs6TScmndx3Eb/2iPRMtroUimbH3sv0gOabRIMgdV8l6ft9
H3GtfKJ0fNjV3NMVM/Xz1gQQAEJKJGDelBC33Nt2cyVIvRri5Eiiu4uBSdPh7xHg
GiYHwpF0dzA07ary1mNE9t3Dvq8jV5ee+Wolh06wZ8GoY21trJTBiU/8Ar0ooNsF
oCrAcKdsyiswdnMxH+qZprKFjYY1kNalHUwUXjtRxL5+s97lNuE=
-----END CERTIFICATE-----
Generated at Sun Jun 22 03:55:39 2025 by rpki-client