Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/VpIWU4j4Gqz4HTH38WehzMka-08.roa
File: VpIWU4j4Gqz4HTH38WehzMka-08.roa (raw, json)
Hash identifier: lXfeAdpOAFIkCuEEjkD72vx2a808xGyszOVi83K+ZQY=
Subject key identifier: 56:92:16:53:88:F8:1A:AC:F8:1D:31:F7:F1:67:A1:CC:C9:1A:FB:4F
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01D2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VpIWU4j4Gqz4HTH38WehzMka-08.roa
Signing time: Fri 09 May 2025 12:07:49 +0000
ROA not before: Fri 09 May 2025 12:07:49 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 12:07:49 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=5692165388F81AACF81D31F7F167A1CCC91AFB4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:3a:1c:87:17:84:84:0a:df:5a:54:ef:17:
2e:80:dc:62:3f:22:00:1e:f8:4c:ee:58:3a:cf:c7:
a0:02:5d:eb:f8:ae:34:ee:a4:97:1b:d8:5e:b2:e0:
55:60:de:7a:e6:76:9a:33:c8:e4:11:96:2e:e9:0b:
b2:12:9c:92:eb:34:b2:15:8f:81:59:23:25:bc:fe:
1e:d8:3f:13:13:4b:1a:bc:9a:de:6c:a4:e9:b0:37:
93:98:aa:dc:6b:de:a6:7f:88:12:64:18:f9:21:52:
d6:f8:5f:8a:dd:b1:84:4a:a6:82:35:d8:3e:e6:9c:
1c:59:f9:e8:42:88:99:b7:b1:ea:00:01:11:98:01:
02:c9:27:2e:b5:58:81:5a:bd:0b:8d:a8:50:77:0c:
fe:53:e1:f2:46:b1:c4:5a:17:a4:60:54:95:da:7d:
4a:c5:f9:41:59:56:21:44:da:d1:c6:34:dd:ca:ee:
95:3d:8b:38:89:72:f2:15:f6:61:ae:e0:95:e2:a7:
a3:e1:23:15:e8:c4:bd:de:ec:54:74:99:56:47:22:
df:1b:c5:19:55:96:12:64:7b:45:ac:6e:cc:b2:ed:
73:75:a8:3c:92:ca:96:a5:c6:40:93:26:8b:b7:49:
2d:f5:61:18:f8:fd:0b:11:be:67:58:c6:be:30:67:
f2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:16:53:88:F8:1A:AC:F8:1D:31:F7:F1:67:A1:CC:C9:1A:FB:4F
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/VpIWU4j4Gqz4HTH38WehzMka-08.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:36:79:50:0e:b4:a9:29:b1:f5:dd:d5:54:1a:90:4b:80:81:
57:e8:7a:06:6e:bb:f6:1a:3e:b7:28:13:78:ce:7c:50:ee:a6:
80:be:ce:f8:c1:97:fc:21:24:35:0c:4e:80:66:93:32:96:1f:
c6:c0:5f:6b:e0:ae:20:21:76:23:fa:58:97:4f:a6:63:2a:6e:
71:6f:ce:65:88:d4:96:4e:43:bf:a2:89:e8:a7:74:60:aa:50:
c5:04:41:2f:dd:f2:d6:0d:90:e8:61:d9:a8:dc:8c:b0:5d:4d:
86:4c:f8:21:c7:a3:af:fe:e6:22:67:6b:b0:e1:86:f9:b6:43:
ae:34:0a:09:1c:4d:e5:41:bd:b7:c9:c0:8c:6b:8d:53:d1:b5:
ef:1a:32:38:8d:a1:ea:24:81:0b:ed:06:1c:c1:a6:d8:d1:ce:
fe:87:b4:2d:3e:89:22:50:bc:1f:f0:84:b8:27:33:d8:85:62:
c9:2c:2e:ba:55:70:2e:be:63:1c:c1:e5:30:76:a7:5e:fa:a8:
ba:a0:47:9c:bf:83:4b:d6:e8:48:f6:4b:91:93:48:d6:45:2e:
e0:b8:89:10:07:f8:02:97:9c:b8:64:f8:84:5e:d2:aa:c7:0b:
c1:10:40:89:7e:5e:36:42:98:84:7e:7f:f2:09:fa:ab:02:f3:
55:0c:10:9b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDkx
MjA3NDlaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDU2OTIxNjUzODhGODFB
QUNGODFEMzFGN0YxNjdBMUNDQzkxQUZCNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCskjochxeEhArfWlTvFy6A3GI/IgAe+EzuWDrPx6ACXev4rjTu
pJcb2F6y4FVg3nrmdpozyOQRli7pC7ISnJLrNLIVj4FZIyW8/h7YPxMTSxq8mt5s
pOmwN5OYqtxr3qZ/iBJkGPkhUtb4X4rdsYRKpoI12D7mnBxZ+ehCiJm3seoAARGY
AQLJJy61WIFavQuNqFB3DP5T4fJGscRaF6RgVJXafUrF+UFZViFE2tHGNN3K7pU9
iziJcvIV9mGu4JXip6PhIxXoxL3e7FR0mVZHIt8bxRlVlhJke0Wsbsyy7XN1qDyS
ypalxkCTJou3SS31YRj4/QsRvmdYxr4wZ/LbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVpIWU4j4Gqz4HTH38WehzMka+08wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9WcElXVTRqNEdxejRIVEgz
OFdlaHpNa2EtMDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAAk2eVAOtKkpsfXd1VQakEuAgVfoegZuu/Ya
PrcoE3jOfFDupoC+zvjBl/whJDUMToBmkzKWH8bAX2vgriAhdiP6WJdPpmMqbnFv
zmWI1JZOQ7+iieindGCqUMUEQS/d8tYNkOhh2ajcjLBdTYZM+CHHo6/+5iJna7Dh
hvm2Q640CgkcTeVBvbfJwIxrjVPRte8aMjiNoeokgQvtBhzBptjRzv6HtC0+iSJQ
vB/whLgnM9iFYsksLrpVcC6+YxzB5TB2p176qLqgR5y/g0vW6Ej2S5GTSNZFLuC4
iRAH+AKXnLhk+IRe0qrHC8EQQIl+XjZCmIR+f/IJ+qsC81UMEJs=
-----END CERTIFICATE-----
Generated at Sat May 17 22:41:29 2025 by rpki-client