Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/YPD64ZPNMLvBrPj5KAWCD3jMiUQ.roa
File: YPD64ZPNMLvBrPj5KAWCD3jMiUQ.roa (raw, json)
Hash identifier: rLyU6IIFx0ugMo5egkDdiVzFmvDJCc3RrHgbcHZeO2Y=
Subject key identifier: 60:F0:FA:E1:93:CD:30:BB:C1:AC:F8:F9:28:05:82:0F:78:CC:89:44
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07BE
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YPD64ZPNMLvBrPj5KAWCD3jMiUQ.roa
Signing time: Sat 17 May 2025 09:38:07 +0000
ROA not before: Sat 17 May 2025 09:38:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1982 (0x7be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 09:38:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=60F0FAE193CD30BBC1ACF8F92805820F78CC8944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:c9:97:82:72:26:79:41:5a:54:b7:7c:b9:
51:02:f8:54:ee:d6:be:1e:c0:f0:16:d9:cf:5c:8d:
0d:e0:b8:a8:b9:a6:7a:43:cc:e4:39:0d:e2:ad:76:
5d:ba:61:68:79:d5:66:46:ed:32:67:38:df:b7:56:
d6:77:76:e0:fb:46:b6:55:37:24:39:c1:37:e3:fd:
e4:57:8c:7e:2f:b6:84:d9:4d:1e:91:1a:d3:24:6c:
c8:28:58:01:10:ff:38:a8:d5:e2:63:66:62:e7:54:
6b:ed:56:b7:ec:75:af:9b:bc:82:6f:fc:fa:cf:39:
5c:02:ac:42:6c:4b:cb:ca:95:db:cb:17:1b:d1:30:
b3:17:97:f8:68:00:fd:af:13:86:ee:a9:4f:6c:20:
78:48:e6:f1:4e:5c:22:13:7a:53:f8:38:dd:a8:97:
fd:b5:2a:6d:e5:67:ab:d6:4b:a2:c9:55:84:1a:b7:
40:96:fc:9a:bb:6a:90:50:92:60:e5:f7:85:4d:12:
25:43:3b:00:2a:a7:e7:09:78:06:5f:f1:ff:e1:69:
68:39:5a:89:00:08:a3:15:4e:52:18:d0:fe:30:9b:
eb:9b:50:0a:01:49:a6:3c:b0:d0:18:12:65:e7:ab:
ce:4a:92:72:7a:ee:f7:5b:ce:aa:4e:15:fc:2f:cc:
eb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F0:FA:E1:93:CD:30:BB:C1:AC:F8:F9:28:05:82:0F:78:CC:89:44
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/YPD64ZPNMLvBrPj5KAWCD3jMiUQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:71:e5:af:08:3a:18:b8:e3:bf:a5:b5:96:84:75:41:12:90:
e6:7d:2b:e4:85:6f:76:07:fd:1a:fa:f8:27:e2:6f:36:5e:9f:
99:05:8d:e6:cf:a5:d9:76:1d:f9:1d:43:df:29:ee:a3:8b:af:
8b:4d:11:0f:a9:32:4c:9f:65:5a:e7:ab:b7:00:59:48:d2:86:
79:ce:42:50:74:34:5b:ac:19:ed:fd:5f:de:a4:b7:30:a8:8a:
8a:cf:8b:63:a1:70:a7:71:f7:31:0e:53:c1:a3:b6:ad:1b:5e:
c9:49:cf:ef:39:b9:5d:51:77:61:df:3e:1f:21:66:5c:a8:b7:
cd:7c:1d:b0:80:b7:06:e8:4c:bd:af:9f:41:a9:9a:2c:f6:5c:
c9:69:6a:e6:f6:8f:f1:98:6d:16:46:d7:fb:35:8f:7c:ec:4f:
fc:5d:94:41:87:52:a3:d2:04:bf:18:0f:c2:c7:02:94:50:aa:
e9:82:fb:c7:29:19:6b:7f:6f:2b:e4:97:63:55:5e:46:33:f4:
db:27:5e:18:2f:e7:6f:05:ae:ba:66:1c:e5:ec:07:5f:3a:34:
76:d2:a7:3e:91:d6:82:2b:9f:5c:7d:d6:2e:8a:e6:93:0b:7c:
65:bd:6e:83:8b:a7:29:1e:46:33:16:11:de:87:6f:0e:82:dc:
f6:51:03:93
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB74wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTcw
OTM4MDdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDYwRjBGQUUxOTNDRDMw
QkJDMUFDRjhGOTI4MDU4MjBGNzhDQzg5NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDE1MmXgnImeUFaVLd8uVEC+FTu1r4ewPAW2c9cjQ3guKi5pnpD
zOQ5DeKtdl26YWh51WZG7TJnON+3VtZ3duD7RrZVNyQ5wTfj/eRXjH4vtoTZTR6R
GtMkbMgoWAEQ/zio1eJjZmLnVGvtVrfsda+bvIJv/PrPOVwCrEJsS8vKldvLFxvR
MLMXl/hoAP2vE4buqU9sIHhI5vFOXCITelP4ON2ol/21Km3lZ6vWS6LJVYQat0CW
/Jq7apBQkmDl94VNEiVDOwAqp+cJeAZf8f/haWg5WokACKMVTlIY0P4wm+ubUAoB
SaY8sNAYEmXnq85KknJ67vdbzqpOFfwvzOtxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYPD64ZPNMLvBrPj5KAWCD3jMiUQwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9ZUEQ2NFpQTk1MdkJyUGo1
S0FXQ0Qzak1pVVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAABx5a8IOhi447+ltZaEdUESkOZ9K+SFb3YH
/Rr6+CfibzZen5kFjebPpdl2HfkdQ98p7qOLr4tNEQ+pMkyfZVrnq7cAWUjShnnO
QlB0NFusGe39X96ktzCoiorPi2OhcKdx9zEOU8Gjtq0bXslJz+85uV1Rd2HfPh8h
Zlyot818HbCAtwboTL2vn0Gpmiz2XMlpaub2j/GYbRZG1/s1j3zsT/xdlEGHUqPS
BL8YD8LHApRQqumC+8cpGWt/byvkl2NVXkYz9NsnXhgv528FrrpmHOXsB186NHbS
pz6R1oIrn1x91i6K5pMLfGW9boOLpykeRjMWEd6Hbw6C3PZRA5M=
-----END CERTIFICATE-----
Generated at Sun May 18 04:49:54 2025 by rpki-client