Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/avWzXv184r7Q-scAMBI43DVfTko.roa
File: avWzXv184r7Q-scAMBI43DVfTko.roa (raw, json)
Hash identifier: u8KkFoWMiV4i+IsDjr0p0yrtnBp/HgDOszOCFEYNO7U=
Subject key identifier: 6A:F5:B3:5E:FD:7C:E2:BE:D0:FA:C7:00:30:12:38:DC:35:5F:4E:4A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 01E2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/avWzXv184r7Q-scAMBI43DVfTko.roa
Signing time: Fri 09 May 2025 14:07:46 +0000
ROA not before: Fri 09 May 2025 14:07:46 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482 (0x1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 9 14:07:46 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=6AF5B35EFD7CE2BED0FAC700301238DC355F4E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d7:ed:ea:f0:a1:24:16:38:db:50:d5:d3:53:
82:ca:d4:5e:0f:49:f4:8d:e8:7d:63:03:90:21:9a:
10:77:31:b2:a6:14:82:c4:65:84:3a:61:8f:f4:3f:
f9:2a:1d:dc:11:06:6e:e2:c8:b8:b8:87:7f:15:d9:
35:0c:06:35:d9:fa:1d:a4:3f:f3:4f:44:9d:e0:6c:
dc:98:9b:08:81:97:37:89:3b:fc:24:a3:a0:83:c4:
e4:19:89:91:e6:20:e3:6c:96:17:e6:87:bd:76:e2:
6d:ad:5a:75:9e:b8:85:bb:64:69:f2:5d:22:39:6f:
0f:9b:e2:22:0f:3c:97:2b:d3:f5:4b:34:c6:83:97:
15:e4:d7:01:99:49:78:2a:1c:1f:3a:c6:4b:19:66:
95:f4:17:5a:55:aa:4c:24:7d:8e:6d:4e:02:96:af:
9d:56:1f:4b:9e:95:41:13:c9:73:f1:e5:10:b8:cf:
f0:f5:83:3b:2b:5b:77:53:a6:68:dd:27:57:7b:54:
d6:09:d4:79:0c:0e:ef:65:73:47:16:9d:d9:4f:4e:
20:13:0e:62:49:29:5f:74:e0:15:16:e9:b8:16:5c:
50:5c:e3:dc:66:a8:9b:19:a1:d2:ee:21:4b:94:06:
b8:be:cb:a2:92:9c:47:b0:49:89:7f:bd:ea:c2:d2:
6f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F5:B3:5E:FD:7C:E2:BE:D0:FA:C7:00:30:12:38:DC:35:5F:4E:4A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/avWzXv184r7Q-scAMBI43DVfTko.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:0d:ba:b6:8e:5a:41:7e:64:a7:17:35:3d:9c:5c:91:24:4e:
1a:ec:ed:3e:53:24:5d:63:4a:d9:79:b8:44:81:97:1c:45:60:
35:6d:66:3a:6f:76:e7:25:5e:68:f7:3f:c3:06:3a:69:a5:de:
e4:26:38:61:3c:66:17:c0:8d:05:2e:68:e0:c4:74:36:bc:73:
d5:63:70:f7:0a:95:6d:8b:e9:ac:91:37:f3:b1:83:5a:7c:fb:
64:09:ec:e3:72:80:26:4a:3e:42:2e:c9:98:b5:1c:c3:47:f2:
d4:4e:27:84:a4:05:c8:6b:79:dd:54:4a:55:2a:8a:4b:61:ff:
76:73:da:c8:d3:1a:fa:bd:f4:de:09:2a:b8:e2:b7:89:27:9c:
15:be:0d:7e:fa:65:a6:0d:6f:a6:55:f0:10:55:d3:9d:8b:c9:
dc:9a:af:06:0a:39:f1:f5:7d:46:5d:b1:7a:6e:c8:65:1b:4d:
e4:0d:26:fd:e8:fe:51:0d:d9:2c:83:6a:da:04:7c:88:e0:48:
2f:f3:93:37:3f:c4:1f:8b:e9:b6:65:4a:d0:9a:26:1e:67:75:
32:7c:c8:2c:a1:40:42:85:21:a2:73:da:ac:3f:2d:61:f1:3b:
f3:a9:a1:b0:1f:97:a2:09:b1:06:87:5a:6a:3f:43:5c:52:d0:
ae:36:9b:4b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDkx
NDA3NDZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDZBRjVCMzVFRkQ3Q0Uy
QkVEMEZBQzcwMDMwMTIzOERDMzU1RjRFNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDu1+3q8KEkFjjbUNXTU4LK1F4PSfSN6H1jA5AhmhB3MbKmFILE
ZYQ6YY/0P/kqHdwRBm7iyLi4h38V2TUMBjXZ+h2kP/NPRJ3gbNyYmwiBlzeJO/wk
o6CDxOQZiZHmIONslhfmh7124m2tWnWeuIW7ZGnyXSI5bw+b4iIPPJcr0/VLNMaD
lxXk1wGZSXgqHB86xksZZpX0F1pVqkwkfY5tTgKWr51WH0uelUETyXPx5RC4z/D1
gzsrW3dTpmjdJ1d7VNYJ1HkMDu9lc0cWndlPTiATDmJJKV904BUW6bgWXFBc49xm
qJsZodLuIUuUBri+y6KSnEewSYl/verC0m+nAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUavWzXv184r7Q+scAMBI43DVfTkowHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9hdld6WHYxODRyN1Etc2NB
TUJJNDNEVmZUa28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAHANuraOWkF+ZKcXNT2cXJEkThrs7T5TJF1j
Stl5uESBlxxFYDVtZjpvduclXmj3P8MGOmml3uQmOGE8ZhfAjQUuaODEdDa8c9Vj
cPcKlW2L6ayRN/Oxg1p8+2QJ7ONygCZKPkIuyZi1HMNH8tROJ4SkBchred1USlUq
ikth/3Zz2sjTGvq99N4JKrjit4knnBW+DX76ZaYNb6ZV8BBV052LydyarwYKOfH1
fUZdsXpuyGUbTeQNJv3o/lEN2SyDatoEfIjgSC/zkzc/xB+L6bZlStCaJh5ndTJ8
yCyhQEKFIaJz2qw/LWHxO/OpobAfl6IJsQaHWmo/Q1xS0K42m0s=
-----END CERTIFICATE-----
Generated at Sun May 18 02:01:39 2025 by rpki-client