Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/kEynknLkhn6WnnBRk7I68Fyt8dY.roa
File: kEynknLkhn6WnnBRk7I68Fyt8dY.roa (raw, json)
Hash identifier: AatTn59zn/gq0g9gjL6LfG/Rw3VJP+JugojPnzirXsI=
Subject key identifier: 90:4C:A7:92:72:E4:86:7E:96:9E:70:51:93:B2:3A:F0:5C:AD:F1:D6
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 07AA
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kEynknLkhn6WnnBRk7I68Fyt8dY.roa
Signing time: Sat 17 May 2025 07:08:16 +0000
ROA not before: Sat 17 May 2025 07:08:16 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1962 (0x7aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 07:08:16 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=904CA79272E4867E969E705193B23AF05CADF1D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:d8:a3:d1:29:a9:6c:2c:5f:98:16:96:ac:
92:e5:b3:20:5c:ff:18:14:f6:e9:8a:d1:f9:97:e1:
31:4c:be:d4:30:58:81:46:95:d5:f0:53:5e:d1:83:
56:42:7f:ed:da:bf:5c:cb:57:f4:00:76:c0:38:04:
c5:6e:ee:5d:0c:9c:03:e8:47:3d:c8:6e:e0:d9:b4:
ef:1a:bc:3f:cf:96:48:81:5a:31:d7:71:51:c8:e8:
73:eb:ec:31:d1:ac:08:4a:0c:9a:9d:dd:14:79:b2:
80:56:12:67:32:b9:ee:48:fb:42:a9:6c:d4:c3:33:
14:77:4b:92:64:eb:97:68:23:17:e8:0c:9a:3a:d7:
40:3f:b6:ee:14:b0:b8:89:34:18:d4:75:4e:59:cd:
8b:a5:e6:6f:79:06:28:fa:f9:16:ba:9e:e5:c1:29:
d8:73:e9:15:d7:7f:ef:f0:f8:8c:61:4c:6c:03:13:
ee:72:6a:ba:6b:f8:3e:36:72:66:04:45:fe:e2:fc:
c0:fb:07:0c:ac:16:8a:57:ba:07:47:bb:72:15:b1:
b5:50:5c:b8:ff:40:35:5d:0d:3b:8c:75:a0:2a:5b:
88:96:d5:69:f2:d5:9b:6a:52:9b:37:59:c6:fa:ca:
e7:67:f9:2d:45:c4:2f:04:06:f3:c4:14:a3:f2:67:
d5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4C:A7:92:72:E4:86:7E:96:9E:70:51:93:B2:3A:F0:5C:AD:F1:D6
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/kEynknLkhn6WnnBRk7I68Fyt8dY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:6b:4f:95:a8:eb:4c:71:20:9d:84:3e:92:2e:2b:6a:cc:9b:
e7:23:a4:46:ef:a8:8b:22:e4:b7:84:23:10:72:33:29:f3:28:
50:9a:d6:ff:49:c1:7c:c6:1d:a2:b4:57:77:75:d2:73:82:8f:
f7:c4:97:25:c6:63:0e:b3:78:1b:65:62:4b:5d:7b:56:25:19:
71:d3:06:a9:0a:9f:e1:33:62:5b:44:c6:c9:78:3d:99:6d:75:
a0:6d:32:02:4f:f2:f1:f2:38:a6:bb:82:6b:5a:60:92:80:83:
5d:cf:92:c4:be:34:c5:dd:ac:25:59:b0:44:0c:19:68:95:0f:
f8:0d:73:45:c0:55:bf:7b:90:4d:79:79:d0:7c:3a:2e:7e:12:
9a:d6:b2:68:3c:23:78:aa:fc:1e:3a:01:7e:a4:17:cc:ee:35:
98:b2:b7:8b:04:bb:9f:2a:74:1e:b4:a1:3f:62:0f:34:47:f5:
d8:25:d4:69:da:e4:6d:7e:ce:76:cb:8b:d0:71:95:c4:45:e6:
d9:f0:c7:d1:93:c3:46:dc:20:49:17:96:b6:72:64:b5:3f:7c:
e7:bb:39:d7:25:43:f6:4b:23:46:f8:01:f3:7f:5e:aa:6c:29:
1b:56:c9:16:96:a7:f0:3b:56:b0:e1:bb:9f:e5:8c:80:02:0b:
41:16:ca:d8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB6owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTcw
NzA4MTZaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDkwNENBNzkyNzJFNDg2
N0U5NjlFNzA1MTkzQjIzQUYwNUNBREYxRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClgdij0SmpbCxfmBaWrJLlsyBc/xgU9umK0fmX4TFMvtQwWIFG
ldXwU17Rg1ZCf+3av1zLV/QAdsA4BMVu7l0MnAPoRz3IbuDZtO8avD/PlkiBWjHX
cVHI6HPr7DHRrAhKDJqd3RR5soBWEmcyue5I+0KpbNTDMxR3S5Jk65doIxfoDJo6
10A/tu4UsLiJNBjUdU5ZzYul5m95Bij6+Ra6nuXBKdhz6RXXf+/w+IxhTGwDE+5y
arpr+D42cmYERf7i/MD7BwysFopXugdHu3IVsbVQXLj/QDVdDTuMdaAqW4iW1Wny
1ZtqUps3Wcb6yudn+S1FxC8EBvPEFKPyZ9V5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUkEynknLkhn6WnnBRk7I68Fyt8dYwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9rRXlua25Ma2huNldubkJS
azdJNjhGeXQ4ZFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAFVrT5Wo60xxIJ2EPpIuK2rMm+cjpEbvqIsi
5LeEIxByMynzKFCa1v9JwXzGHaK0V3d10nOCj/fElyXGYw6zeBtlYktde1YlGXHT
BqkKn+EzYltExsl4PZltdaBtMgJP8vHyOKa7gmtaYJKAg13PksS+NMXdrCVZsEQM
GWiVD/gNc0XAVb97kE15edB8Oi5+EprWsmg8I3iq/B46AX6kF8zuNZiyt4sEu58q
dB60oT9iDzRH9dgl1Gna5G1+znbLi9BxlcRF5tnwx9GTw0bcIEkXlrZyZLU/fOe7
OdclQ/ZLI0b4AfN/XqpsKRtWyRaWp/A7VrDhu5/ljIACC0EWytg=
-----END CERTIFICATE-----
Generated at Sun May 18 13:11:10 2025 by rpki-client