Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/riBp_vRQP_FMVpAWVMEYfrY_6Ks.roa
File: riBp_vRQP_FMVpAWVMEYfrY_6Ks.roa (raw, json)
Hash identifier: QAf59gAzT9flp+pK7QV132AtttmLQ1j+ZfJgRyN2CeU=
Subject key identifier: AE:20:69:FE:F4:50:3F:F1:4C:56:90:16:54:C1:18:7E:B6:3F:E8:AB
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: C6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/riBp_vRQP_FMVpAWVMEYfrY_6Ks.roa
Signing time: Thu 08 May 2025 02:45:21 +0000
ROA not before: Thu 08 May 2025 02:45:21 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 8 02:45:21 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=AE2069FEF4503FF14C56901654C1187EB63FE8AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:7d:c4:1d:c3:e7:60:2a:57:65:91:39:7c:
3f:9f:a7:b3:7c:c0:8e:0f:b8:da:51:f8:e4:ca:46:
e1:38:31:fe:c0:81:4d:b7:b6:b1:fe:7d:6e:94:76:
5a:05:3f:a5:81:63:3a:ae:9b:32:be:07:be:ac:8f:
4a:fe:8c:f4:03:da:b3:ba:96:2a:57:ea:7c:9f:d4:
7c:71:b3:00:b9:d4:f9:77:85:9f:31:18:6c:13:14:
b5:06:a3:97:4c:9d:e6:e8:2b:8c:cb:6f:61:78:78:
d3:06:05:9d:2a:15:df:2a:11:40:22:d1:7d:c6:66:
ea:e2:30:b1:b9:41:5c:86:be:09:6c:4e:fd:2b:46:
ff:42:69:d8:0c:df:5a:4b:eb:44:6a:95:d7:b5:b5:
1b:1d:2e:bb:46:55:eb:aa:f7:ba:aa:08:fd:53:c1:
17:af:38:2a:b9:1c:75:b0:0c:9b:5c:80:43:bd:a2:
c0:af:6c:67:ed:97:b1:9d:f3:56:b7:66:fc:f1:aa:
66:dd:e8:4c:cc:87:e0:d4:00:e1:67:c9:5a:d1:ba:
11:e1:09:b9:a6:4c:1f:27:ef:3e:e9:6e:6f:13:5f:
63:8f:3c:43:ce:53:08:87:d3:45:36:f9:6b:45:0a:
cf:da:6c:6d:07:18:be:be:45:ac:32:d4:ee:ba:84:
6a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:20:69:FE:F4:50:3F:F1:4C:56:90:16:54:C1:18:7E:B6:3F:E8:AB
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/riBp_vRQP_FMVpAWVMEYfrY_6Ks.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:c1:1e:38:72:0d:7c:a1:25:7f:82:39:b4:28:96:f0:4c:47:
be:fb:e2:a1:6d:82:13:f3:7b:d9:c7:d4:90:b6:18:42:f6:67:
23:53:5a:1e:c7:fd:3f:b5:4f:7e:64:e0:e5:4e:72:50:bb:f7:
ee:97:51:55:a3:66:72:24:2d:82:80:90:eb:ac:32:52:10:c8:
4d:c5:d7:54:9a:8a:f6:4a:64:38:de:c6:81:16:7e:88:73:3c:
3c:37:45:3d:9c:ac:7e:f8:63:cc:27:73:55:43:5b:64:df:77:
d7:60:a0:79:30:1b:cc:6a:34:b7:e6:96:ee:c8:e9:fc:ce:34:
9c:ad:af:aa:d1:b5:82:df:c7:a4:a5:eb:84:03:80:16:75:c8:
07:f1:23:fc:06:bc:ff:14:af:86:d7:12:7f:48:79:22:6e:c7:
75:d7:fb:8a:96:6c:23:73:17:17:ce:f8:78:63:8a:fa:ea:cb:
e4:a0:17:22:42:85:15:41:23:89:f4:eb:e0:24:8c:ca:fa:2e:
2f:a6:57:3f:a6:e1:77:09:c5:6d:32:9d:04:cf:da:6d:15:c7:
cc:16:f1:60:76:9a:2b:de:7b:c3:73:96:54:08:5e:4f:1c:27:
f9:71:90:94:40:29:3d:d0:81:3c:41:e7:b7:37:43:2e:04:26:
d0:f9:4d:04
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MDgw
MjQ1MjFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEFFMjA2OUZFRjQ1MDNG
RjE0QzU2OTAxNjU0QzExODdFQjYzRkU4QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUKH3EHcPnYCpXZZE5fD+fp7N8wI4PuNpR+OTKRuE4Mf7AgU23
trH+fW6UdloFP6WBYzqumzK+B76sj0r+jPQD2rO6lipX6nyf1HxxswC51Pl3hZ8x
GGwTFLUGo5dMneboK4zLb2F4eNMGBZ0qFd8qEUAi0X3GZuriMLG5QVyGvglsTv0r
Rv9CadgM31pL60Rqlde1tRsdLrtGVeuq97qqCP1TwRevOCq5HHWwDJtcgEO9osCv
bGftl7Gd81a3Zvzxqmbd6EzMh+DUAOFnyVrRuhHhCbmmTB8n7z7pbm8TX2OPPEPO
UwiH00U2+WtFCs/abG0HGL6+Rawy1O66hGqZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUriBp/vRQP/FMVpAWVMEYfrY/6KswHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9yaUJwX3ZSUVBfRk1WcEFX
Vk1FWWZyWV82S3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAIrBHjhyDXyhJX+CObQolvBMR7774qFtghPz
e9nH1JC2GEL2ZyNTWh7H/T+1T35k4OVOclC79+6XUVWjZnIkLYKAkOusMlIQyE3F
11SaivZKZDjexoEWfohzPDw3RT2crH74Y8wnc1VDW2Tfd9dgoHkwG8xqNLfmlu7I
6fzONJytr6rRtYLfx6Sl64QDgBZ1yAfxI/wGvP8Ur4bXEn9IeSJux3XX+4qWbCNz
FxfO+Hhjivrqy+SgFyJChRVBI4n06+AkjMr6Li+mVz+m4XcJxW0ynQTP2m0Vx8wW
8WB2mivee8NzllQIXk8cJ/lxkJRAKT3QgTxB57c3Qy4EJtD5TQQ=
-----END CERTIFICATE-----
Generated at Sat May 17 23:19:08 2025 by rpki-client