Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/3TLB-UY2JBGGQo8AFSZdTZiW4Eo.roa
File: 3TLB-UY2JBGGQo8AFSZdTZiW4Eo.roa (raw, json)
Hash identifier: fvcD3eM7XezwclToCZ/0cTs0mRrDp9F6TS309UgC73A=
Subject key identifier: DD:32:C1:F9:46:36:24:11:86:42:8F:00:15:26:5D:4D:98:96:E0:4A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0EE2
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3TLB-UY2JBGGQo8AFSZdTZiW4Eo.roa
Signing time: Mon 26 May 2025 22:08:47 +0000
ROA not before: Mon 26 May 2025 22:08:47 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3810 (0xee2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 26 22:08:47 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=DD32C1F94636241186428F0015265D4D9896E04A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:bb:2c:a0:f6:f2:26:ff:b2:23:3f:3d:11:
0e:b0:57:3b:2e:51:65:eb:da:63:7d:38:8e:63:84:
3d:51:f5:97:ba:45:d4:b1:24:53:55:75:02:77:bc:
3f:93:22:b9:83:89:48:50:37:40:9b:5c:f7:9c:58:
a5:c6:ed:4f:bd:a0:c7:f6:59:84:e0:84:85:ba:49:
28:22:1c:6c:9a:54:17:4e:a9:95:00:05:78:af:b1:
06:42:a0:a4:f6:7f:c6:ef:42:e9:01:c5:c6:6e:28:
65:17:4a:12:1f:7c:e6:15:bf:28:24:fc:36:f4:c9:
2a:aa:3d:ef:3d:db:cb:c4:a2:d9:9c:b9:ab:29:2d:
10:f4:ef:8a:c3:9a:84:30:17:f3:f8:c2:8c:b1:f2:
1e:04:85:fa:47:da:e8:1f:35:e7:e3:6a:f6:b5:20:
ab:ab:1a:55:cb:df:aa:a1:49:6f:41:a4:62:69:b6:
39:cf:ff:78:68:59:d3:f0:21:fc:c7:46:01:d8:08:
98:81:fd:23:23:d8:fc:f1:00:0d:ee:be:a5:3c:60:
e0:c6:56:eb:91:bb:ac:ac:63:4e:99:ff:88:a2:67:
c6:20:0a:49:c4:c2:4e:86:ca:73:c4:9c:1c:b6:a4:
a6:82:9e:22:5b:b3:5b:ff:f8:5c:18:9f:18:5e:7c:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:32:C1:F9:46:36:24:11:86:42:8F:00:15:26:5D:4D:98:96:E0:4A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/3TLB-UY2JBGGQo8AFSZdTZiW4Eo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:47:05:fe:38:86:1e:51:ff:f1:34:28:e6:46:9a:06:27:26:
fd:8f:a5:c6:69:d6:ab:2e:1c:b0:4a:a9:d0:0b:5a:5e:48:25:
0c:ff:eb:35:5c:ab:64:72:5e:d0:8a:ae:e4:ca:dd:62:3a:10:
b3:ac:99:7d:a2:12:97:cc:15:f9:9a:4e:b0:8b:e9:fb:aa:4a:
08:15:f8:76:6b:9d:3f:f5:13:83:ff:d7:05:43:66:32:54:02:
50:2e:41:45:94:75:33:fb:68:51:c0:87:6f:84:e9:82:a6:a1:
a2:ca:86:73:55:65:7e:db:64:a6:c2:df:6b:6a:5e:bd:b7:14:
50:64:34:c6:d9:0c:04:9a:f8:75:3e:2a:27:df:9d:0e:bb:3c:
f0:4d:ab:a1:a0:ce:ec:e2:41:6e:f8:a9:5d:bf:07:80:51:88:
8c:6c:97:6a:60:12:5e:28:4d:21:52:8e:f4:ff:e9:42:c2:4c:
7f:46:97:19:00:0c:83:1f:c2:b2:54:db:33:3a:0d:44:52:83:
cb:d7:e5:0f:a0:80:b1:6c:99:e0:c1:4c:9c:36:b6:45:e2:f9:
94:af:96:b6:52:41:55:a4:5d:68:a1:ec:54:f3:a1:a9:91:6e:
5c:90:d7:ae:85:17:7b:4a:9f:eb:e8:7c:0f:77:90:08:58:f1:
ae:f7:ba:da
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDuIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MjYy
MjA4NDdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEREMzJDMUY5NDYzNjI0
MTE4NjQyOEYwMDE1MjY1RDREOTg5NkUwNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoDbssoPbyJv+yIz89EQ6wVzsuUWXr2mN9OI5jhD1R9Ze6RdSx
JFNVdQJ3vD+TIrmDiUhQN0CbXPecWKXG7U+9oMf2WYTghIW6SSgiHGyaVBdOqZUA
BXivsQZCoKT2f8bvQukBxcZuKGUXShIffOYVvygk/Db0ySqqPe8928vEotmcuasp
LRD074rDmoQwF/P4woyx8h4EhfpH2ugfNefjava1IKurGlXL36qhSW9BpGJptjnP
/3hoWdPwIfzHRgHYCJiB/SMj2PzxAA3uvqU8YODGVuuRu6ysY06Z/4iiZ8YgCknE
wk6GynPEnBy2pKaCniJbs1v/+FwYnxhefIQLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU3TLB+UY2JBGGQo8AFSZdTZiW4EowHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni8zVExCLVVZMkpCR0dRbzhB
RlNaZFRaaVc0RW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBADtHBf44hh5R//E0KOZGmgYnJv2PpcZp1qsu
HLBKqdALWl5IJQz/6zVcq2RyXtCKruTK3WI6ELOsmX2iEpfMFfmaTrCL6fuqSggV
+HZrnT/1E4P/1wVDZjJUAlAuQUWUdTP7aFHAh2+E6YKmoaLKhnNVZX7bZKbC32tq
Xr23FFBkNMbZDASa+HU+KiffnQ67PPBNq6GgzuziQW74qV2/B4BRiIxsl2pgEl4o
TSFSjvT/6ULCTH9GlxkADIMfwrJU2zM6DURSg8vX5Q+ggLFsmeDBTJw2tkXi+ZSv
lrZSQVWkXWih7FTzoamRblyQ166FF3tKn+vofA93kAhY8a73uto=
-----END CERTIFICATE-----
Generated at Thu Jun 19 05:59:02 2025 by rpki-client