Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/Jy_u5lSZ6MVhc_meo4ZL912wKb4.roa
File: Jy_u5lSZ6MVhc_meo4ZL912wKb4.roa (raw, json)
Hash identifier: HNDrjpJ9P+1QrP2fI0RJwmcagfsBFGCI0VVyyy6KnWE=
Subject key identifier: 27:2F:EE:E6:54:99:E8:C5:61:73:F9:9E:A3:86:4B:F7:5D:B0:29:BE
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1B66
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Jy_u5lSZ6MVhc_meo4ZL912wKb4.roa
Signing time: Thu 12 Jun 2025 14:39:52 +0000
ROA not before: Thu 12 Jun 2025 14:39:52 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7014 (0x1b66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 12 14:39:52 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=272FEEE65499E8C56173F99EA3864BF75DB029BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:a1:3d:3f:ca:f6:43:78:03:aa:ac:c7:23:
ac:19:5e:93:4d:08:5c:71:7a:56:e2:60:92:7c:37:
a1:2d:96:d8:ac:e5:d3:65:83:a8:11:f7:89:9c:07:
b8:89:5d:47:e1:b2:47:51:67:7a:5d:8d:f2:cd:a9:
90:61:54:08:7b:d2:60:1d:db:43:bb:51:9f:ba:98:
e1:16:63:03:d2:b0:84:0d:b9:73:90:35:a8:4b:6c:
ad:4c:5c:a3:fe:73:d4:93:49:dd:3b:d5:cf:e1:0a:
0f:cc:b7:fd:8b:56:9b:ec:73:ae:00:90:51:74:8b:
e7:74:b6:da:62:8b:8f:f9:7a:c1:41:6a:52:92:97:
81:ba:8c:da:34:36:98:ba:8a:5a:ae:51:18:1f:4e:
9d:7f:99:87:b7:1d:f9:5a:e3:22:0b:a8:64:5b:27:
cf:39:c2:3d:27:3b:f3:b3:b4:6f:57:5a:7f:1e:c5:
39:17:2a:cd:bc:5d:90:66:72:3e:ab:b1:94:f1:48:
18:ef:26:17:a6:60:3f:53:e1:ba:c4:4a:0c:e1:3c:
c8:36:68:4a:f1:72:1d:21:0b:56:ae:b2:c1:3d:d9:
96:50:31:6a:57:27:6a:5b:09:36:3b:dd:12:89:e1:
00:e9:5c:3b:95:ea:3f:fe:a7:01:50:b9:29:fa:60:
fd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2F:EE:E6:54:99:E8:C5:61:73:F9:9E:A3:86:4B:F7:5D:B0:29:BE
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/Jy_u5lSZ6MVhc_meo4ZL912wKb4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:9d:08:64:a9:d7:3a:9f:b0:7d:ae:94:6a:de:ea:f3:d1:82:
70:33:aa:0b:89:7e:a8:b6:51:ad:25:d3:f1:56:24:59:64:4d:
e2:db:e5:ad:f1:20:7c:8a:3f:3c:7c:11:9e:b3:d6:8a:c2:81:
5b:84:51:b8:da:1c:18:2d:9c:4f:ee:9b:64:88:c3:85:e5:c0:
ee:23:3b:0c:d5:32:7f:a2:c7:f4:de:65:d4:a3:55:08:d4:51:
75:8a:94:ab:e4:59:da:13:aa:03:7b:5f:f6:b4:c5:82:c2:b4:
59:62:d1:60:00:ad:11:46:bb:f5:53:94:32:91:df:4c:f2:9a:
20:c1:5d:0f:ec:39:fd:15:62:2c:58:cd:78:f2:ec:92:5a:2d:
d5:f8:48:53:85:63:36:7b:fb:e9:0d:48:bd:9c:b3:d5:b4:7b:
d3:ef:5d:a1:d3:dd:a9:e8:f2:cb:e9:45:19:a2:38:0a:73:97:
b7:50:cc:3e:c1:b3:64:d5:1e:5d:23:ee:fd:e2:3f:7d:be:99:
20:5c:f8:40:07:90:40:0e:dd:77:4e:c8:f2:94:bf:99:38:45:
70:ed:94:78:72:7f:52:b4:82:41:ff:c4:0c:ba:fc:31:de:89:
a1:37:3b:64:2f:c6:14:fb:f4:6b:da:6a:d5:80:a8:1b:37:02:
c1:96:00:93
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG2YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTIx
NDM5NTJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDI3MkZFRUU2NTQ5OUU4
QzU2MTczRjk5RUEzODY0QkY3NURCMDI5QkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCY1aE9P8r2Q3gDqqzHI6wZXpNNCFxxelbiYJJ8N6Etltis5dNl
g6gR94mcB7iJXUfhskdRZ3pdjfLNqZBhVAh70mAd20O7UZ+6mOEWYwPSsIQNuXOQ
NahLbK1MXKP+c9STSd071c/hCg/Mt/2LVpvsc64AkFF0i+d0ttpii4/5esFBalKS
l4G6jNo0Npi6ilquURgfTp1/mYe3Hfla4yILqGRbJ885wj0nO/OztG9XWn8exTkX
Ks28XZBmcj6rsZTxSBjvJhemYD9T4brESgzhPMg2aErxch0hC1aussE92ZZQMWpX
J2pbCTY73RKJ4QDpXDuV6j/+pwFQuSn6YP2LAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUJy/u5lSZ6MVhc/meo4ZL912wKb4wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9KeV91NWxTWjZNVmhjX21l
bzRaTDkxMndLYjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAEOdCGSp1zqfsH2ulGre6vPRgnAzqguJfqi2
Ua0l0/FWJFlkTeLb5a3xIHyKPzx8EZ6z1orCgVuEUbjaHBgtnE/um2SIw4XlwO4j
OwzVMn+ix/TeZdSjVQjUUXWKlKvkWdoTqgN7X/a0xYLCtFli0WAArRFGu/VTlDKR
30zymiDBXQ/sOf0VYixYzXjy7JJaLdX4SFOFYzZ7++kNSL2cs9W0e9PvXaHT3ano
8svpRRmiOApzl7dQzD7Bs2TVHl0j7v3iP32+mSBc+EAHkEAO3XdOyPKUv5k4RXDt
lHhyf1K0gkH/xAy6/DHeiaE3O2QvxhT79GvaatWAqBs3AsGWAJM=
-----END CERTIFICATE-----
Generated at Sat Jun 21 16:18:30 2025 by rpki-client