Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PKXsqDTT4wxiqz6v_CqoIc-qH-0.roa
File: PKXsqDTT4wxiqz6v_CqoIc-qH-0.roa (raw, json)
Hash identifier: IGHN9fQGtfT+e4eLOgaurVIv7GJpObbs03MQpJrdSSA=
Subject key identifier: 3C:A5:EC:A8:34:D3:E3:0C:62:AB:3E:AF:FC:2A:A8:21:CF:AA:1F:ED
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0846
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PKXsqDTT4wxiqz6v_CqoIc-qH-0.roa
Signing time: Sun 18 May 2025 02:38:14 +0000
ROA not before: Sun 18 May 2025 02:38:14 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2118 (0x846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 18 02:38:14 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3CA5ECA834D3E30C62AB3EAFFC2AA821CFAA1FED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:22:2f:cc:19:80:b0:cd:75:9c:d6:b6:af:
10:4d:f2:f2:55:93:2d:f5:4a:a6:33:a5:f5:ab:49:
d0:28:4b:7f:8f:98:a8:99:8c:0e:31:68:5f:b6:99:
70:80:20:67:45:05:cf:d5:94:d6:b6:aa:98:fb:7c:
77:10:6c:ed:81:d4:a4:f3:e9:d1:23:e8:bd:fe:cc:
69:c9:58:d1:bb:96:8b:d7:a8:53:4c:93:db:d9:a4:
a7:ad:58:8b:9a:f6:98:1f:21:af:d3:3a:1e:a8:28:
a2:64:d6:19:af:32:46:0e:3f:11:91:4b:03:d1:66:
a1:aa:b6:2c:14:05:2d:ad:71:3d:de:99:a6:25:de:
da:61:5b:11:a5:85:17:b6:35:03:66:ce:4e:2c:50:
7b:a5:b5:04:1e:c6:43:f2:26:11:1e:73:b9:3c:32:
a3:2d:f8:1c:17:ab:ed:1a:a7:76:95:a3:e8:32:e6:
b5:32:0b:51:f0:4d:5e:0d:31:79:41:52:f1:15:c8:
c2:af:64:e1:ef:4a:05:ad:f3:0d:55:69:63:ff:25:
71:c2:cc:0a:77:c0:57:a8:2d:9b:78:32:b9:44:29:
18:22:89:53:36:f4:30:8a:e1:82:b1:f0:a0:58:5c:
a9:c2:0f:f7:ae:62:44:4a:49:38:5e:42:91:c4:2e:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A5:EC:A8:34:D3:E3:0C:62:AB:3E:AF:FC:2A:A8:21:CF:AA:1F:ED
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PKXsqDTT4wxiqz6v_CqoIc-qH-0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:34:33:96:af:32:31:02:79:29:a5:0d:cb:d5:08:6d:f5:6a:
b8:d1:f4:e3:02:81:5a:44:c3:19:db:d8:b1:7e:03:98:0d:f3:
b3:a2:0e:37:13:cf:3b:1d:71:f8:36:ae:23:af:83:40:27:62:
72:4a:49:83:7d:91:57:18:78:82:6a:ad:b4:7c:3b:84:ca:ab:
ca:eb:b4:cb:ed:39:af:43:68:3b:e9:b7:7a:ec:59:ad:f9:0b:
56:b0:ad:e0:9e:15:02:4b:b4:49:85:bb:03:7b:02:f8:77:04:
80:2c:91:f2:42:b8:8a:88:61:6b:38:66:6b:6c:ae:a2:d7:c5:
e8:aa:1a:60:89:5a:7a:86:2a:a7:a4:07:2f:80:10:2a:04:c8:
9a:e2:9a:6d:cd:63:6b:f8:f6:20:9f:d0:ce:f6:67:ed:b1:14:
47:b3:ed:d5:3a:63:22:87:fd:33:88:3c:bb:01:4a:79:d5:23:
a8:be:b4:07:80:c6:f6:da:e9:6e:47:cf:2c:d7:4c:40:d7:b1:
65:f1:8d:69:89:8f:34:f2:9f:8c:fb:9f:0a:47:dc:e4:3c:9f:
85:9a:6a:ac:25:b4:36:66:58:21:db:fb:13:08:95:d1:22:26:
b6:0e:5f:0c:10:2a:a0:d3:82:3b:9d:7b:3b:cd:12:32:4d:7a:
bc:8c:7f:f1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCEYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTgw
MjM4MTRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDNDQTVFQ0E4MzREM0Uz
MEM2MkFCM0VBRkZDMkFBODIxQ0ZBQTFGRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2nyIvzBmAsM11nNa2rxBN8vJVky31SqYzpfWrSdAoS3+PmKiZ
jA4xaF+2mXCAIGdFBc/VlNa2qpj7fHcQbO2B1KTz6dEj6L3+zGnJWNG7lovXqFNM
k9vZpKetWIua9pgfIa/TOh6oKKJk1hmvMkYOPxGRSwPRZqGqtiwUBS2tcT3emaYl
3tphWxGlhRe2NQNmzk4sUHultQQexkPyJhEec7k8MqMt+BwXq+0ap3aVo+gy5rUy
C1HwTV4NMXlBUvEVyMKvZOHvSgWt8w1VaWP/JXHCzAp3wFeoLZt4MrlEKRgiiVM2
9DCK4YKx8KBYXKnCD/euYkRKSTheQpHELp2fAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPKXsqDTT4wxiqz6v/CqoIc+qH+0wHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9QS1hzcURUVDR3eGlxejZ2
X0Nxb0ljLXFILTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAG00M5avMjECeSmlDcvVCG31arjR9OMCgVpE
wxnb2LF+A5gN87OiDjcTzzsdcfg2riOvg0AnYnJKSYN9kVcYeIJqrbR8O4TKq8rr
tMvtOa9DaDvpt3rsWa35C1awreCeFQJLtEmFuwN7Avh3BIAskfJCuIqIYWs4Zmts
rqLXxeiqGmCJWnqGKqekBy+AECoEyJrimm3NY2v49iCf0M72Z+2xFEez7dU6YyKH
/TOIPLsBSnnVI6i+tAeAxvba6W5HzyzXTEDXsWXxjWmJjzTyn4z7nwpH3OQ8n4Wa
aqwltDZmWCHb+xMIldEiJrYOXwwQKqDTgjudezvNEjJNeryMf/E=
-----END CERTIFICATE-----
Generated at Sun Jun 22 03:59:01 2025 by rpki-client