Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/vT25dY1oNnjRCaoMG-L4A6nXp6I.roa
File: vT25dY1oNnjRCaoMG-L4A6nXp6I.roa (raw, json)
Hash identifier: TY/M/wZp9AUoLeZOUJTgniIc8kPAJX2EpZav+XSqDh8=
Subject key identifier: BD:3D:B9:75:8D:68:36:78:D1:09:AA:0C:1B:E2:F8:03:A9:D7:A7:A2
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 158A
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vT25dY1oNnjRCaoMG-L4A6nXp6I.roa
Signing time: Wed 04 Jun 2025 19:09:22 +0000
ROA not before: Wed 04 Jun 2025 19:09:22 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5514 (0x158a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 4 19:09:22 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=BD3DB9758D683678D109AA0C1BE2F803A9D7A7A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:ea:10:da:82:e1:44:4d:d3:c0:d5:4d:d8:
98:17:4d:c7:ac:d4:d9:d1:7f:1d:3c:08:1a:73:5e:
52:49:dd:ba:93:2a:fc:34:42:8e:78:47:6f:76:7c:
bc:99:b0:6e:db:c3:50:50:e0:c2:d0:28:2c:5c:b9:
b7:42:c2:f4:6b:55:b0:a3:da:ab:4b:b7:3b:a8:ef:
a2:42:36:70:28:3a:0d:6f:8c:1b:50:29:4f:a3:09:
ba:41:67:54:95:d4:b2:e7:59:fc:65:3e:6e:91:05:
5b:89:ff:a8:ef:03:be:9d:d4:f1:e0:8e:61:2a:94:
2c:d6:d5:5a:14:1d:ec:bd:b8:21:b7:4d:a0:b2:43:
f0:92:57:a6:cb:e5:94:47:24:46:8a:39:56:69:3d:
49:8e:90:88:bd:e0:f8:60:09:fd:63:82:df:3c:af:
79:f2:82:d1:87:40:d7:48:06:a0:30:84:b0:7c:7a:
52:41:6a:5c:5b:56:67:b5:16:d6:f2:a7:3a:79:56:
6a:fe:7e:cb:c1:51:06:10:18:4e:a7:08:b5:1c:69:
7c:38:c9:fa:6f:c6:51:07:26:07:a5:6c:a5:2f:ff:
3e:bf:3f:bd:1c:6a:ad:71:c4:9f:39:a5:dd:e7:64:
5f:91:36:0c:0b:62:9d:86:5a:27:18:89:fa:42:55:
50:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3D:B9:75:8D:68:36:78:D1:09:AA:0C:1B:E2:F8:03:A9:D7:A7:A2
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/vT25dY1oNnjRCaoMG-L4A6nXp6I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:74:2e:49:f5:c2:3a:31:15:d2:2a:35:74:f9:b2:60:35:98:
db:00:bf:46:bb:4d:70:a9:20:da:b1:b7:e1:03:4d:96:e3:b9:
d0:05:70:cd:14:ea:04:db:eb:6f:0d:23:1e:db:dc:02:28:4a:
92:f4:54:6c:a0:24:2e:6d:c1:c0:9f:ed:73:0f:fa:98:4f:44:
45:e8:83:0f:49:e1:b6:f4:f7:35:4d:16:af:75:58:7f:ae:da:
15:9a:ee:9d:41:35:98:83:d9:fd:90:47:01:64:2f:19:d6:5b:
d1:47:0c:ae:f0:d8:c8:c8:db:51:40:52:b6:c3:2a:1e:9e:c0:
15:04:1a:7e:43:49:e1:3b:01:4e:0b:a8:50:9b:eb:e6:c1:fa:
d7:e0:22:cb:a1:f6:02:77:58:4e:e7:f5:1a:a3:4f:0e:d3:4d:
4c:4e:82:17:dd:d1:a8:be:aa:76:74:f4:be:f3:8d:0f:78:08:
d3:66:ac:21:bc:78:81:91:5c:b5:cc:cd:44:78:b1:3d:32:39:
ed:b5:a8:c0:68:5d:2e:36:3d:91:ea:ea:6c:5e:a8:02:68:38:
d1:df:c9:18:06:74:3c:e5:4c:14:ec:8f:65:f5:6d:97:69:03:
6a:05:9f:a8:1e:c4:8e:8c:6d:3e:66:e4:1b:2f:2a:5f:7e:31:
80:5d:91:fd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFYowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MDQx
OTA5MjJaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEJEM0RCOTc1OEQ2ODM2
NzhEMTA5QUEwQzFCRTJGODAzQTlEN0E3QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzLOoQ2oLhRE3TwNVN2JgXTces1NnRfx08CBpzXlJJ3bqTKvw0
Qo54R292fLyZsG7bw1BQ4MLQKCxcubdCwvRrVbCj2qtLtzuo76JCNnAoOg1vjBtQ
KU+jCbpBZ1SV1LLnWfxlPm6RBVuJ/6jvA76d1PHgjmEqlCzW1VoUHey9uCG3TaCy
Q/CSV6bL5ZRHJEaKOVZpPUmOkIi94PhgCf1jgt88r3nygtGHQNdIBqAwhLB8elJB
alxbVme1Ftbypzp5Vmr+fsvBUQYQGE6nCLUcaXw4yfpvxlEHJgelbKUv/z6/P70c
aq1xxJ85pd3nZF+RNgwLYp2GWicYifpCVVBPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUvT25dY1oNnjRCaoMG+L4A6nXp6IwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni92VDI1ZFkxb05ualJDYW9N
Ry1MNEE2blhwNkkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAEV0Lkn1wjoxFdIqNXT5smA1mNsAv0a7TXCp
INqxt+EDTZbjudAFcM0U6gTb628NIx7b3AIoSpL0VGygJC5twcCf7XMP+phPREXo
gw9J4bb09zVNFq91WH+u2hWa7p1BNZiD2f2QRwFkLxnWW9FHDK7w2MjI21FAUrbD
Kh6ewBUEGn5DSeE7AU4LqFCb6+bB+tfgIsuh9gJ3WE7n9RqjTw7TTUxOghfd0ai+
qnZ09L7zjQ94CNNmrCG8eIGRXLXMzUR4sT0yOe21qMBoXS42PZHq6mxeqAJoONHf
yRgGdDzlTBTsj2X1bZdpA2oFn6gexI6MbT5m5BsvKl9+MYBdkf0=
-----END CERTIFICATE-----
Generated at Sun Jun 22 03:55:42 2025 by rpki-client