Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/8Y4hKhuSGIuElKWZvhRcdRvOQEo.roa
File: 8Y4hKhuSGIuElKWZvhRcdRvOQEo.roa (raw, json)
Hash identifier: 9w6sS45hqJB1HN8g/By25W6xeaeXL4dRjVp6hpKJFcA=
Subject key identifier: F1:8E:21:2A:1B:92:18:8B:84:94:A5:99:BE:14:5C:75:1B:CE:40:4A
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 077E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8Y4hKhuSGIuElKWZvhRcdRvOQEo.roa
Signing time: Sat 17 May 2025 01:38:07 +0000
ROA not before: Sat 17 May 2025 01:38:07 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1918 (0x77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 17 01:38:07 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=F18E212A1B92188B8494A599BE145C751BCE404A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:57:89:38:48:3c:e1:17:81:87:f5:22:e7:
12:ae:a2:bb:1b:86:a5:fc:ee:a4:64:35:bb:80:d2:
22:e5:05:b5:eb:9f:7f:20:e6:3d:8e:b4:e0:fa:17:
c2:7e:42:24:24:af:9a:aa:c2:5c:8d:81:44:66:bc:
af:07:8d:a6:83:09:f4:fa:e8:cc:62:ad:d0:d0:cc:
99:12:95:73:57:43:e5:69:d7:26:7b:32:81:5e:c1:
52:16:77:54:b2:2c:3f:56:d7:0b:fe:64:45:3c:00:
b5:8b:2f:13:13:96:2b:20:d1:aa:34:25:fb:25:e0:
57:b2:b2:32:d5:e5:02:a4:04:25:f5:5e:40:2b:db:
00:a1:ec:a1:94:c2:64:d3:f5:6e:c5:cd:83:cb:02:
7c:4e:52:06:77:d2:0c:06:1c:4c:e2:15:74:af:81:
07:40:f4:d6:a7:0c:1c:3b:fd:13:f6:fb:34:33:da:
16:ba:b7:b5:14:51:2b:06:2d:45:a8:cc:42:54:8f:
12:b8:32:f6:a1:1e:bc:c5:66:ef:9e:4d:07:fd:3d:
6c:49:ec:7c:f4:6b:6e:a5:a1:8e:71:ef:a3:63:b7:
6d:a6:21:6d:56:8e:f2:2b:d1:11:0a:38:17:d3:56:
cc:3a:c6:61:a7:df:4b:d7:00:74:5b:8d:1b:9f:e0:
1b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8E:21:2A:1B:92:18:8B:84:94:A5:99:BE:14:5C:75:1B:CE:40:4A
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/8Y4hKhuSGIuElKWZvhRcdRvOQEo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:74:d5:3a:11:a4:c9:7c:40:58:a3:49:80:38:75:9b:af:d5:
71:9e:d2:9a:54:9f:79:d5:d0:fd:d5:9f:ba:93:8c:a0:23:44:
ee:7f:ef:1c:86:49:26:e3:1b:49:ee:86:39:22:4f:3c:26:cb:
3e:b0:f9:b2:65:ac:08:32:04:99:2f:8d:57:ca:5f:42:90:27:
64:fa:98:0c:eb:83:57:42:e5:bd:46:ed:2a:e0:7d:fb:d3:17:
72:3a:b1:a0:22:b1:db:19:d9:84:c2:ef:ff:89:50:3a:bc:67:
08:34:a1:aa:d3:5f:de:cf:f3:f5:8f:8b:93:68:f0:b2:63:1a:
5b:c8:ec:bb:6d:ac:c0:b3:60:84:42:87:95:f5:02:da:b0:3b:
e4:4e:42:49:2b:dd:dc:58:48:0f:f5:41:10:2b:8c:71:35:b7:
f5:54:9f:35:0a:30:e0:31:a3:76:6c:80:ce:33:68:52:44:9c:
57:a6:39:dd:75:07:9e:f4:a4:4e:c3:b9:7b:34:3e:de:d5:7d:
65:7e:37:84:c7:fe:82:f4:46:35:97:1f:af:16:c9:8f:7d:79:
f0:10:21:46:13:15:2e:4e:65:ff:9c:b2:55:7b:64:3b:78:dd:
53:2e:63:6d:46:04:f9:c1:c4:a7:f0:5f:92:cc:98:20:af:e0:
75:f2:2a:9f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICB34wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTcw
MTM4MDdaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEYxOEUyMTJBMUI5MjE4
OEI4NDk0QTU5OUJFMTQ1Qzc1MUJDRTQwNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjeVeJOEg84ReBh/Ui5xKuorsbhqX87qRkNbuA0iLlBbXrn38g
5j2OtOD6F8J+QiQkr5qqwlyNgURmvK8HjaaDCfT66MxirdDQzJkSlXNXQ+Vp1yZ7
MoFewVIWd1SyLD9W1wv+ZEU8ALWLLxMTlisg0ao0Jfsl4FeysjLV5QKkBCX1XkAr
2wCh7KGUwmTT9W7FzYPLAnxOUgZ30gwGHEziFXSvgQdA9NanDBw7/RP2+zQz2ha6
t7UUUSsGLUWozEJUjxK4MvahHrzFZu+eTQf9PWxJ7Hz0a26loY5x76Njt22mIW1W
jvIr0REKOBfTVsw6xmGn30vXAHRbjRuf4BsJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8Y4hKhuSGIuElKWZvhRcdRvOQEowHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni84WTRoS2h1U0dJdUVsS1da
dmhSY2RSdk9RRW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAGZ01ToRpMl8QFijSYA4dZuv1XGe0ppUn3nV
0P3Vn7qTjKAjRO5/7xyGSSbjG0nuhjkiTzwmyz6w+bJlrAgyBJkvjVfKX0KQJ2T6
mAzrg1dC5b1G7SrgffvTF3I6saAisdsZ2YTC7/+JUDq8Zwg0oarTX97P8/WPi5No
8LJjGlvI7LttrMCzYIRCh5X1AtqwO+ROQkkr3dxYSA/1QRArjHE1t/VUnzUKMOAx
o3ZsgM4zaFJEnFemOd11B570pE7DuXs0Pt7VfWV+N4TH/oL0RjWXH68WyY99efAQ
IUYTFS5OZf+cslV7ZDt43VMuY21GBPnBxKfwX5LMmCCv4HXyKp8=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:33:01 2025 by rpki-client