Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PSTVh6mQhK15jupkAn-6ZMTmIYI.roa
File: PSTVh6mQhK15jupkAn-6ZMTmIYI.roa (raw, json)
Hash identifier: Dm+N1VmipujmsgJpKcmzv6j2V+Iar/KxBEFv7vGQ6do=
Subject key identifier: 3D:24:D5:87:A9:90:84:AD:79:8E:EA:64:02:7F:BA:64:C4:E6:21:82
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1F16
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PSTVh6mQhK15jupkAn-6ZMTmIYI.roa
Signing time: Tue 17 Jun 2025 12:40:04 +0000
ROA not before: Tue 17 Jun 2025 12:40:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7958 (0x1f16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 17 12:40:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3D24D587A99084AD798EEA64027FBA64C4E62182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:95:fa:0f:08:3f:c8:d2:67:10:ad:42:52:0f:
cf:d8:f8:72:1e:ed:73:c7:be:f1:bc:14:a4:5e:f5:
a5:fb:77:aa:f3:74:20:ea:33:d1:9b:45:cd:ad:94:
24:af:b9:d1:bb:ec:fd:95:0b:ee:5f:dd:5a:2f:f0:
1e:e9:76:e6:58:23:c6:02:77:19:54:fb:32:b5:ac:
36:a6:a1:b9:37:8f:a0:d8:bd:19:b0:38:64:b5:3d:
83:fd:99:9f:6f:91:0a:65:4d:d2:cb:c5:88:bb:72:
72:fc:4c:63:ba:2d:68:57:61:e3:a4:ee:46:ae:59:
ee:fb:bf:e9:e9:3a:ee:21:dd:44:9d:e0:87:8d:a1:
41:13:4b:4e:5b:01:72:02:2b:c9:f3:03:27:f6:58:
6d:48:61:c7:97:96:3f:c4:d1:1e:29:93:94:6d:e2:
d6:56:7e:80:3f:f9:2c:7b:75:c1:97:ab:df:47:3e:
fb:42:31:39:87:ba:7d:25:fb:a8:45:06:02:7a:43:
b8:e8:a3:59:26:b6:78:bc:2d:50:48:50:f6:3a:04:
34:16:88:24:bb:c2:63:04:e2:33:d3:0f:04:f4:48:
a0:31:01:11:06:1f:1b:86:db:94:5e:77:63:07:90:
f3:26:cf:8e:be:3a:e8:cf:0f:b1:66:ed:a7:ff:ba:
f4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:D5:87:A9:90:84:AD:79:8E:EA:64:02:7F:BA:64:C4:E6:21:82
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PSTVh6mQhK15jupkAn-6ZMTmIYI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:84:77:49:e8:3a:30:44:29:f1:8c:c9:f1:c9:40:87:df:18:
f0:7c:f2:88:46:81:86:0e:0d:18:c7:d2:be:a5:5d:95:33:b7:
76:27:e2:d3:45:32:e2:5a:43:8c:23:92:38:0a:b6:c1:bd:fa:
8c:ab:e1:54:23:d2:58:86:74:12:07:c1:de:91:12:dd:6d:ed:
19:dd:39:07:85:80:54:01:b2:bb:33:f9:43:2c:a6:fb:f2:1d:
b3:51:e8:b6:93:26:70:bb:70:6b:cf:47:7d:f9:db:47:0f:16:
f4:51:4c:c2:15:7d:8d:6c:94:a4:45:18:57:92:8e:7a:f8:c1:
05:5c:99:52:31:69:0c:73:88:4e:f1:d7:04:dd:20:af:86:33:
e8:14:27:6c:1d:ec:9e:69:b1:83:17:55:2e:e2:5a:96:84:3f:
30:30:60:da:ed:42:5c:03:5e:6a:1b:4b:d2:2f:b0:20:38:16:
56:c0:f9:86:b2:c9:d9:cd:69:66:a9:d9:b8:97:75:a2:8f:fc:
d1:51:f7:b4:fa:bd:22:fd:9d:cb:4a:c6:a5:c8:d6:8b:d8:8c:
86:14:88:a6:44:b7:49:7c:62:43:fe:6e:57:60:91:4f:5e:24:
a2:08:10:e7:7c:ac:c2:9b:d2:1a:03:90:c7:4a:af:1b:5b:d3:
97:0a:a7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:14:09 2025 by rpki-client