Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/PTDL43crF04VvlsH-OtRsR9BYdU.roa
File: PTDL43crF04VvlsH-OtRsR9BYdU.roa (raw, json)
Hash identifier: xTcMHP0JpYin72wXlOTZ0qDdGN9hHK1EHkWTo/AKGtA=
Subject key identifier: 3D:30:CB:E3:77:2B:17:4E:15:BE:5B:07:F8:EB:51:B1:1F:41:61:D5
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 09A6
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PTDL43crF04VvlsH-OtRsR9BYdU.roa
Signing time: Mon 19 May 2025 22:38:14 +0000
ROA not before: Mon 19 May 2025 22:38:14 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 119.16.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2470 (0x9a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 19 22:38:14 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3D30CBE3772B174E15BE5B07F8EB51B11F4161D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:f9:46:ed:3a:80:28:09:f9:eb:f0:a5:b4:
19:7a:90:80:ac:d2:41:99:26:a7:09:af:45:c3:48:
30:e5:8f:be:af:4f:c7:f5:66:9d:02:3c:db:dd:1b:
16:e6:ae:6d:9d:0c:17:cd:d2:40:35:dd:52:10:f6:
a2:80:ae:2c:95:01:e6:12:08:df:2a:f6:95:46:85:
15:83:c1:90:64:55:2c:ff:53:e6:db:b7:e3:78:ae:
22:06:d6:aa:18:95:c9:f9:92:93:cb:46:99:69:aa:
b5:63:c8:e0:50:00:06:09:d4:04:a9:48:a0:4b:2c:
6f:68:d0:fd:dc:42:19:4c:98:85:9b:b2:8b:71:82:
55:fd:f5:8b:22:e2:46:24:68:fe:e7:1a:aa:1c:1a:
73:54:b0:be:8b:fa:8d:41:f1:4e:8d:e4:ac:d8:b6:
f6:63:60:4b:ed:38:61:6e:f2:37:1d:c3:7e:71:62:
80:d0:ae:89:fb:d1:a1:18:ba:72:88:88:0f:8e:6b:
ac:88:a1:76:0a:9a:70:7e:7e:89:bb:0e:90:ae:37:
4a:bb:67:6f:f9:57:5a:23:de:ca:44:ac:6f:37:63:
d6:97:e0:55:6c:ed:b3:4c:6d:61:65:3b:4c:0f:71:
63:27:82:54:a7:a7:5c:a4:ae:93:5e:64:7d:d3:d4:
f0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:30:CB:E3:77:2B:17:4E:15:BE:5B:07:F8:EB:51:B1:1F:41:61:D5
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/PTDL43crF04VvlsH-OtRsR9BYdU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.16.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:6f:5b:dc:3f:ee:22:66:39:85:64:1c:63:26:79:e1:ce:15:
8f:a7:7a:46:73:52:a8:23:e4:4e:76:53:48:34:84:21:cb:c8:
1e:6c:f9:39:e8:94:6c:fe:06:9c:c3:c3:98:98:93:ac:18:3a:
a3:8a:ca:8e:a7:4b:2e:02:f6:c2:49:17:58:88:49:1c:9b:8d:
76:ca:32:27:a4:4b:1a:98:31:06:66:af:4f:ff:ea:3f:e6:8d:
83:29:e0:92:95:f8:ca:fb:54:77:87:d3:4e:11:ce:8d:3e:36:
e2:6f:66:52:84:c1:14:09:cb:4c:34:8f:4a:17:47:b8:2d:9b:
4a:f4:1c:e5:64:f5:cb:1a:2e:2d:77:b7:6f:b6:e8:85:93:74:
51:80:d7:4c:a1:4e:6b:13:f3:c2:01:c5:d6:fc:c9:6c:1d:3c:
ab:4c:f3:54:fa:02:00:ef:dd:ac:29:93:a2:c1:46:89:95:77:
3e:8d:a2:dc:00:d9:1e:72:2b:1b:ec:98:7c:55:7a:27:fd:11:
ae:ae:71:43:81:bb:43:88:85:b4:ec:e7:d7:e2:05:d3:1b:82:
b3:75:3a:06:ef:18:2b:d2:3d:00:60:f5:be:f1:9b:d6:22:9e:
70:92:fc:b5:07:5e:a7:44:59:36:d7:50:82:b9:f0:42:b9:84:
fd:cf:09:4a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCaYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA1MTky
MjM4MTRaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKDNEMzBDQkUzNzcyQjE3
NEUxNUJFNUIwN0Y4RUI1MUIxMUY0MTYxRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1evlG7TqAKAn56/CltBl6kICs0kGZJqcJr0XDSDDlj76vT8f1
Zp0CPNvdGxbmrm2dDBfN0kA13VIQ9qKAriyVAeYSCN8q9pVGhRWDwZBkVSz/U+bb
t+N4riIG1qoYlcn5kpPLRplpqrVjyOBQAAYJ1ASpSKBLLG9o0P3cQhlMmIWbsotx
glX99Ysi4kYkaP7nGqocGnNUsL6L+o1B8U6N5KzYtvZjYEvtOGFu8jcdw35xYoDQ
ron70aEYunKIiA+Oa6yIoXYKmnB+fom7DpCuN0q7Z2/5V1oj3spErG83Y9aX4FVs
7bNMbWFlO0wPcWMnglSnp1ykrpNeZH3T1PAHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPTDL43crF04VvlsH+OtRsR9BYdUwHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni9QVERMNDNjckYwNFZ2bHNI
LU90UnNSOUJZZFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
dxAwDQYJKoZIhvcNAQELBQADggEBAEtvW9w/7iJmOYVkHGMmeeHOFY+nekZzUqgj
5E52U0g0hCHLyB5s+TnolGz+BpzDw5iYk6wYOqOKyo6nSy4C9sJJF1iISRybjXbK
MiekSxqYMQZmr0//6j/mjYMp4JKV+Mr7VHeH004Rzo0+NuJvZlKEwRQJy0w0j0oX
R7gtm0r0HOVk9csaLi13t2+26IWTdFGA10yhTmsT88IBxdb8yWwdPKtM81T6AgDv
3awpk6LBRomVdz6NotwA2R5yKxvsmHxVeif9Ea6ucUOBu0OIhbTs59fiBdMbgrN1
OgbvGCvSPQBg9b7xm9YinnCS/LUHXqdEWTbXUIK58EK5hP3PCUo=
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:13:57 2025 by rpki-client